github/codeql

View on GitHub

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Stars: 10.1k
Forks: 2.1k
Open beginner issues: 1
Indexed issues: 999
Avg merge: 2d 15h
Merged PRs (30d): 141

Dominant language: CodeQL
License: MIT
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Open All

999 issues indexed so far

LGTM.com - false positive : Values compared using 'is' when equivalence is not the same as identity. Use '==' instead. Open

acknowledged false-positive not security Python

github/codeql#5617 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
CI: Ignore path for compiled languages Open

acknowledged enhancement

github/codeql#5618 · 9 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Java: Some CodeQL classes don't extend `Top` Open

Java

github/codeql#5646 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Malformed semmle-extractor-options does not log any information Open

acknowledged question

github/codeql#5647 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Extractor succeeds despite semmle-extractor-options using invalid `-source` or `-target` values Open

bug Java

github/codeql#5648 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Python: Incomplete Sentence in ZopeInterfaceMethod Comment Open

Python

github/codeql#5650 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Unable to parse Module of certain type for JavaScript Open

JS question

github/codeql#5697 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `MemberRefExpr.asMethod()` uses parameter types of referenced callable instead of types of functional method Open

enhancement Java

github/codeql#5706 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `MemberRefExpr.getReferencedCallable()` does not work for creation of arrays Open

enhancement Java

github/codeql#5707 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `Location.getFile().getAbsolutePath()` contains Windows drive letter for non-source classes Open

Java question

github/codeql#5712 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Some generic classes have two `StaticInitializer` Open

question

github/codeql#5730 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Add predicates to `InitializerMethod` for getting explicit initializer blocks Open

acknowledged enhancement Java

github/codeql#5732 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `InstanceInitializer` body control flow is wrong Open

acknowledged bug Java

github/codeql#5733 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Multi-module Maven and multi-project Gradle builds with same class have only one CodeQL element Open

question

github/codeql#5734 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `Nullness.unboxed` does not use `ConversionSite` Open

Java question

github/codeql#5763 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Python] LGTM.com - false positive Open

false-positive not security Python

github/codeql#5777 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `TryStmt` resource variable declaration is `LocalVariableDeclStmt` instead of `LocalVariableDeclExpr` Open

Java question

github/codeql#5783 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

acknowledged false-positive not security Python

github/codeql#5787 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive with torch.nn.Sequential Open

false-positive not security Python

github/codeql#5789 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

acknowledged false-positive not security Python

github/codeql#5813 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: JavadocElement location is off by one Open

Java question

github/codeql#5816 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

false-positive not security Python

github/codeql#5872 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive C# nullable types/linq Where then Select Open

C# false-positive

github/codeql#5884 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

false-positive JS

github/codeql#5890 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

acknowledged false-positive not security Python

github/codeql#5910 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Python import confusing imported module with itself Open

false-positive Python

github/codeql#5913 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: cpp/unused-local-variable constexpr template parameter Open

C++ false-positive

github/codeql#5917 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive cpp/missing-return co-routines Open

C++ false-positive

github/codeql#5918 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `Argument.isExplicitVarargsArray()` erroneously holds for primitive array as element of generic varargs parameter Open

question

github/codeql#5929 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 16, 2026
LGTM.com - false positive - Python - This instance of list is unhashable. Open

false-positive not security Python

github/codeql#5952 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
JS: How to mark the value of a property Open

JS question

github/codeql#5969 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Support flow summaries specifications with arbitrary read step sequences Open

enhancement Java

github/codeql#5985 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
can codeQL support vue template use pug lang Open

JS question

github/codeql#6069 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive - Module is imported with both 'import' and 'import from' Open

false-positive Python

github/codeql#6088 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Automated Analysis failing for cmake project Open

bug

github/codeql#6128 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 16, 2026
AsmStmt has no accessor for assembly, or clobberlist Open

C++

github/codeql#6157 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
False positive: CWE-918 Open

acknowledged false-positive Go

github/codeql#9306 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - Python: Call to a non-callable of class - false positive Open

acknowledged false-positive Python

github/codeql#6226 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `Annotation` has no source location for repeated annotation with implicit container Open

Java question

github/codeql#6236 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
How to get the type and the specifier of a type of a parameter in the function? Open

C++ question

github/codeql#6241 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive: Syntax Error Open

false-positive Python

github/codeql#6242 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - Python: An assert statement has a side-effect - false positive Open

acknowledged false-positive Python

github/codeql#6243 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: `java/ineffective-annotation-present-check` should cover more cases Open

Java question

github/codeql#6244 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Add predicates for `AnnotationElement` default value Open

Java question

github/codeql#6275 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Explicit `ArrayInit` containing annotation nested inside annotation as implicit array value is malformed Open

Java question

github/codeql#6276 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Support Java wait/notify pattern Open

Java question

github/codeql#6296 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive cs/constant-condition Open

C# false-positive

github/codeql#6306 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Database Analyze of Multi-language codebase fails Open

question

github/codeql#6383 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Java: Consider some support for backwards flow through writer wrappers Open

enhancement Java

github/codeql#6402 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
LGTM.com - false positive Open

false-positive

github/codeql#6429 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

github/codeql

Get new issues in your inbox