-
Notifications
You must be signed in to change notification settings - Fork 2k
Pull requests: github/codeql
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
C#: Add Razor Page handler method parameters as remote flow sources
C#
documentation
#21984
opened Jun 12, 2026 by
felickz
Contributor
Loading…
updated Jun 15, 2026
QL: Convert qlref tests to inline expectations
QL-for-QL
#21988
opened Jun 15, 2026 by
owen-mc
Contributor
Loading…
updated Jun 15, 2026
Kotlin support 2.4.0 and drop 1.x test mode
documentation
Java
Kotlin
#21970
opened Jun 11, 2026 by
andersfugmann
Contributor
•
Draft
updated Jun 15, 2026
Java: Use fixture for filtering diagnostics
Java
#21990
opened Jun 15, 2026 by
jketema
Contributor
Loading…
updated Jun 15, 2026
[Javascript] Prompt Injection queries
documentation
javascript
Pull requests that update Javascript code
JS
Python
#21953
opened Jun 8, 2026 by
BazookaMusic
Contributor
Loading…
updated Jun 15, 2026
C#: Property- and Indexer call targets for partial overrides.
C#
documentation
#21881
opened May 21, 2026 by
michaelnebel
Contributor
Loading…
updated Jun 15, 2026
C#: Extract
.Slice method call when using a span in conjunction with a range.
C#
documentation
#21877
opened May 21, 2026 by
michaelnebel
Contributor
Loading…
updated Jun 15, 2026
Java: Fix performance issue in type flow library
Java
no-change-note-required
This PR does not need a change note
Actions: Fix dominates() false positive in reusable workflows
Actions
Analysis of GitHub Actions
documentation
#21986
opened Jun 15, 2026 by
JarLob
Contributor
Loading…
updated Jun 15, 2026
Ruby: Fix bug in This PR does not need a change note
Ruby
implicitAssignmentNode
no-change-note-required
#21907
opened May 29, 2026 by
hvitved
Contributor
Loading…
updated Jun 15, 2026
Python: Track instance attributes through type tracking
documentation
Python
#21969
opened Jun 11, 2026 by
Copilot
AI
Loading…
updated Jun 14, 2026
Go: use shared SSA library (codeql.ssa.Ssa)
documentation
Go
#21554
opened Mar 23, 2026 by
Copilot
AI
Loading…
updated Jun 12, 2026
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389)
C#
documentation
#21964
opened Jun 10, 2026 by
tonghuaroot
Contributor
Loading…
updated Jun 12, 2026
Make alert coverage team the code owners for
/actions/
#21977
opened Jun 12, 2026 by
owen-mc
Contributor
Loading…
updated Jun 12, 2026
Fix changelog copy errors in change-notes and CHANGELOG.md files
Actions
Analysis of GitHub Actions
documentation
Python
#21971
opened Jun 11, 2026 by
mario-campos
Contributor
Loading…
updated Jun 11, 2026
Rust: Upgrade to rust-analyzer 0.328
Ruby
Rust
Pull requests that update Rust code
#21714
opened Apr 15, 2026 by
tausbn
Contributor
Loading…
updated Jun 10, 2026
Kotlin: Add support for Kotlin 2.4.0
documentation
Java
Kotlin
#21952
opened Jun 8, 2026 by
andersfugmann
Contributor
•
Draft
updated Jun 10, 2026
Unified: More work on AST and Swift mappings
no-change-note-required
This PR does not need a change note
Go: fix
DataFlow::ResultNode and some related things
documentation
Go
#21957
opened Jun 8, 2026 by
owen-mc
Contributor
Loading…
updated Jun 9, 2026
Python: inline init_module_submodule_defn into ImportResolution
documentation
Python
#21930
opened Jun 2, 2026 by
yoff
Contributor
Loading…
updated Jun 8, 2026
Previous Next
ProTip!
Exclude everything labeled
bug with -label:bug.