github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

Create database failed with "diagnostic.trap.gz, 22593: java.io.EOFException: Unexpected end of ZLIB input stream" Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#11829 · 9 comments · 2 reactions · Opened Jan 6, 2023
CodeQL for unity Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 15/100

github/codeql#11791 · 6 comments · 4 reactions · Opened Dec 31, 2022
CodeQL reports incorrect struct size for std::function Open

C++ question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11790 · 6 comments · Opened Dec 30, 2022
python taint tracking doesn't work with namespace packages properly Open

bug Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#11780 · 6 comments · Opened Dec 21, 2022
I have setup a project to test the capability of CodeQL，to test taint tracking ablitity Open

C++ question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#11752 · 24 comments · Opened Dec 20, 2022
Explanation of ”Comparison result is always the same“ in PR is technically correct, but unclear Open

acknowledged C++ question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#11744 · 3 comments · Opened Dec 19, 2022
[bug] codeql duplicates some graph nodes in bqrs while generating cpp AST using a kind=graph query Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11685 · 1 comment · Opened Dec 14, 2022
ImproperCodeSanitization is much slower than other queries Open

question

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/codeql#11679 · 3 comments · Opened Dec 13, 2022
Go: go/log-injection produces false positives for logrus when sanitising formatters are used Open

false-positive Go

github/codeql#11657 · 4 comments · 1 reaction · 1 assignee · Opened Dec 12, 2022
[Java] "Deserialization of user-controlled data" is overly broad to be useful to end users Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#11603 · 11 comments · Opened Dec 7, 2022
Ruby: Traditional if-else not detected as `StringConstArrayInclusionCallBarrier` compared to conditional assignment. Open

question Ruby

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11558 · 2 comments · Opened Dec 4, 2022
False positives - cpp/unbounded-write Open

acknowledged C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11557 · 3 comments · Opened Dec 4, 2022
False positive: Multiplication result converted to larger type Open

acknowledged false-positive

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#11556 · 4 comments · 1 reaction · Opened Dec 3, 2022
False positive: "File is not always closed" (Python) Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11533 · Opened Dec 1, 2022
Local variable address stored in non-local memory (False positive) Open

false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11528 · 2 comments · Opened Dec 1, 2022
Code Scanning support for SARIF message string lookup in uploaded logs Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11512 · 7 comments · Opened Dec 1, 2022
General issue (No source code was seen and extracted to C:\***\DB-codeql) Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#11476 · 18 comments · Opened Nov 29, 2022
Java: Some expressions have `<any>` as type Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#11442 · 6 comments · Opened Nov 27, 2022
Can Codeql be used to extract backward slice for Java? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#11440 · 1 comment · Opened Nov 26, 2022
CodeQL is missing an inline mechanism to suppress warnings Open

question

github/codeql#11427 · 31 comments · 77 reactions · 1 assignee · Opened Nov 25, 2022
[False positive] `py/call-to-non-callable` on _decorated_ `__call__` magic methods Open

acknowledged false-positive not security Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#11408 · 1 comment · 1 reaction · Opened Nov 24, 2022
[False positive] `py/unused-local-variable` on SQLAlchemy model definition classes Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11407 · 4 comments · 1 reaction · Opened Nov 24, 2022
False positive – "Statement has no effect" for Python type hint ellipsis Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 55/100

github/codeql#11351 · 7 comments · 7 reactions · Opened Nov 21, 2022
CodeQL: False positive for uninitialized variable (via import) in Python Open

acknowledged false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#11313 · 8 comments · Opened Nov 16, 2022
Java: For some projects JDK classes have location under `sourceLocationPrefix` Open

acknowledged Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11265 · 1 comment · Opened Nov 15, 2022
LGTM.com - false positive "Statement has no effect" for Python await Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#11235 · 2 comments · 2 reactions · Opened Nov 11, 2022
Indent about codeql vscode extension Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#11225 · 1 comment · Opened Nov 11, 2022
Issue templates should be made more relevant to people Open

question

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

github/codeql#11222 · 1 comment · Opened Nov 10, 2022
C++ view AST / printAST.ql performance analysis Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#11221 · 1 comment · Opened Nov 10, 2022
false positive - cpp/unused-static-function Open

acknowledged false-positive

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#11219 · 6 comments · Opened Nov 10, 2022
General issue - cpp/uninitialized-local should provide at least 1 path that leaves variable uninitialized (preferably all if possible) Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11216 · 1 comment · Opened Nov 10, 2022
Failed to create database from node module Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#11102 · 6 comments · Opened Nov 3, 2022
C/C++ question: taintTracking can not identify indirect use of Array pointer in a structure Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#11093 · 2 comments · Opened Nov 3, 2022
Can't find dataflow for js in Vue module Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#11043 · Opened Oct 31, 2022
Code scanning results should be visible to everyone, not only those with write permission on the repository Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#11021 · 5 comments · Opened Oct 27, 2022
(java,bug)SpringRequestMappingMethod::getValue does not return when a constant in jar is used Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#10989 · 7 comments · Opened Oct 26, 2022
Platform support request: FreeBSD Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#10982 · 1 comment · 2 reactions · Opened Oct 26, 2022
Missing data flow Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#10980 · 2 comments · Opened Oct 26, 2022
Forks of this repository spam contributors with failing CI jobs Open

question

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#10942 · 2 comments · Opened Oct 22, 2022
False positive - Log entries created from user input Open

Go question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#10922 · 2 comments · Opened Oct 21, 2022
Java: unreasonable flow Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#10828 · 13 comments · Opened Oct 14, 2022
Add hyphenation rule to style guide Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

github/codeql#10800 · 1 comment · Opened Oct 12, 2022
CodeQL False Positive? java/xxe with javax.xml.transform.Transformer Open

false-positive question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#10766 · 5 comments · Opened Oct 11, 2022
Java CodeQL hangs for hazelcast repository Open

acknowledged Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#10765 · 1 comment · Opened Oct 11, 2022
General issue: getting error code 100 after increasing CodeQL memory space to 16 GB RAM Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#10703 · 3 comments · 1 reaction · Opened Oct 6, 2022
How to filter the result of hasFlowPath API Open

question

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/codeql#10659 · 3 comments · Opened Oct 3, 2022
Custom Maven Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#10643 · 1 comment · Opened Sep 30, 2022
LGTM.com - false positive because of setter in python Open

acknowledged false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#10587 · 1 comment · Opened Sep 27, 2022
multiple databases Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#10582 · 3 comments · Opened Sep 27, 2022
Wrong global dataflow analyse in C Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#10571 · 2 comments · Opened Sep 26, 2022

github/codeql

Get new issues in your inbox