codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

Fixes false positives cause by buildless extraction. Commit-by-commit review recommended. Removes 1008 false positives in the `asterisk/asterisk` projects as observed on codeql-qa. ### Pull Request checklist #### All query authors...

C++
documentation

### Pull Request checklist #### All query authors - [ ] A change note is added if necessary. See [the documentation](https://github.com/github/codeql/blob/main/docs/change-notes.md) in this repository. - [ ] All new queries...

Python

This is feature-complete now, I think. I don't think it needs a change note as models-as-data isn't a feature that we've publicly announced yet.

no-change-note-required
Go

NB. This requires adding a hook to shared dataflow; this will need adding (as an empty stub) to other languages.

Go

This pull request implements classes modelling formatting templates, especially the use of variables inside such templates, which were causing false positives for the unused variables query.

Rust

We recently updated our iOS project to build with Xcode 16, swift 5 mode (`SWIFT_VERSION = 5`). However our Azure CodeQL pipeline started to fail on database creation with `Library...

question