Skip to content

Pull requests: github/codeql

New pull request New
355 Open 16,248 Closed
355 Open 16,248 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Urllib typo fix documentation Python
#21237 opened Jan 29, 2026 by jonjanego Loading…
1
C#: Make sure allFeeds contains at least explicitFeeds C#
#21236 opened Jan 29, 2026 by mbg Loading…
@mbg
1
Shared: Add missing QLDocs DataFlow Library no-change-note-required This PR does not need a change note
#21235 opened Jan 29, 2026 by owen-mc Loading…
1
Python: Allow models-as-data sanitizers and convert 1 existing sanitizer JS no-change-note-required This PR does not need a change note Python Ruby
#21234 opened Jan 29, 2026 by owen-mc Loading…
5
python: fixes and additions for experimental key derivation function query library Python
#21231 opened Jan 28, 2026 by Lordfirespeed • Draft
Go: Use shared basic block lib documentation Go
#21224 opened Jan 27, 2026 by owen-mc Loading…
8
[WIP] C# 14: Support extension blocks. C#
#21220 opened Jan 26, 2026 by michaelnebel • Draft
1
Rust: Fix context-based type inference explosion no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21217 opened Jan 26, 2026 by hvitved • Draft
8
C++: Update expected test results after extractor changes C++ depends on internal PR This PR should only be merged in sync with an internal Semmle PR
#21208 opened Jan 22, 2026 by jketema • Draft
Rust: Improve type inference for closures Rust Pull requests that update Rust code
#21206 opened Jan 22, 2026 by hvitved • Draft
8
Python: Compiler crash Python
#21194 opened Jan 20, 2026 by tausbn • Draft
Rust: Implement type inference for associated types for concrete types no-change-note-required This PR does not need a change note Rust Pull requests that update Rust code
#21188 opened Jan 19, 2026 by paldepind Loading…
6
Rust: Exclude self parameter accesses from rust/access-after-lifetime-ended documentation Rust Pull requests that update Rust code
#21155 opened Jan 12, 2026 by geoffw0 Loading…
3 tasks done
5
Go: Update to 1.26 documentation Go
#21150 opened Jan 12, 2026 by jketema • Draft
1
Python: Prompt injection in OpenAI clients documentation Python
#21141 opened Jan 9, 2026 by mbaluda Loading…
20
Prepare dataflow for local annotations no-change-note-required This PR does not need a change note Python
#21138 opened Jan 9, 2026 by tausbn • Draft
Shared: Improve range analysis for phis at loop exits C++ Java
#21135 opened Jan 9, 2026 by MathiasVP • Draft
JS: Only exclude JS files in the tsconfig outDir documentation JS
#21121 opened Jan 8, 2026 by asgerf • Draft
1
1
Add overlay[local] annotations Python
#21116 opened Jan 7, 2026 by tausbn • Draft
Enable polynomial ReDoS query to use plain regex-use sinks
#21115 opened Jan 7, 2026 by Copilot AI • Draft
@owen-mc
Rust: switch on TRAP compression Rust Pull requests that update Rust code
#21112 opened Jan 7, 2026 by redsun82 • Draft
GitHub: Add workflow_dispatch trigger to compile-queries.yml
#21108 opened Jan 6, 2026 by igfoo Loading…
1
Shared (static): Always treat subtypes column as true C# C++ Go Java
#21085 opened Jan 2, 2026 by owen-mc • Draft
1
Bump the go_modules group across 1 directory with 3 updates dependencies Pull requests that update a dependency file documentation Go
#21078 opened Dec 24, 2025 by dependabot bot Loading…
Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.25.3 in /java/ql/test/utils/flowtestcasegenerator in the maven group across 1 directory dependencies Pull requests that update a dependency file Java
#21073 opened Dec 19, 2025 by dependabot bot Loading…
ProTip! Exclude everything labeled bug with -label:bug.