github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 15h
Merged PRs (30d): 141

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Open All

999 open issues indexed

General issue Open

question

github/codeql#13193 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
C/C++: how to optimize function pointer tracing? Open

question

github/codeql#13198 · 14 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CodeQL CLI may be slow to run when the codeql.zip is extracted at $HOME Open

acknowledged question

github/codeql#13208 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[CLI] [Enhancement] Include checksums for codeql-cli-binaries releases Open

question

github/codeql#13278 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
How can I pick out "Dubious Null Check" by both the caller and the called function (not what DubiousNullCheck.ql means to)? Open

question

github/codeql#13327 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Question: Contributing Open

question

github/codeql#13338 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive: js/prototype-pollution-utility Open

false-positive

github/codeql#13339 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
depends on 'codeql-python@*', but pack 'codeql-python' was not found Open

question

github/codeql#13364 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Potential segmentation fault in semmle_utils.cpp Logger / bazel? Open

question

github/codeql#13378 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Guards for Python Open

question

github/codeql#13396 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
mvnw issue Open

acknowledged bug Java

github/codeql#13435 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive Open

C++ false-positive

github/codeql#13464 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Query id java/improper-intent-verification does not follow convention Open

question

github/codeql#13474 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Problems encountered by codeql in building chromium QL library 2 Open

question

github/codeql#13489 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `ReflectiveMethodAccess::inferAccessedMethod()` ignores parameters Open

question

github/codeql#13490 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Create AOSP C/C++ database failed with the error tip that "Brotli stream decoding failed" Open

question

github/codeql#13495 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Not able to use config file for database creation command Open

question

github/codeql#13524 · 26 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Evil RegEx from user input vulnerability is not reported by codeQL Open

github/codeql#13530 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
python false positive Clear-text logging of sensitive information Open

false-positive

github/codeql#13538 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
DataFlow::PathGraph Module not Found in codeql Open

question

github/codeql#13540 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Version 2.13.4 has incorrect Java version discovery. Open

question

github/codeql#13541 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
codeql query chromium didn't work... Open

question

github/codeql#13552 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
(WSL ubuntu)codeql with chormium create database failed Open

question

github/codeql#13562 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive: Python `hashlib.sha1(..., usedforsecurity=False)` Open

false-positive

github/codeql#13637 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
CVSS Score using CSV Output Format Open

question

github/codeql#13650 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
How to write a CodeQL rule plugin and can you provide relevant tutorial links? Open

github/codeql#13663 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
When publishing a codeql query pack with the --allow-prerelease option, if the version already exists, it should be overwritten Open

backlog enhancement

github/codeql#13686 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
[Question] How to eliminate cartesian product for negation Open

question

github/codeql#13691 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Are there any alternative commands available to resolve the following situation? Open

github/codeql#13697 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
FP in C# XSS Sink Open

acknowledged C# false-positive

github/codeql#13707 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
C# False Positive Suggestion PathBase Open

acknowledged C# false-positive

github/codeql#13709 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Why is it that when CodeQL generates a database, some source code is not analyzed? Open

github/codeql#13710 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive for IncompleteHostnameRegExp in Ruby Open

false-positive Ruby

github/codeql#13749 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive 'User-controlled bypass of sensitive method' for C# API endpoint that requires authorization Open

false-positive

github/codeql#13826 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
How to make the codeql aware a function called between the path. Open

question

github/codeql#13865 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive: Cyclic import in Python Open

false-positive Python

github/codeql#13866 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Release preparation commits show "invalid-email-address" on GitHub Open

question

github/codeql#13868 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
preload tracer sets errno Open

question

github/codeql#13894 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
UseAfterFree.ql miss case 01 Open

question

github/codeql#13897 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Customizing CMAKE_CXX_FLAGS is not possible with codeql-cli auto-build Open

question

github/codeql#13950 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Codeql usage under arm architecture Open

question

github/codeql#13953 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
could hasFlow support multi core? Open

question

github/codeql#13963 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
C++ extractor fails to process code based on Unreal Engine Open

question

github/codeql#13994 · 13 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CodeQL for php Open

question

github/codeql#14000 · 11 comments · 83 reactions · 0 assignees · Indexed Sep 16, 2026
Question: Extending Query (UnsafeDeserialization.ql) for CWE-502 Open

Python question

github/codeql#14004 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Python: False positive for blank space characters Open

false-positive

github/codeql#14022 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
cs/unused-collection false positive? Open

C# false-positive

github/codeql#14073 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CodeQL detected code written in Java but could not process any of it.General issue Open

question

github/codeql#14066 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Android] Custom app permission Open

question

github/codeql#14094 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
codeql pack publish fails with confusing SocketException when token lacks permission Open

CodeQL packaging enhancement good first issue

github/codeql#14104 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

github/codeql

Get new issues in your inbox