github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

CodeQL detected code written in Java but could not process any of it.General issue Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14066 · 5 comments · Opened Aug 28, 2023
cs/unused-collection false positive? Open

C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#14073 · 1 comment · Opened Aug 26, 2023
Python: False positive for blank space characters Open

false-positive

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

github/codeql#14022 · 2 comments · Opened Aug 22, 2023
Question: Extending Query (UnsafeDeserialization.ql) for CWE-502 Open

Python question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#14004 · 1 comment · Opened Aug 19, 2023
CodeQL for php Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#14000 · 11 comments · 83 reactions · Opened Aug 18, 2023
C++ extractor fails to process code based on Unreal Engine Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13994 · 13 comments · Opened Aug 18, 2023
could hasFlow support multi core? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13963 · 1 comment · Opened Aug 15, 2023
Codeql usage under arm architecture Open

question

Difficulty 5/5 Over a week Newbie friendliness 15/100

github/codeql#13953 · 1 comment · 1 reaction · Opened Aug 14, 2023
Customizing CMAKE_CXX_FLAGS is not possible with codeql-cli auto-build Open

question

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

github/codeql#13950 · 1 comment · Opened Aug 12, 2023
UseAfterFree.ql miss case 01 Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13897 · 2 comments · 1 reaction · Opened Aug 7, 2023
preload tracer sets errno Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#13894 · 4 comments · Opened Aug 5, 2023
Release preparation commits show "invalid-email-address" on GitHub Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13868 · 1 comment · Opened Aug 2, 2023
False positive: Cyclic import in Python Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13866 · 1 comment · Opened Aug 2, 2023
How to make the codeql aware a function called between the path. Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13865 · 1 comment · Opened Aug 1, 2023
False positive 'User-controlled bypass of sensitive method' for C# API endpoint that requires authorization Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13826 · Opened Jul 27, 2023
False positive for IncompleteHostnameRegExp in Ruby Open

false-positive Ruby

Difficulty 3/5 1-2 days Newbie friendliness 42/100

github/codeql#13749 · Opened Jul 14, 2023
Why is it that when CodeQL generates a database, some source code is not analyzed? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13710 · 1 comment · Opened Jul 11, 2023
C# False Positive Suggestion PathBase Open

acknowledged C# false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13709 · 1 comment · Opened Jul 11, 2023
FP in C# XSS Sink Open

acknowledged C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13707 · Opened Jul 10, 2023
Are there any alternative commands available to resolve the following situation? Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13697 · 2 comments · Opened Jul 10, 2023
[Question] How to eliminate cartesian product for negation Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#13691 · 1 comment · Opened Jul 7, 2023
When publishing a codeql query pack with the --allow-prerelease option, if the version already exists, it should be overwritten Open

backlog enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#13686 · 1 comment · 1 reaction · Opened Jul 7, 2023
How to write a CodeQL rule plugin and can you provide relevant tutorial links? Open

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

github/codeql#13663 · 2 comments · 1 reaction · Opened Jul 5, 2023
CVSS Score using CSV Output Format Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13650 · 2 comments · Opened Jul 3, 2023
False positive: Python `hashlib.sha1(..., usedforsecurity=False)` Open

false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13637 · 1 reaction · Opened Jun 30, 2023
(WSL ubuntu)codeql with chormium create database failed Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13562 · 4 comments · Opened Jun 25, 2023
codeql query chromium didn't work... Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13552 · 7 comments · Opened Jun 24, 2023
Version 2.13.4 has incorrect Java version discovery. Open

question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13541 · 4 comments · Opened Jun 22, 2023
DataFlow::PathGraph Module not Found in codeql Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#13540 · 8 comments · Opened Jun 22, 2023
python false positive Clear-text logging of sensitive information Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#13538 · 4 comments · Opened Jun 22, 2023
Evil RegEx from user input vulnerability is not reported by codeQL Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13530 · 4 comments · Opened Jun 22, 2023
Not able to use config file for database creation command Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#13524 · 26 comments · Opened Jun 21, 2023
Create AOSP C/C++ database failed with the error tip that "Brotli stream decoding failed" Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13495 · 7 comments · Opened Jun 19, 2023
Java: `ReflectiveMethodAccess::inferAccessedMethod()` ignores parameters Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql#13490 · 2 comments · Opened Jun 17, 2023
Problems encountered by codeql in building chromium QL library 2 Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13489 · 13 comments · Opened Jun 17, 2023
Query id java/improper-intent-verification does not follow convention Open

question

Difficulty 1/5 Under an hour Newbie friendliness 35/100

github/codeql#13474 · 1 comment · Opened Jun 15, 2023
False positive Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13464 · 5 comments · Opened Jun 14, 2023
mvnw issue Open

acknowledged bug Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13435 · 5 comments · Opened Jun 12, 2023
Guards for Python Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13396 · Opened Jun 7, 2023
Potential segmentation fault in semmle_utils.cpp Logger / bazel? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13378 · 1 comment · Opened Jun 6, 2023
depends on 'codeql-python@*', but pack 'codeql-python' was not found Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13364 · 5 comments · Opened Jun 3, 2023
False positive: js/prototype-pollution-utility Open

false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#13339 · 4 comments · Opened May 31, 2023
Question: Contributing Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13338 · 1 comment · Opened May 31, 2023
How can I pick out "Dubious Null Check" by both the caller and the called function (not what DubiousNullCheck.ql means to)? Open

question

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#13327 · Opened May 31, 2023
[CLI] [Enhancement] Include checksums for codeql-cli-binaries releases Open

question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#13278 · 1 comment · Opened May 24, 2023
CodeQL CLI may be slow to run when the codeql.zip is extracted at $HOME Open

acknowledged question

Difficulty 3/5 1-2 days Newbie friendliness 42/100

github/codeql#13208 · 1 comment · Opened May 17, 2023
C/C++: how to optimize function pointer tracing? Open

question

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/codeql#13198 · 14 comments · Opened May 17, 2023
General issue Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#13193 · 1 comment · Opened May 17, 2023
Error downloading packs with corporate certificate in chain Open

question

github/codeql#13132 · 9 comments · 1 assignee · Opened May 11, 2023
Sound static analysis needed to complement CodeQL Open

question

Difficulty 5/5 Over a week Newbie friendliness 15/100

github/codeql#13092 · 3 comments · Opened May 9, 2023

github/codeql

Get new issues in your inbox