codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

**Description of the issue** I’m currently working on building a tool and need help getting the full struct path for struct field in CodeQL. For example, consider the following Go...

question
awaiting-response

Is there a way, directly or indirectly, to have a CodeQL query use an external tool? ```ql predicate isCurrentYear(string year) { year = cmd("date +%Y") } ```

question

In a typescript project, if there is a keyword called "Date" in the code comment, it stops at that file during the extracting step. Are there any keywords that should...

question
awaiting-response

Model FastAPI & Starlette CORS Middlewares for misconfiguration

documentation
Python

documentation
Python
awaiting-response
external-contribution

This introduces documentation for the Models-as-Data library for Go.

documentation
ready-for-doc-review

This implements support for test extraction by two mechanisms: * In autobuild mode, setting `CODEQL_EXTRACTOR_GO_EXTRACT_TESTS` to `true`. * In manual build mode, tracing a `go test` command (`go test -c`...

Go

The new names aren't great, so feel free to change them, but I think we do need an explicit example of updating two relations using one ql file.

documentation