github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

Java: JavadocTag does not contain multi-line JavadocText children Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3825 · Opened Jun 28, 2020
Java: Add predicate for getting ordered super interfaces Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/codeql#3818 · 3 comments · Opened Jun 26, 2020
LGTM.com - false positive Open

false-positive JS

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3811 · Opened Jun 25, 2020
CodeQL GitHub Action works on upstream but not on fork Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3799 · 4 comments · Opened Jun 25, 2020
LGTM.com - false positive - missed conditional increment of a variable Open

C++ false-positive

github/codeql#3791 · 1 comment · 1 assignee · Opened Jun 24, 2020
LGTM.com - false positive : Once ipdb is initialized and if i do CTRL-C, the code is reachable. Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3746 · 2 comments · Opened Jun 19, 2020
LGTM.com - false positive - on flow-js when annotating using a class Open

false-positive JS

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3745 · Opened Jun 19, 2020
LGTM.com - false positive: unable to infer presence of `__call__` overload Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3741 · 2 comments · Opened Jun 19, 2020
False positive: Confusing "... may be at an arbitrary position in the sanitized URL." Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3722 · 2 comments · 1 reaction · Opened Jun 15, 2020
Java: Member.getQualifiedName does not use qualified name of declaring type Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#3711 · Opened Jun 13, 2020
Taint is stuck in exception variable declaration of a catch clause: `catch(Exception e)` Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3710 · 1 comment · Opened Jun 13, 2020
Catch clauses should (maybe) not be enclosed by their try stmt Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3709 · Opened Jun 13, 2020
Statement encloses itself Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 30/100

github/codeql#3707 · 2 comments · 1 reaction · Opened Jun 13, 2020
Java: Modifier.getLocation() does not work Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3705 · Opened Jun 12, 2020
Java: Javadoc.getCommentedElement / Documentable.getJavadoc does not work for annotated elements Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3698 · Opened Jun 11, 2020
Java: Clarify that each line of block comment is separate JavadocText Open

Java question

Difficulty 1/5 Under an hour Newbie friendliness 45/100

github/codeql#3696 · Opened Jun 11, 2020
Java: Javadoc matches regular comments Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#3695 · Opened Jun 11, 2020
Java: Add TypeAccess predicate for finding out if access is fully qualified Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3649 · Opened Jun 8, 2020
Java: TypeAccess matches implicit access Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3648 · Opened Jun 8, 2020
Java: Class for inline javadoc tag Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#3647 · 2 comments · Opened Jun 8, 2020
Java: Comparing Location leads to incorrect results Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3644 · 2 comments · Opened Jun 8, 2020
Java: Add common base class for SwitchStmt and SwitchExpr Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/codeql#3642 · Opened Jun 8, 2020
LGTM.com - false positive Open

false-positive Java

Difficulty 3/5 1-2 days Newbie friendliness 30/100

github/codeql#3636 · Opened Jun 8, 2020
Java: Add ArrayTypeAccess C-style predicate Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#3624 · 2 comments · Opened Jun 4, 2020
Issue in labeling the correct place of the alert in sql injection queries Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3623 · 1 comment · Opened Jun 4, 2020
Java: LambdaExpr.getExprBody() parent is always ReturnStmt Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3605 · 3 comments · Opened Jun 2, 2020
Move `ValidatedVariable` barrier from default set to individual queries Open

enhancement Java

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#3590 · Opened May 29, 2020
LGTM.com - false positive: py/procedure-return-value-used Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3561 · 2 comments · Opened May 25, 2020
LGTM.com - false positive: Iteration over sequence, of class list, may also iterate over string. Open

false-positive Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#3536 · 1 comment · Opened May 21, 2020
LGTM.com - false positive: Java Set equals() Open

false-positive Java

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#3524 · 1 comment · Opened May 19, 2020
LGTM.com - false positive: constant-comparison with assignment on one side Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#3496 · Opened May 18, 2020
LGTM.com - false positive: for python methods in diamond inheritance Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3450 · 1 comment · Opened May 12, 2020
LGTM.com - false positive; The module 'urwid' imports itself Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3429 · 2 comments · 1 reaction · Opened May 7, 2020
Java: Add predicates for getting annotated types / TypeAccess Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3417 · 1 comment · Opened May 5, 2020
C++ false positive: return statement requested after a call to a [[noreturn]] function Open

C++ false-positive good first issue

github/codeql#3327 · 1 comment · 1 assignee · Opened Apr 23, 2020
LGTM.com - false positive - Python - except (Exception if condition else NeverRaise) Open

false-positive Python

github/codeql#3280 · 1 comment · 1 assignee · Opened Apr 17, 2020
Using "Value::named" search for call to "os.path.join" not working Open

Python question

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#3261 · 3 comments · Opened Apr 14, 2020
General issue - suppress warnings from codepath Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#3252 · 2 comments · 3 reactions · Opened Apr 10, 2020
LGTM.com - false positive User input sanitized in code called via annotations Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3251 · 1 comment · Opened Apr 10, 2020
LGTM.com - false positive from go/hardcoded-credentials Open

acknowledged backlog false-positive Go

github/codeql#9312 · 3 comments · 1 assignee · Opened Apr 3, 2020
Java: Nullness: LGTM.com - false positive Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3176 · 1 comment · Opened Mar 31, 2020
LGTM.com - false positive: not all domains are in URLs Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#3153 · Opened Mar 29, 2020
LGTM.com - false positive Open

C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#3134 · 1 comment · Opened Mar 26, 2020
LGTM.com - false positive Open

false-positive Python

github/codeql#3113 · 3 comments · 1 assignee · Opened Mar 24, 2020
Make TearDownMethod match more than JUnit 3.8 Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#3102 · 1 comment · Opened Mar 22, 2020
Match JUnit 5 in TestMethod, TestClass, AssertionMethod ... Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3101 · 1 comment · Opened Mar 22, 2020
LGTM.com - false positive when raising Optional guarded by flag Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3066 · Opened Mar 15, 2020
LGTM.com - false positive Multiplication result may overflow 'int' before it is converted to 'size_t'. Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#3015 · 4 comments · Opened Mar 8, 2020
LGTM.com - false positive C# if `is` followed by `as` Open

C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#2993 · 1 comment · Opened Mar 5, 2020
I cant find the java.naming.xxx class in codeql Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#2954 · 5 comments · Opened Mar 2, 2020

github/codeql

Get new issues in your inbox