github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 15h
Merged PRs (30d): 141

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Open All

999 issues indexed so far

LGTM.com - false positive - This assignment to index is useless, since its value is never read. Open

C# false-positive not security

github/codeql#4895 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
cannot search MethodAceess inside source code Open

question

github/codeql#4902 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

C# false-positive not security

github/codeql#4907 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
What command line format when including a quoted string? Open

question

github/codeql#4910 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

false-positive Python

github/codeql#4918 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
No type information for Angular(typescript) codebase Open

JS question Stale

github/codeql#4930 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
How to get the RefType without import Open

Java question Stale

github/codeql#4937 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Data Flow Tracking for Stream/Promise based data flow Open

question

github/codeql#4988 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
false positive - Code Scanning - Java - when urlConnection.getInputStream() is not remote user input Open

false-positive

github/codeql#4993 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Issue regarding getting intermediate node locations in a Data Flow Graph Open

question

github/codeql#5079 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
demo work fine on LGTM,but error on cli, INVALID_RESULT_PATTERNS Open

question Stale

github/codeql#5084 · 7 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
General issue - Using this taint-tracking script can only show the source node and sink node? Open

Python question Stale

github/codeql#5104 · 9 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
LGTM.com - c++ false positive "Expression has no effect" Open

C++ false-positive

github/codeql#5125 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Potential false positive - CGI script vulnerable to cross-site scripting Open

C++ false-positive

github/codeql#5162 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Use HTTPS links in documentation and comments Open

acknowledged good first issue

github/codeql#5163 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: The value assigned to local variable is never used Open

false-positive not security Python

github/codeql#5228 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive class may not be initialized properly Open

false-positive not security Python

github/codeql#5259 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: Conflicting values for attributes w.r.t abstractmethod Open

false-positive

github/codeql#5287 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Package and Module do not extend Documentable Open

question

github/codeql#5288 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Javadoc.getCommentedElement() returns bogus MetricElement & Annotatable Open

question

github/codeql#5289 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Query Console does not show elements without toString() / Some elements have no toString() Open

question

github/codeql#5290 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive (Disposable ... is created here but is not disposed.) Open

C# false-positive

github/codeql#5293 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: "Duplicate HTML element attributes" caused by valid Django template tags Open

false-positive

github/codeql#5296 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Query Console has no result when splitting supplementary code points Open

question

github/codeql#5297 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Deprecate and remove Element::getDoc Open

question

github/codeql#5320 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Autobuild does not find maven build (pom.xml) files in subdirs Open

question

github/codeql#5331 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive non-iterable type Open

false-positive Python

github/codeql#5364 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Autobuilder Support for C++ with Gradle Open

C++

github/codeql#5376 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
There is no parsing library for `build.gradle` file Open

question

github/codeql#5392 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: AnnotationElement does not extend Method Open

question

github/codeql#5399 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: IntersectionType is missing predicates and does not work correctly Open

question

github/codeql#5403 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: IntersectionType does not match multiple upper bounds of type variable Open

question

github/codeql#5404 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Wildcard reports implicit Object as bound Open

question

github/codeql#5405 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Detect String Encoding type with CodeQL after String extraction Open

C++ question

github/codeql#5441 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: VariableAssign matches local variable declaration without initializer Open

question

github/codeql#5462 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Callable.getAnException() reports thrown exceptions Open

acknowledged Java not security

github/codeql#5464 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `StringLiteral` matches String concatenation of two String literals Open

documentation Java question

github/codeql#5469 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - TypedDict is not callable Open

false-positive not security Python

github/codeql#5470 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CI: Make more workflows public Open

question

github/codeql#5480 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
TaintTracking: copy inside range on map produces multiple (incomplete) path variants if struct or field are a pointer Open

Go

github/codeql#9308 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: RawType getASourceSupertype() is not generic type / getting source declaration or supertype is cumbersome Open

question

github/codeql#5521 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Presenting ... within the result of toString() for both DataFlow::Node and Expr for JavaScript Open

question

github/codeql#5531 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - unused import in Python Open

false-positive not security Python

github/codeql#5546 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Suggestion: Queries for test code should show results despite test classifier Open

acknowledged enhancement not security

github/codeql#5551 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: CompilationUnit elements in Module are `.class` files instead of `.java` files Open

Java not security question

github/codeql#5556 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Python] False positive py/unreachable-statement with global variable Open

bug false-positive Python

github/codeql#5575 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[False negative] Insufficient identification of React router location prop Open

acknowledged enhancement JS

github/codeql#5592 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Extractor succeeds for `codeql test run` despite `module-info.java` not being supported by `-source` version Open

Java question

github/codeql#5594 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `RefType.getAnAncestor()` is error-prone when supertype is parameterized type with Object as type argument Open

Java question

github/codeql#5595 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `RefType.inherits(Member)` does not work for member types Open

Java question

github/codeql#5596 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026

github/codeql

Get new issues in your inbox