github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

Java: `Array.getPackage()` (and `Array.getQualifiedName()`) cannot be used Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#7067 · Opened Nov 6, 2021
Implement queries to detect Trojan Source Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#7037 · 3 comments · 3 reactions · Opened Nov 2, 2021
LGTM.com - false positive for move and copy assignment operators not returning *this (C++) Open

acknowledged C++ false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 32/100

github/codeql#7035 · 2 comments · 2 reactions · Opened Nov 2, 2021
Does CodeQL support edits on call graph? Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#7013 · 1 comment · Opened Nov 1, 2021
Ruby parse error on valid Ruby code Open

acknowledged question Ruby

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#7005 · 1 comment · Opened Oct 29, 2021
LGTM.com - false positive - Unnecessary deletion of local variable Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#6953 · 2 comments · Opened Oct 25, 2021
LGTM.com - false positive Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6927 · 2 comments · Opened Oct 20, 2021
Javascript: How can I filter some dataflow results? Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6920 · 13 comments · Opened Oct 20, 2021
LGTM.com - false positive - Wrong name for an argument in a call Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6905 · Opened Oct 18, 2021
Why is src.zip not generated? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6875 · 5 comments · Opened Oct 14, 2021
error Unexpected C# extractor error: Unhandled literal type Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6874 · 7 comments · Opened Oct 13, 2021
How does codeql generate the dataflow ? Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#6851 · 2 comments · Opened Oct 11, 2021
[codeql-go]dependencies skipped while creating a database Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#6850 · Opened Oct 11, 2021
LGTM.com - false positive - py/unreachable-statement Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6848 · Opened Oct 10, 2021
General issue - "Loop variable capture" documentation Open

question

Difficulty 1/5 Under an hour Newbie friendliness 35/100

github/codeql#6847 · 2 comments · Opened Oct 9, 2021
LGTM.com - false positive – too pedantic on Python structural typing / Protocol Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6846 · Opened Oct 9, 2021
LGTM.com - false positive sanitization function removes the issue Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#6842 · Opened Oct 8, 2021
LGTM.com - false positive for cpp/toctou-race-condition Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6834 · 2 comments · Opened Oct 8, 2021
LGTM.com - false positive - Use of the return value of a procedure Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6827 · 2 comments · Opened Oct 6, 2021
LGTM.com - false positive This assignment to X is useless, since its value is never read. Open

C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6787 · 2 comments · Opened Oct 1, 2021
LGTM.com - false positive This assignment to is useless, since its value is never read. Open

C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6785 · 5 comments · Opened Oct 1, 2021
Codeql to detect CORS misconfiguration in go webapp Open

Go

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#9303 · 6 comments · Opened Sep 25, 2021
LGTM.com - false positive - File is opened but is not closed. Open

acknowledged false-positive Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#6751 · 1 comment · Opened Sep 24, 2021
LGTM.com - false positive - Illegal class 'NoneType' raised Open

acknowledged false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#6746 · 1 comment · Opened Sep 24, 2021
LGTM.com - false positive - may not be initialized properly as subclass.init is not called Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#6737 · 3 comments · Opened Sep 22, 2021
Python: UUID storage from dictionary of Python IDs Open

acknowledged false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6726 · 1 comment · Opened Sep 21, 2021
Ignore Jekyll wrapping in JS files Open

acknowledged enhancement JS

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#6642 · 2 comments · Opened Sep 8, 2021
Github Code Scanning - false positive: Contradictory type checks Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6638 · 1 comment · Opened Sep 7, 2021
LGTM.com - false positive - Import is not used Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 15/100

github/codeql#6623 · 1 comment · Opened Sep 5, 2021
Java: `PrimitiveType.getADefaultValue()` is misleading and might not work correctly Open

acknowledged Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6615 · 2 comments · Opened Sep 4, 2021
LGTM.com - false positive - illegal raise of NoneType Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#6573 · 1 comment · Opened Aug 31, 2021
LGTM.com - false positive - unnecessary null check C# Open

acknowledged C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6554 · 1 comment · Opened Aug 26, 2021
OverlappingFileLockException and permission issue Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6543 · 4 comments · Opened Aug 24, 2021
LGTM.com - false positive - @classmethod not seen Open

false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6527 · 2 comments · Opened Aug 22, 2021
LGTM.com - false positive - polynomial-redos Open

false-positive JS

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6525 · 5 comments · Opened Aug 19, 2021
CodeQL - false positive - JPL Rule 24 Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 32/100

github/codeql#6522 · 9 comments · Opened Aug 19, 2021
LGTM.com - false positive - float is numbers.Number Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#6519 · 2 comments · Opened Aug 19, 2021
LGTM.com - false positive - classmethod() vs. @classmethod Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#6518 · 1 comment · Opened Aug 19, 2021
LGTM.com - false positive - 'noqa' suppression comments Open

false-positive Python

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#6517 · 4 comments · Opened Aug 19, 2021
LGTM.com - false positive: null-check in LINQ Query Syntax causes inference of possible null value Open

acknowledged C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6512 · 2 comments · Opened Aug 18, 2021
LGTM.com - false positive (captured variable) Open

acknowledged false-positive not security Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#6457 · 1 comment · Opened Aug 9, 2021
Java: `Assignment` does not include `UnaryAssignExpr` Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6446 · 1 comment · Opened Aug 8, 2021
LGTM.com - false positive - Sensitive data (id) is logged Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6444 · 4 comments · Opened Aug 8, 2021
LGTM.com - false positive - Logging sensitive information Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6442 · Opened Aug 7, 2021
CodeQL never runs Open

question

Difficulty 5/5 Over a week Newbie friendliness 10/100

github/codeql#6440 · 2 comments · Opened Aug 6, 2021
How to configure the index-files step? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6437 · 2 comments · Opened Aug 6, 2021
LGTM.com - false positive - Regex handling Path Injection Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6436 · 2 comments · Opened Aug 6, 2021
Question on directory structure Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#6432 · Opened Aug 5, 2021
LGTM.com - false positive Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#6429 · Opened Aug 5, 2021
Java: Consider some support for backwards flow through writer wrappers Open

enhancement Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6402 · Opened Aug 3, 2021

github/codeql

Get new issues in your inbox