codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

**Description of the issue** Hi, I want to get the statement of the row where each node is located in the result of hasFlowPath(source, sink) data flow. My current solution...

question

I just start learning Codeql, and I want to analyze Data flow and Control flow of a program. Now I learn **_getASuccessor_** and Global DataFlow analyze. And I have some...

question

**Description of the issue** Related to #3696 It appears QL is only considering the first line of `JavadocTag` text and not considering any subsequent lines. Example query for LGTM demo...

question
Java

This pull request attempts to build the Ruby extractor and tools using Bazel. Things that still need to be done: * package things up in an "extractor pack" * make...

Ruby

**Description of the false positive** The alert is "Static function IsTypeProtoCompatible is unreachable". [Help for that alert](https://lgtm.com/rules/2152580467/) indicates that it is about an unused static function. However, that function is...

C++
false-positive

good afternoon. this query should find situations where the return value from some function might become part of the denominator and result in a division by zero. this error is...

C++
documentation

This is branch to allow testing of generated models. We will perform an experiment and compare against the branch, where no models are included.

C#
Java
Ruby
Swift

According to the method mentioned [here](https://github.com/github/securitylab/blob/main/CodeQL_Queries/cpp/Chrome/README.md), I remove all webaudio related directories and files in the `/out/debug/obj` directory,Then use the following command to create the QL database directory: `gn gen...

question