Skip to content

Pull requests: github/codeql

New pull request New
428 Open 16,832 Closed
428 Open 16,832 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add way to customize environmentCheck Actions QL Actions Analysis of GitHub Actions
#22173 opened Jul 10, 2026 by knewbury01 Contributor • Draft
Java: Improve join order. Java no-change-note-required This PR does not need a change note
#22159 opened Jul 10, 2026 by aschackmull Contributor Loading…
2
Ruby: Replace CFG with shared implementation Ruby
#22158 opened Jul 10, 2026 by aschackmull Contributor • Draft
1
Bump golang.org/x/tools from 0.47.0 to 0.48.0 in /go/extractor in the extractor-dependencies group dependencies Pull requests that update a dependency file Go
#22157 opened Jul 10, 2026 by dependabot Bot Loading…
Make actions/unpinned-tag lockfile- and $/-aware Actions Analysis of GitHub Actions documentation
#22155 opened Jul 10, 2026 by nodeselector • Draft
1
Actions Query Fix: UntrustedCheckoutTOCTOU[High|Critical] ControlCheck model fix Actions Analysis of GitHub Actions documentation
#22154 opened Jul 9, 2026 by knewbury01 Contributor Loading…
1
Post-release preparation for codeql-cli-2.26.1 Actions Analysis of GitHub Actions C# C++ DataFlow Library documentation Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22152 opened Jul 9, 2026 by codeql-ci Collaborator • Draft
@oscarsj
Support MISSING promotion and SPURIOUS clearing in --learn inline expectations C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22148 opened Jul 9, 2026 by d10c Contributor • Draft
Go: skip extracting ast.ParenExpr nodes Go
#22146 opened Jul 9, 2026 by owen-mc Contributor • Draft
FlowSummaryImpl: Embed AST nodes in source/sink summary nodes for better locations C# C++ DataFlow Library Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22145 opened Jul 9, 2026 by hvitved Contributor • Draft
2
JS: Model Sails Action2 inputs as remote sources documentation JS
#22142 opened Jul 9, 2026 by theinfosecguy Loading…
1
1
Support --learn for inline expectations via learnEdits C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22140 opened Jul 8, 2026 by d10c Contributor • Draft
3
Java: Support JDK 27 documentation Java
#22138 opened Jul 8, 2026 by IdrissRio Contributor • Draft
TEMP PR C# C++ DataFlow Library Go Java JS Python Ruby Rust Pull requests that update Rust code Swift
#22137 opened Jul 8, 2026 by hvitved Contributor • Draft
2
Unify Kotlin test suites Java Kotlin
#22135 opened Jul 8, 2026 by andersfugmann Contributor • Draft
Introduce canonicalization library for Windows subst drives C# depends on internal PR This PR should only be merged in sync with an internal Semmle PR Go Java JS Kotlin Python Ruby Rust Pull requests that update Rust code
#22129 opened Jul 6, 2026 by jketema Contributor • Draft
Bump the maven group across 30 directories with 11 updates dependencies Pull requests that update a dependency file Java
#22122 opened Jul 4, 2026 by dependabot Bot Loading…
Python: unpin legacy CFG/ESSA from the AST cached stage (DCA measurement) Python
#22116 opened Jul 2, 2026 by yoff Contributor • Draft
C++: Support access paths for flow sources C++
#22113 opened Jul 2, 2026 by MathiasVP Contributor • Draft
1
Swift: Turn off caching and integrated driver in autobuild Swift
#22111 opened Jul 2, 2026 by jketema Contributor Loading…
5
Add subst drive resolution to Kotlin and Go extractors Go Kotlin
#22107 opened Jul 2, 2026 by Copilot AI • Draft
@jketema
unified: Test CI checks
#22102 opened Jul 1, 2026 by asgerf Contributor • Draft
Python: revert "remove imprecise container steps" for performance reasons Python
#22098 opened Jun 30, 2026 by owen-mc Contributor Loading…
2
Python: reintroduce instance-attribute type-tracking without the classInstanceTracker blow-up documentation Python
#22097 opened Jun 30, 2026 by Copilot AI Loading…
@owen-mc
4
C#: Simplify the Nuget Package restorer. C#
#22094 opened Jun 30, 2026 by michaelnebel Contributor • Draft
ProTip! What’s not been updated in a month: updated:<2026-06-11.