github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

Encountering a Problem with CodeQL-ruby Query during the Execution Phase of the epsilonStar Function Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#15199 · 4 comments · Opened Dec 23, 2023
Error in creating a new java pro database Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#15198 · 4 comments · Opened Dec 23, 2023
CodeQL integration with Visual Studio 2022 Open

question

Difficulty 5/5 Over a week Newbie friendliness 15/100

github/codeql#15196 · Opened Dec 22, 2023
IRGuardCondition failure to detect NULL condition Open

C++ question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#15186 · 14 comments · Opened Dec 21, 2023
Incomplete documentation for cs/web/broad-cookie-domain Open

C# documentation

Difficulty 1/5 Under an hour Newbie friendliness 45/100

github/codeql#15169 · 1 comment · Opened Dec 19, 2023
False positive: cs/web/broad-cookie-domain for Domain = null or "" Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 48/100

github/codeql#15168 · Opened Dec 19, 2023
C#: Missing modelling of Newtonsoft.Json StringEscapeHandling Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#15155 · Opened Dec 19, 2023
C#: Azure Function HttpTrigger SQL Injection is not being detected Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#15102 · 5 comments · Opened Dec 14, 2023
False positive: it is valid to escape $ in javascript template string syntax Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 38/100

github/codeql#15077 · Opened Dec 12, 2023
General issue [Azure DevOps Pipeline]: pipeline is stuck at "Starting evaluation of codeql/csharp-queries/Telemetry/UnsupportedExternalAPIs.ql." step Open

question

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#15059 · 8 comments · 1 reaction · Opened Dec 10, 2023
False positive: HTTP response splitting Open

false-positive

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#15056 · 6 comments · Opened Dec 9, 2023
False positive: XSS when MimeType.TEXT has been set Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#15055 · 1 comment · Opened Dec 9, 2023
Improve `cpp/wrong-type-format-argument` by adding correct formatting specifier Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql#15028 · 2 comments · Opened Dec 6, 2023
CodeQL adds redundant slash to upload sarif file endpoint Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#15020 · 17 comments · Opened Dec 6, 2023
Getting error while creating codeQL Database for C# language Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#15006 · 6 comments · Opened Dec 5, 2023
C++: Return statement inside Guard Block Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#15001 · 5 comments · Opened Dec 5, 2023
cpp/memory-may-not-be-freed is not in security-and-quality suite Open

question

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

github/codeql#14955 · 1 comment · Opened Nov 30, 2023
General issue Python:Unable to recognize calling a method through an instance member of a class Open

acknowledged Python question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14899 · 6 comments · Opened Nov 23, 2023
How can I use codeql cli without metadata? Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#14872 · 1 comment · Opened Nov 21, 2023
A typedef defined with extern "C" prevents CodeQL from finding the TypdefType of a C++ member function's FunctionDeclarationEntry Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14869 · 2 comments · Opened Nov 21, 2023
General issue - CodeQL exiting with exit code 2 Open

question

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql#14866 · 9 comments · 3 reactions · Opened Nov 21, 2023
Python : Unable to follow taint through indirect calls Open

acknowledged Python question

github/codeql#14842 · 3 comments · 1 assignee · Opened Nov 20, 2023
False positive: Static field written by instance method by Interlocked API Open

acknowledged C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#14840 · 1 comment · Opened Nov 18, 2023
False positive: Missed 'readonly' opportunity for field used by Interlocked API Open

acknowledged C# false-positive not security

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14839 · 1 comment · Opened Nov 18, 2023
Few questions about semmle-extractor-options Open

question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#14826 · 4 comments · Opened Nov 16, 2023
Extractors/DIL source code Open

question

Difficulty 1/5 Under an hour Newbie friendliness 20/100

github/codeql#14762 · 3 comments · Opened Nov 13, 2023
False positive - tuple unpacking bracket detected as variable Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14753 · 1 comment · Opened Nov 12, 2023
False positive: Go x, _ := strconv.ParseUint(,, strconv.IntSize-1); int(x) Open

false-positive Go

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14733 · 3 comments · Opened Nov 9, 2023
codeql fails with exit code 32 for c language analysis under the macOS environment Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#14703 · 6 comments · Opened Nov 7, 2023
False positive: Python - Deserialization of user-controlled data Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14685 · Opened Nov 5, 2023
False positive - Ruby (on Rails) - SQL query built from user-controlled sources Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14670 · 3 comments · Opened Nov 2, 2023
False positive - C# Constant Condition Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#14641 · 1 comment · Opened Oct 31, 2023
Java: Make it more explicit when CodeQL classes and predicates only apply to Kotlin Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#14556 · 2 comments · 1 reaction · Opened Oct 21, 2023
False positive - Ruby on Rails: SQL query built from user-controlled sources Open

acknowledged false-positive Ruby

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14546 · 2 comments · Opened Oct 19, 2023
gradle: False positives from generated code from the version catalog feature Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14530 · 3 comments · Opened Oct 17, 2023
Error downloading/installing codeql cpp-queries package Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14492 · 5 comments · Opened Oct 13, 2023
Does C++ extractor support to process code with unity build? Open

acknowledged question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14479 · 15 comments · Opened Oct 12, 2023
False positive - Unused static function Open

acknowledged false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14371 · 1 comment · Opened Oct 4, 2023
About c++ CWE-022 example files, CWE-022 ql file does not seem to detect vulnerabilities. Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14359 · 2 comments · Opened Oct 3, 2023
How change SensitiveDataHeuristics.qll to find my own secrets? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14356 · 1 comment · Opened Oct 2, 2023
Certain syntaxes in ruby cause extraction errors Open

acknowledged question Ruby

Difficulty 3/5 1-2 days Newbie friendliness 38/100

github/codeql#14279 · 2 comments · 6 reactions · Opened Sep 21, 2023
Preserving taint through arithmetic operations in Java Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14233 · 4 comments · Opened Sep 15, 2023
Use Specific Python Virtual Environment Dependency Open

Python question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#14187 · 4 comments · Opened Sep 12, 2023
False positive - when json.Marshal output is used - cant result in "Potentially unsafe quoting" Open

acknowledged false-positive Go

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14159 · 3 comments · Opened Sep 7, 2023
Java: CodeQL does not detect SSL certificate validation vulnerabilities in Apache HttpComponents Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14156 · 3 comments · Opened Sep 6, 2023
Incorrect escaping of SARIF message.text Open

question

github/codeql#14128 · 1 comment · 1 assignee · Opened Sep 4, 2023
Size of CodeQL binary distribution has almost trippled since 2021 Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#14125 · 1 comment · Opened Sep 3, 2023
Go: Tainted data does not propagate data flow after append function Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14116 · 2 comments · Opened Sep 1, 2023
codeql pack publish fails with confusing SocketException when token lacks permission Open

CodeQL packaging enhancement good first issue

Difficulty 3/5 1-2 days Newbie friendliness 42/100

github/codeql#14104 · 6 comments · Opened Aug 30, 2023
[Android] Custom app permission Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#14094 · 1 comment · Opened Aug 30, 2023

github/codeql

Get new issues in your inbox