github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

CodeQL for Ruby: false alert for `URI.parse` Open

bug false-positive Ruby

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#9232 · 2 comments · Opened May 20, 2022
LGTM.com - false positive - Zip Slip when guard `FileNameUtils#normalize` is used Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#9205 · 3 comments · Opened May 18, 2022
FP? JS import assertions Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql#9104 · 1 reaction · Opened May 10, 2022
JS: Atomic group polyfill not detected as a ReDOS mitigation Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#9062 · 3 comments · Opened May 8, 2022
Codeql database analyze on CLI is stuck Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#9037 · 1 comment · Opened May 4, 2022
CatastrophicError does not include context information Open

question

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql#9000 · Opened May 1, 2022
new M1 Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#8992 · 1 comment · Opened May 1, 2022
False Positive - Mismatch in multiple assignment Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8991 · 8 comments · Opened May 1, 2022
LGTM.com - Missing Vulnerability Path Steps in LGTM render Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8976 · 2 comments · Opened Apr 29, 2022
False Negative with https://github.com/robmoffat/codeql-vuln-blog Open

Python question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8880 · 6 comments · Opened Apr 26, 2022
Missing size for typedef Open

bug C++

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8805 · Opened Apr 21, 2022
LGTM.com - false positive - py/missing-equals Open

acknowledged false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8804 · 1 comment · Opened Apr 21, 2022
LGTM.com - false positive Open

acknowledged false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#8803 · 1 comment · Opened Apr 21, 2022
LGTM.com - false positive Open

acknowledged C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8776 · 3 comments · Opened Apr 19, 2022
LGTM.com - false positive Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#8768 · 2 comments · Opened Apr 17, 2022
Feature: compare results from two databases Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8767 · 1 comment · Opened Apr 17, 2022
No scan results Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8764 · 6 comments · Opened Apr 17, 2022
LGTM.com - false positive `js/trivial-conditional` Open

false-positive JS not security

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8754 · 2 comments · Opened Apr 15, 2022
LGTM.com - false positive `py/member-test-non-container` Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8725 · 2 comments · Opened Apr 12, 2022
LGTM.com - false positive `unreachable statement` for numpy boolean conversion Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8714 · 5 comments · Opened Apr 10, 2022
LGTM.com - false positive `unhashable` alert indexing list with slice Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8711 · 3 comments · Opened Apr 10, 2022
java: false positive: javax.validation.constraints are not identified as input validation Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#8705 · 8 comments · Opened Apr 8, 2022
Better explain how to exclude paths for compiled languages Open

question

Difficulty 2/5 Half a day Newbie friendliness 48/100

github/codeql#8689 · 9 comments · 10 reactions · Opened Apr 7, 2022
Java: Support `CompileTimeConstantExpr` for constant fields from compiled classes Open

enhancement Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8688 · 1 comment · Opened Apr 7, 2022
Feature request: Cross-database query Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8652 · 1 comment · 6 reactions · Opened Apr 2, 2022
Java: Make `Annotatable` abstract / refine `Annotation.getAnnotatedElement()` Open

question

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/codeql#8647 · 1 comment · Opened Apr 2, 2022
CodeQL: Support multiple types for `instanceof` Open

CLI

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/codeql#8662 · 3 comments · Opened Apr 2, 2022
Java: `ArrayInit.getInit` has indices < 0 for annotations Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#8645 · 3 comments · Opened Apr 2, 2022
LGTM.com - false positive Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8633 · 1 comment · Opened Mar 31, 2022
LGTM.com: Duplicate paths are listed multiple times Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#8632 · 1 comment · Opened Mar 31, 2022
cs/useless-cast-to-self - false positive Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql#8627 · 5 comments · Opened Mar 31, 2022
How can I "sanitize" paths where a variable is passed to a sanitization function, but the path doesn't contain the result of the sanitization function? Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#8568 · 1 comment · Opened Mar 26, 2022
[Python][Questions] CodeQL security query is not able to detect CWE from given bad example in repository. Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8555 · Opened Mar 25, 2022
LGTM.com - false positive - [cs/dereferenced-value-may-be-null] Open

C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#8505 · 2 comments · Opened Mar 20, 2022
[CPP][Questions]No effective API to qeury macro used in function parameter declaration Open

C++ question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8497 · 4 comments · Opened Mar 19, 2022
LGTM.com - false positive: The 'const' modifier has no effect on return types. The 'const' modifying the return type can be removed. Open

C++ false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#8488 · 1 comment · Opened Mar 18, 2022
LGTM.com - false positive: 'Function create should return a value of type fix but does not return a value here' Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8487 · 1 comment · Opened Mar 18, 2022
new expression parsing failure Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8467 · 6 comments · Opened Mar 16, 2022
How to extract source files when using a special compiler (e.g. TMS320C2000 C/C++ Compiler)? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8453 · 18 comments · Opened Mar 15, 2022
False Positive: md5(gravatar) marked as insecure Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#8383 · 2 comments · Opened Mar 9, 2022
How to make a call graph for a function in C/C++? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8376 · 2 comments · Opened Mar 8, 2022
Python codeql analysis hangs Open

Python question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#8353 · 4 comments · Opened Mar 7, 2022
How to make a database of a very large codebase very quickly? Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#8342 · Opened Mar 5, 2022
[JS] Can't use specific path nodes of Configuration1 in Configuration2 definition (throws non-monotonic recursion error) Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#8341 · Opened Mar 5, 2022
Java: `hasSubtype` / `getASubtype` does not work correctly for generic types Open

question

github/codeql#8339 · 2 comments · 1 assignee · Opened Mar 4, 2022
Add support for Java Project Reactor Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8338 · 3 reactions · Opened Mar 4, 2022
[JS] False Negative : Unsafe Html Construction Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#8274 · 7 comments · Opened Feb 28, 2022
Too many arguments for string format. - false positive Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 32/100

github/codeql#8070 · 1 comment · Opened Feb 19, 2022
LGTM.com - false positive with relative import Open

false-positive not security Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#7978 · 1 comment · Opened Feb 11, 2022
Provide API for merging/stitching two paths together in the standard library Open

question

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/codeql#7938 · 1 comment · Opened Feb 10, 2022

github/codeql

Get new issues in your inbox