codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

I use codeql and vscode, when "import semmle.code.cpp.dataflow.DataFlow". There many error ``` Error in transitively-imported module: D:\codeql\codeql-repo\cpp\ql\lib\semmle\code\cpp\dataflow\internal\DataFlowImpl.qll:98,39-51: Could not resolve type BarrierGuard Error in transitively-imported module: D:\codeql\codeql-repo\cpp\ql\lib\semmle\code\cpp\dataflow\internal\DataFlowImpl.qll:106,39-51: Could not resolve...

question
Stale
awaiting-response

This PR mostly exists so I can get a `.sarif` file to play with. The new query works across language implementations, so I had to change QL-for-QL to analyze all...

C#
JS
C++
Java
Python
Go
Ruby
QL-for-QL

Fixes #9957 [Evaluation seems OK](https://github.com/github/codeql-dca-main/tree/data/erik-krogh/pr-10017-e7f009__default__CustomSuite/reports)

JS

This commit primarily replaces links in .qhelp files by doing a simple search and replace of '

C#
JS
C++
documentation
Java
Python
Go
Ruby

As an example: ```go urlPath := ctx.Req.URL.Path hash := urlPath[strings.LastIndex(urlPath, "/")+1:] req, _ := http.NewRequest("GET", source+hash, nil) ```

Go

This looked like a minor perf improvement, which I randomly came across. Let's see what dca thinks.

Java
no-change-note-required

I'm looking for general assistance on how to properly use codeql with barrier guards when the guard condition may not be computed in the guard itself, but instead also data...

question

(WIP -- there's some weirdness surrounding QLpacks that is causing one of the tests to fail, see below.) Splits the Frankengrammar apart into three smaller (and hopefully nicer) pieces. I...

no-change-note-required
QL-for-QL