github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 15h
Merged PRs (30d): 141

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Open All

999 issues indexed so far

false positive: Uncontrolled data used in OS command Open

C++ false-positive

github/codeql#199 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: FP in java/integer-multiplication-cast-to-long when using Long.BYTES Open

false-positive Java

github/codeql#1060 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: FP in java/index-out-of-bounds when index known to be less than the length of the array Open

false-positive Java

github/codeql#1061 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Python FP in py/unused-local-variable & py/unreachable-statement when using nonlocal variable Open

false-positive Python

github/codeql#1268 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: FP in java/abstract-to-concrete-cast when typechecked against wildcard type Open

false-positive Java

github/codeql#1531 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Python FP when using multiple decorators on class function Open

false-positive Python

github/codeql#1902 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - Python - false positive - Call to a non-callable Open

false-positive Python

github/codeql#1911 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive, python: Using a non-iterable as the object in a 'for' loop Open

false-positive Python

github/codeql#1977 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: if/elif/else comparison incorrect (unreachable, always true) Open

false-positive Python

github/codeql#1989 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Python: False positive in py/non-iterable-in-for-loop Open

false-positive Python

github/codeql#1997 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive on Python partial (too few arguments) Open

false-positive Python

github/codeql#2015 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - incorrect-overridden-signature and decorators Open

false-positive Python

github/codeql#2041 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive for exception handling inside context Open

false-positive Python

github/codeql#2058 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Python] [LGTM.com] False-positive: py/hash-unhashable-value when indexing pandas.DataFrame with list Open

false-positive Python

github/codeql#2226 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

false-positive JS

github/codeql#2227 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive rdflib.Graph.add() has one required argument, not zero. Open

false-positive Python

github/codeql#2281 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Invalid character Open

false-positive JS

github/codeql#2290 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - unused import + eval Open

false-positive Python

github/codeql#2292 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - Java - Lost type information leads to incomplete path and false positive Open

false-positive Java

github/codeql#2332 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
This is _not_ a good Dispose() call :) Open

C# question

github/codeql#2337 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 16, 2026
[Python] [LGTM.com] False-positive: Unreachable statement: #2206 sequel Open

false-positive Python

github/codeql#2351 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - similar-function false positive? Open

false-positive Python

github/codeql#2357 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - URL sanitization inconsistency Open

false-positive Python

github/codeql#2360 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - unmatchable dollar in regular expression Open

false-positive Python

github/codeql#2403 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - no override of __eq__ Open

false-positive Python

github/codeql#2408 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: Python metaclass Open

false-positive Python

github/codeql#2445 · 10 comments · 2 reactions · 1 assignee · Indexed Sep 16, 2026
LGTM.com - false positive when mixin __init__ calls super().__init__ Open

false-positive Python

github/codeql#2455 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: 0 != None Open

false-positive Python

github/codeql#2465 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: py/unreachable-statement with assert Open

false-positive Python

github/codeql#2506 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - py/insecure-protocol Open

false-positive Python

github/codeql#2554 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Dereferenced variable may be null Open

false-positive Java

github/codeql#2630 · 5 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
LGTM.com - false positive: unused argument to format Open

false-positive Python

github/codeql#2650 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: JS type of `console.log` variable incorrectly detected Open

false-positive JS

github/codeql#2666 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive / Open

false-positive Java

github/codeql#2742 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Python Taint Flow: False negative when taint originates in default value of function argument Open

Python question

github/codeql#2749 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - cs/equals-on-unrelated-types for types like Uri that override Equals Open

C# false-positive

github/codeql#2751 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - cs/useless-assignment-to-local when assigned as an out within a try/finally block Open

C# false-positive

github/codeql#2752 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - cs/dereferenced-value-is-always-null when passed by ref to a method like Array.Resize Open

C# false-positive

github/codeql#2753 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - cs/useless-assignment-to-local doesn't always work for ref struct like Span<T> Open

C# false-positive

github/codeql#2754 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Potential false positives - cs/dereferenced-value-may-be-null - when working with C# 8 nullability feature Open

C# question

github/codeql#2774 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - cs/unused-collection when usage is within methods that caller overrides within an abstract class Open

C# false-positive

github/codeql#2776 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Variable ... may be null - C# Open

C# false-positive

github/codeql#2785 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Java: Implement ReDoS and regex injection queries. Open

Java

github/codeql#2804 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
General issue - `py/not-named-cls` should trigger for implicit class methods Open

Python question

github/codeql#2826 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Java implicit cast in compound assignment for constants Open

false-positive Java

github/codeql#2842 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - py/similar-function might be too sensitive Open

false-positive Python

github/codeql#2882 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Java - Netty Response Splitting Open

false-positive Java

github/codeql#2908 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

C++ false-positive

github/codeql#2938 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
I cant find the java.naming.xxx class in codeql Open

question

github/codeql#2954 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive C# if `is` followed by `as` Open

C# false-positive

github/codeql#2993 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026

github/codeql

Get new issues in your inbox