github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 18h
Merged PRs (30d): 152

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

998 open issues indexed

Database Analyze of Multi-language codebase fails Open

question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#6383 · 3 comments · Opened Jul 29, 2021
LGTM.com - false positive cs/constant-condition Open

C# false-positive

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#6306 · 2 comments · Opened Jul 15, 2021
Support Java wait/notify pattern Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6296 · 5 comments · Opened Jul 15, 2021
Java: Explicit `ArrayInit` containing annotation nested inside annotation as implicit array value is malformed Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql#6276 · Opened Jul 14, 2021
Java: Add predicates for `AnnotationElement` default value Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 28/100

github/codeql#6275 · Opened Jul 13, 2021
Java: `java/ineffective-annotation-present-check` should cover more cases Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql#6244 · Opened Jul 10, 2021
LGTM.com - Python: An assert statement has a side-effect - false positive Open

acknowledged false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6243 · 2 comments · Opened Jul 9, 2021
LGTM.com - false positive: Syntax Error Open

false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#6242 · 2 comments · Opened Jul 9, 2021
How to get the type and the specifier of a type of a parameter in the function? Open

C++ question

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql#6241 · 1 comment · Opened Jul 8, 2021
Java: `Annotation` has no source location for repeated annotation with implicit container Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6236 · 1 comment · Opened Jul 5, 2021
LGTM.com - Python: Call to a non-callable of class - false positive Open

acknowledged false-positive Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#6226 · 4 comments · Opened Jul 3, 2021
False positive: CWE-918 Open

acknowledged false-positive Go

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql#9306 · 2 comments · Opened Jun 28, 2021
AsmStmt has no accessor for assembly, or clobberlist Open

C++

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#6157 · 4 comments · Opened Jun 24, 2021
Automated Analysis failing for cmake project Open

bug

github/codeql#6128 · 2 comments · 1 assignee · Opened Jun 22, 2021
LGTM.com - false positive - Module is imported with both 'import' and 'import from' Open

false-positive Python

Difficulty 3/5 1-2 days Newbie friendliness 38/100

github/codeql#6088 · 4 comments · Opened Jun 15, 2021
can codeQL support vue template use pug lang Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#6069 · 2 comments · Opened Jun 14, 2021
Java: Support flow summaries specifications with arbitrary read step sequences Open

enhancement Java

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#5985 · 1 reaction · Opened Jun 2, 2021
JS: How to mark the value of a property Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 20/100

github/codeql#5969 · 1 comment · Opened May 29, 2021
LGTM.com - false positive - Python - This instance of list is unhashable. Open

false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5952 · 1 comment · Opened May 25, 2021
Java: `Argument.isExplicitVarargsArray()` erroneously holds for primitive array as element of generic varargs parameter Open

question

github/codeql#5929 · 1 comment · 1 assignee · Opened May 19, 2021
LGTM.com - false positive cpp/missing-return co-routines Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5918 · 1 comment · Opened May 18, 2021
LGTM.com - false positive: cpp/unused-local-variable constexpr template parameter Open

C++ false-positive

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5917 · 1 comment · Opened May 18, 2021
LGTM.com - false positive - Python import confusing imported module with itself Open

false-positive Python

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#5913 · 1 comment · Opened May 17, 2021
LGTM.com - false positive Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5910 · 5 comments · Opened May 17, 2021
LGTM.com - false positive Open

false-positive JS

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5890 · 2 comments · Opened May 13, 2021
LGTM.com - false positive C# nullable types/linq Where then Select Open

C# false-positive

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5884 · 1 comment · Opened May 12, 2021
LGTM.com - false positive Open

false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5872 · 1 comment · Opened May 11, 2021
Java: JavadocElement location is off by one Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#5816 · 1 comment · 1 reaction · Opened Apr 30, 2021
LGTM.com - false positive Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5813 · 1 comment · Opened Apr 30, 2021
LGTM.com - false positive with torch.nn.Sequential Open

false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5789 · 1 comment · Opened Apr 27, 2021
LGTM.com - false positive Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5787 · 1 comment · Opened Apr 27, 2021
Java: `TryStmt` resource variable declaration is `LocalVariableDeclStmt` instead of `LocalVariableDeclExpr` Open

Java question

Difficulty 3/5 1-2 days Newbie friendliness 42/100

github/codeql#5783 · 1 comment · Opened Apr 27, 2021
[Python] LGTM.com - false positive Open

false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#5777 · 2 comments · Opened Apr 27, 2021
Java: `Nullness.unboxed` does not use `ConversionSite` Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5763 · 1 comment · Opened Apr 25, 2021
Java: Multi-module Maven and multi-project Gradle builds with same class have only one CodeQL element Open

question

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#5734 · Opened Apr 20, 2021
Java: `InstanceInitializer` body control flow is wrong Open

acknowledged bug Java

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5733 · 2 comments · Opened Apr 20, 2021
Java: Add predicates to `InitializerMethod` for getting explicit initializer blocks Open

acknowledged enhancement Java

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#5732 · 1 comment · Opened Apr 20, 2021
Java: Some generic classes have two `StaticInitializer` Open

question

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#5730 · Opened Apr 20, 2021
Java: `Location.getFile().getAbsolutePath()` contains Windows drive letter for non-source classes Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5712 · Opened Apr 19, 2021
Java: `MemberRefExpr.getReferencedCallable()` does not work for creation of arrays Open

enhancement Java

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql#5707 · Opened Apr 16, 2021
Java: `MemberRefExpr.asMethod()` uses parameter types of referenced callable instead of types of functional method Open

enhancement Java

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/codeql#5706 · Opened Apr 16, 2021
Unable to parse Module of certain type for JavaScript Open

JS question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5697 · Opened Apr 16, 2021
Python: Incomplete Sentence in ZopeInterfaceMethod Comment Open

Python

Difficulty 1/5 Under an hour Newbie friendliness 25/100

github/codeql#5650 · 3 comments · Opened Apr 11, 2021
Java: Extractor succeeds despite semmle-extractor-options using invalid `-source` or `-target` values Open

bug Java

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#5648 · 1 comment · Opened Apr 10, 2021
Java: Malformed semmle-extractor-options does not log any information Open

acknowledged question

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql#5647 · 1 comment · Opened Apr 10, 2021
Java: Some CodeQL classes don't extend `Top` Open

Java

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql#5646 · Opened Apr 10, 2021
CI: Ignore path for compiled languages Open

acknowledged enhancement

Difficulty 5/5 Over a week Newbie friendliness 30/100

github/codeql#5618 · 9 comments · 1 reaction · Opened Apr 7, 2021
LGTM.com - false positive : Values compared using 'is' when equivalence is not the same as identity. Use '==' instead. Open

acknowledged false-positive not security Python

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql#5617 · 1 comment · Opened Apr 7, 2021
Java: `RefType.inherits(Member)` does not work for member types Open

Java question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql#5596 · 1 comment · Opened Apr 3, 2021
Java: `RefType.getAnAncestor()` is error-prone when supertype is parameterized type with Object as type argument Open

Java question

Difficulty 5/5 Over a week Newbie friendliness 35/100

github/codeql#5595 · 2 comments · Opened Apr 3, 2021

github/codeql

Get new issues in your inbox