Issues · github/codeql · GitHub

Labels Milestones New issue

General issue Python extractor fails in macOS App Sandbox: `PermissionError: [Errno 1] Operation not permitted` from `_multiprocessing.SemLock`

#21956

· aslom opened

on Jun 8, 2026

Support Kotlin 2.4.0

#21938

· hfhbd opened

on Jun 4, 2026

Does CodeQL support add information into database?

#21934

· rise0311 opened

on Jun 3, 2026

Python: `FlaskApp` instances do not reliably track subclasses

#21854

· UpsideDownFoxxo opened

on May 14, 2026

Actions: Extractor for external actions and workflows does not take into account the ref

#21834

· jessehouwing opened

on May 12, 2026

Ruby: &[SPACE][identifier] syntax breaks Ruby parsing

#21801

· JLLeitschuh opened

on May 5, 2026

False negative: py/sql-injection missing a sqlite3/PEP249 pattern

#21769

· invoke1442 opened

on Apr 29, 2026

False negative: missing os.exec* APIs with `sh -c` as sink in py/code-injection.

#21735

· 9iang22 opened

on Apr 19, 2026

GHAS-managed workflows reference mutable action versions, incompatible with required SHA-pinning policies

#21732

· kyleburnsdev opened

on Apr 17, 2026

[question?] counterintuitive class method behaviour

#21670

· k4lizen opened

on Apr 8, 2026

Can the location of the disk cache be customised, and does CodeQL gracefully handle missing cache?

#21663

· gsutherland-trailofbits opened

on Apr 7, 2026

actions/unpinned-tag does not flag unpinned reusable workflow calls (job-level uses:)

#21659

· PhilipAtCisco opened

on Apr 6, 2026