github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

False positive results of Finding spurious @param tags Open

question

github/codeql#4870 · 6 comments · 1 assignee · Opened Dec 23, 2020
Java Code Scanning and Semmle Query Suites Allows for Trusting All Certificates in SSL Connection Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4852 · 3 comments · Opened Dec 20, 2020
Java Code Scanning and Semmle LGTM Query Suites Allows for Weak Crypto with BlowFish Key size < 128 Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4851 · 1 comment · Opened Dec 20, 2020
General issue Open

question Stale

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#4843 · 4 comments · Opened Dec 17, 2020
Java: Extend JAXB.qll to cover Jakarta XML Binding Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#4840 · 4 comments · Opened Dec 16, 2020
LGTM.com - false positive - XXX may be at an arbitrary position in the sanitized URL. Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4817 · 1 comment · Opened Dec 13, 2020
CodeQL incorrect documentation encourages vulnerable Cryptographic Java API Usage Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#4804 · 4 comments · Opened Dec 9, 2020
CodeQL for Stack Overflow Snippets Open

Java question Stale

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#4788 · 3 comments · Opened Dec 7, 2020
LGTM.com - false positive (python) Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4755 · 1 comment · Opened Nov 30, 2020
Tracing test code Open

Go

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#9309 · Opened Nov 25, 2020
LGTM.com - false positive (Python regex in verbose mode) Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4707 · 8 comments · Opened Nov 23, 2020
LGTM.com - false positive for Python3 script: Keyword argument '...' is not a supported parameter name of function .... Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4697 · 1 comment · Opened Nov 19, 2020
Java: TaintTrackingUtil.qll ObjectInputStream.read% taint is faulty Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#4591 · 1 comment · Opened Nov 2, 2020
Investigate running generic code generation commands in addition to build steps Open

Go good first issue

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#9310 · 2 comments · Opened Oct 28, 2020
General issue : false negative during evaluation of UseBraces Open

question Stale

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4551 · 7 comments · Opened Oct 26, 2020
Java: queries about user-controlled URLs should be sanitized by enforcing a prefix Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4530 · 7 comments · 2 reactions · Opened Oct 21, 2020
LGTM fails on Android Build-tools 30 Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4470 · 1 comment · 1 reaction · Opened Oct 14, 2020
LGTM.com - false positive Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4466 · 1 comment · Opened Oct 13, 2020
Questions to workflow integration Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#4426 · 4 comments · 1 reaction · Opened Oct 7, 2020
LGTM.com - false positive (decrementing uint8_t) Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4422 · 4 comments · Opened Oct 6, 2020
LGTM.com - false positive: signature mismatch for python-markup's InlineProcessor handleMatch() Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4373 · 1 comment · Opened Sep 30, 2020
ERROR: Could not resolve module javascript. Open

JS question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#4280 · 1 comment · 3 reactions · Opened Sep 16, 2020
LGTM.com - false positive when using imports with TYPE_CHECKING Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4258 · 2 comments · 1 reaction · Opened Sep 14, 2020
Python: LGTM.com - false positive 'Call to a non-callable of builtin-class module.' Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#4228 · 1 comment · Opened Sep 8, 2020
LGTM.com - false positive - Non-callable class errors for classes that inherit from callable torch.nn.Module Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4183 · 2 comments · Opened Sep 2, 2020
LGTM.com - false positive with null checks in C# Open

C# false-positive

github/codeql#4181 · 1 assignee · Opened Sep 1, 2020
Weird(?) behavior of `Expr.getType` Open

C++ enhancement

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4180 · 1 comment · Opened Sep 1, 2020
PHPStorm extension Open

question

github/codeql#4168 · 2 comments · 4 reactions · 1 assignee · Opened Aug 30, 2020
LGTM.com - false positive: detect zsh autocompletion as python Open

false-positive Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#4160 · 1 comment · Opened Aug 28, 2020
Suggestion: toHex method for int Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#4145 · 2 comments · 1 reaction · Opened Aug 27, 2020
Java: Add Import.getATypeImport Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#4119 · Opened Aug 23, 2020
Not compatible with pyenv-win or other Python environments without PY.EXE Open

Python

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#4303 · 3 comments · Opened Aug 20, 2020
LGTM.com - false positive for C++ missing return statement Open

C++ false-positive

github/codeql#4105 · 3 comments · 1 assignee · Opened Aug 19, 2020
LGTM.com - false positive for extending java.io.OutputStream Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#4101 · 1 reaction · Opened Aug 18, 2020
LGTM.com - Java UnsafeTlsVersion false positive Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4059 · 3 comments · 1 reaction · Opened Aug 12, 2020
LGTM.com - false positive for Zip slip Open

false-positive Java

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#4035 · Opened Aug 7, 2020
LGTM.com - false positive Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#4024 · 2 comments · Opened Aug 6, 2020
[Java] False negatives for "Double-checked locking is not thread-safe" Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#4007 · 2 comments · Opened Aug 3, 2020
[Java] WildcardTypeAccess.hasNoBound() returns wrong result for array bounds Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql#4005 · Opened Aug 2, 2020
LGTM.com - false positive Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#3971 · 2 comments · Opened Jul 23, 2020
LGTM.com - false positive - Python: Wrong number of arguments for format Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3970 · 2 comments · Opened Jul 22, 2020
Context/Path Sensitivity of Different Modules Open

question

Difficulty 5/5 Over a week Newbie friendliness 15/100

github/codeql#3967 · Opened Jul 22, 2020
JavaScript Webpack Vulnerability Open

JS question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#3963 · 1 comment · Opened Jul 19, 2020
XML in javascript hasn't been written?[QUESTION][XML] Open

JS question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#3949 · Opened Jul 14, 2020
Java: Clarify that Expr.getLocation does not include parentheses Open

Java question

Difficulty 1/5 Under an hour Newbie friendliness 45/100

github/codeql#3908 · Opened Jul 6, 2020
Java: Improve "Learning CodeQL" docs Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3903 · Opened Jul 5, 2020
LGTM.com - false positive [py/redundant-comparison] Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3885 · 5 comments · Opened Jul 3, 2020
can codeql analyse java rt.jar source code? Open

Difficulty 3/5 1-2 days Newbie friendliness 30/100

github/codeql#4304 · 10 comments · Opened Jun 30, 2020
Java: JavadocText does not exist for empty block comment / javadoc lines Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#3827 · Opened Jun 28, 2020
Java: Some JavadocTag line numbers are wrong Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#3826 · Opened Jun 28, 2020

github/codeql

Get new issues in your inbox