codeql icon indicating copy to clipboard operation
codeql copied to clipboard

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

Results 758 codeql issues
Sort by recently updated
recently updated
newest added
trafficstars

I've encountered issues in CodeQL regarding data flow interruption. Here are the details: ## 1. Function Parameter Passing Interruption In the code below: ```python def read_sql(sql): spark.sql() # sink custom...

question

Hey friends, I have quite a large C++ database: ``` codeql database print-baseline -- ${CODEQL_DATABASE_DIR} Counted a baseline of 27711380 lines of code for cpp. ``` Before running scans, I...

question
awaiting-response

This should make it easier to debug type tracking. ### Pull Request checklist #### All query authors - [ ] A change note is added if necessary. See [the documentation](https://github.com/github/codeql/blob/main/docs/change-notes.md)...

Java
Python
no-change-note-required
Ruby
DataFlow Library

### Pull Request checklist #### All query authors - [ ] A change note is added if necessary. See [the documentation](https://github.com/github/codeql/blob/main/docs/change-notes.md) in this repository. - [ ] All new queries...

C++
no-change-note-required

What I'm trying to do is run microsoft/[email protected] test set against windows kernel driver code so that I can generate DVL file from codeql SARIF file for MS HLK (certification)....

question
awaiting-response

when i use codeql to create database for c/c++ project , i met a problem ![image-20240906144755781](https://github.com/user-attachments/assets/4ae5a365-cfa8-4617-af09-59d49cd52ccb) and i use linux 5.11 fc33 x86_64 the end of log file is >...

question
C++
awaiting-response

**Description of the issue** It would be good if CodeQL supported [Dart](https://dart.dev/).

enhancement
question
awaiting-response

Hello, I am trying to use CodeQL to get the control flow of a program. More specifically I want to get the control flow into methods that I have marked...

question
Java

### Version ``` CodeQL extension version: 1.12.0 CodeQL CLI version: 2.15.5 Platform: win32 x64 ``` Dependencies: - `codeql/java-all: 0.8.5` ### Description It looks like taint tracking erroneously reports that taint...

bug
acknowledged