github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

[C++] Alias analysis failure on pointer to local variable Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#18101 · 1 comment · Opened Nov 25, 2024
[C++] Control Flow Influence not detected interprocedurally Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#18100 · 5 comments · Opened Nov 25, 2024
[C++] Fails to detect control flow influence of nested “if” Open

question

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql#18099 · 5 comments · Opened Nov 25, 2024
[C++] [Question] How to detect taint on elements in a collection Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#18098 · 8 comments · Opened Nov 25, 2024
[Java] - Limiting Flows Based on Patterns Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#18050 · 11 comments · Opened Nov 20, 2024
Limit Cache Size on Disk Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#18045 · 10 comments · Opened Nov 20, 2024
Error: Could not auto-detect a suitable build method Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#17983 · 1 comment · Opened Nov 14, 2024
CodeQL emits error when binlog does not contain compilation Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17981 · 6 comments · Opened Nov 13, 2024
CodeQL miss to detect a vulnerability because of irrelvant code? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17957 · 4 comments · Opened Nov 11, 2024
UX: interrupt codeql database analyze should write the already computed results to the output file Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17930 · 2 comments · Opened Nov 7, 2024
UX: ability to influence the order of queries execution order in a query suite/pack Open

question

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/codeql#17929 · 2 comments · Opened Nov 7, 2024
UX: codeql database analyze should display timestamps Open

question

Difficulty 3/5 1-2 days Newbie friendliness 38/100

github/codeql#17928 · 1 comment · Opened Nov 7, 2024
Add support for PowerShell as a supported language in CodeQL Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#17927 · 3 comments · 1 reaction · Opened Nov 7, 2024
When I use 'codeql database create ./ --language="go"' to create a database, the yaml files in the project will not be included in the database Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17916 · 1 comment · Opened Nov 6, 2024
TypeScript extraction hangs Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql#17827 · 3 comments · Opened Oct 23, 2024
Java Get Assignment Node In Dataflow Path Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17745 · 2 comments · Opened Oct 11, 2024
C++: Total number of baseline files limit Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17743 · 29 comments · Opened Oct 11, 2024
Support for Svelte Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#17638 · 1 comment · 2 reactions · Opened Oct 1, 2024
CleartextLogging.qhelp needs more help Open

Difficulty 1/5 Under an hour Newbie friendliness 48/100

github/codeql#17574 · 1 comment · Opened Sep 25, 2024
Go: zip-slip FP / missed a zip-slip guard in argoproj/argo-cd Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17573 · 3 comments · Opened Sep 25, 2024
Update from Go 1.20 to 1.22 causes CodeQL to no longer detect that we built Go code Open

Go question

github/codeql#17526 · 6 comments · 1 assignee · Opened Sep 19, 2024
Java: Call Graph Open

Java question

github/codeql#17457 · 7 comments · 1 assignee · Opened Sep 13, 2024
False positive - Log injection is not mitigated via replace with Regex argument in Kotlin Open

false-positive Kotlin

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17423 · 1 comment · Opened Sep 10, 2024
isSanitizerGuard works incorrectly when the function name startwith "isValid" Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17393 · 1 comment · Opened Sep 6, 2024
False positive "Comparison result is always the same" because of incorrect sizeof evaluation Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17343 · 3 comments · Opened Aug 30, 2024
Chromium: `We have exhausted all available IDs in the disk pool` Open

bug

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#17332 · 12 comments · Opened Aug 29, 2024
Potential false positive for "Uncontrolled data used in path expression" alert Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17226 · 3 comments · Opened Aug 14, 2024
Writing a query to find declarations of nested structs in Golang. Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#17134 · 5 comments · 1 reaction · Opened Aug 2, 2024
Entra ID as SAML IdP Causes CodeQL to Fail with Self-Signed Certificate Found in Certificate Chain Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#17082 · 8 comments · 1 reaction · Opened Jul 26, 2024
VSCode extension AST viewer tab not showing AST for some files. Open

Go question

github/codeql#17068 · 3 comments · 1 assignee · Opened Jul 25, 2024
`codeql resolve qlpacks` is reporting errors for duplicated packs from different languages even though it is not a problem Open

acknowledged CLI

Difficulty 3/5 1-2 days Newbie friendliness 42/100

github/codeql#17059 · 8 comments · Opened Jul 24, 2024
Java: CodeQL and chill missing result Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#17045 · 2 comments · Opened Jul 23, 2024
Confused about the query time Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#17022 · 1 comment · Opened Jul 19, 2024
Python: Local/Global dataflow analysis not tracing class field? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17021 · 3 comments · Opened Jul 19, 2024
Python: Why global dataflow not tracking `endpoints` in function `Service.start()`? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#17019 · 5 comments · Opened Jul 19, 2024
Python: False positive: Tuple Destructuring Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/codeql#17008 · 2 comments · Opened Jul 17, 2024
CodeQL seems to produce many warnings when compiling source that includes AVX-512 extensions Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#16999 · 1 comment · Opened Jul 16, 2024
False positive on "Query built by concatenation with a possibly-untrusted string" - "java/concatenated-sql-query" Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16984 · 1 comment · Opened Jul 15, 2024
False positive "Uncontrolled data used in path expression" in C code Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#16983 · 4 comments · Opened Jul 15, 2024
Python: How to find type information for a specific variable or object Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#16961 · 4 comments · Opened Jul 11, 2024
False positive - Java - Server-side request forgery - When type converted to `File` Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16949 · 1 comment · Opened Jul 10, 2024
False positive: Ruby: Kernel Open when File existence guard is present Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16943 · 3 comments · Opened Jul 9, 2024
Control Flow Analysis Visualization: Result generated by CodeQL can not understand well by human Open

question

Difficulty 5/5 Over a week Newbie friendliness 20/100

github/codeql#16920 · 2 comments · Opened Jul 8, 2024
C++ extractor giving multiple compilation errors when trying to compile the linux kernel Open

C++ question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16908 · 17 comments · Opened Jul 4, 2024
Information exposure alert on intentional input validation exception Open

false-positive Java

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#16867 · 3 comments · Opened Jun 27, 2024
Question: How to make getType() work in TypeScript Open

question

Difficulty 2/5 1-3 hours Newbie friendliness 30/100

github/codeql#16849 · 5 comments · Opened Jun 26, 2024
Don't divide CODEQL_RAM in half Open

enhancement JS question

github/codeql#16780 · 10 comments · 1 assignee · Opened Jun 18, 2024
False positive: email content injection Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16699 · 1 comment · Opened Jun 7, 2024
Linux Arm64 support Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#16692 · 3 comments · 4 reactions · Opened Jun 6, 2024
Flaky [MethodCall]<Call to unknown method> in databases created by linux/osx binary Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#16689 · 3 comments · Opened Jun 6, 2024

github/codeql

Get new issues in your inbox