github/codeql issues and pull requests

#20595 - Java: Add integration test for buildless lambda recovery

Pull Request - State: closed - Opened by IdrissRio 4 months ago
Labels: depends on internal PR, Java

#20588 - Java: Fix buildless test HTTP server binding on macOS26

Pull Request - State: closed - Opened by IdrissRio 4 months ago
Labels: Java

#20583 - Crypto: Add JCA signatures, RNG, and unit tests

Pull Request - State: closed - Opened by bdrodes 4 months ago - 1 comment
Labels: C++, Java

#20560 - Java: note that classes with entirely private constructors can't be subclassed

Pull Request - State: closed - Opened by smowton 4 months ago
Labels: Java, no-change-note-required

#20546 - Java: Fix false positives in evaluation-to-constant query for ErrorType

Pull Request - State: closed - Opened by IdrissRio 4 months ago
Labels: Java, no-change-note-required

#20491 - Java: Integration tests for Maven 4

Pull Request - State: closed - Opened by IdrissRio 5 months ago
Labels: depends on internal PR, Java

#20452 - Rust, shared: Support `Parameter` in source MaD models

Pull Request - State: closed - Opened by paldepind 5 months ago - 2 comments
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library

#20447 - Release preparation for version 2.23.1

Pull Request - State: closed - Opened by codeql-ci 5 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#20433 - Java: Accept new test results after changes in Autobuild

Pull Request - State: closed - Opened by IdrissRio 5 months ago
Labels: Java

#20394 - Java: Add most `medium` precision queries to the `code-quality-extended` suite.

Pull Request - State: closed - Opened by michaelnebel 5 months ago
Labels: Java, no-change-note-required

#20380 - Java: Fix broken performance.

Pull Request - State: closed - Opened by aschackmull 5 months ago
Labels: Java, no-change-note-required

#20379 - Java: remove `isImplict()`

Pull Request - State: closed - Opened by IdrissRio 5 months ago
Labels: Java

#20378 - Jave: Use force local to make parsing local after global regex finding.

Pull Request - State: closed - Opened by alexet 5 months ago - 4 comments
Labels: Java, no-change-note-required

#20377 - Java: Consolidate Assertions.qll and Preconditions.qll.

Pull Request - State: closed - Opened by aschackmull 5 months ago - 1 comment
Labels: documentation, Java

#20355 - Java: Update tests results with disabled annotation processing when lombok is not used.

Pull Request - State: closed - Opened by alexet 5 months ago
Labels: depends on internal PR, Java

#20345 - Java: Add MaDs for `java.crypto.KDF`

Pull Request - State: closed - Opened by IdrissRio 5 months ago - 1 comment
Labels: documentation, Java

#20328 - Java: Fix some Ql4Ql violations.

Pull Request - State: closed - Opened by michaelnebel 5 months ago
Labels: Java, no-change-note-required

#20271 - Java: Make virtual dispatch global while keeping ssa local.

Pull Request - State: closed - Opened by alexet 6 months ago
Labels: Java

#20241 - Post-release preparation for codeql-cli-2.22.4

Pull Request - State: closed - Opened by codeql-ci 6 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#20205 - Java: port quality query `java/mocking-all-non-private-methods-means-unit-test-is-too-big`

Pull Request - State: closed - Opened by Napalys 6 months ago - 2 comments
Labels: documentation, Java, no-change-note-required

#20190 - Java: Enhance `java/jvm-exit` query and add to quality

Pull Request - State: closed - Opened by Napalys 6 months ago - 1 comment
Labels: documentation, Java, no-change-note-required

#20189 - Java: use java 17 in `no-wrapper` tests

Pull Request - State: closed - Opened by redsun82 6 months ago - 2 comments
Labels: Java

#20183 - Java: Enable BarrierGuard wrappers

Pull Request - State: closed - Opened by aschackmull 6 months ago - 1 comment
Labels: Java, no-change-note-required

#20178 - Java: Added new query `java/visible-for-testing-abuse`

Pull Request - State: closed - Opened by Napalys 6 months ago - 1 comment
Labels: documentation, Java, no-change-note-required

#20163 - Java: Assume normal termination in post-dominance.

Pull Request - State: closed - Opened by aschackmull 6 months ago - 2 comments
Labels: Java, no-change-note-required, Kotlin

#20136 - Java: Add test for flexible constructor support

Pull Request - State: closed - Opened by IdrissRio 6 months ago - 7 comments
Labels: depends on internal PR, Java

#20121 - Guards: Improve support for wrapped guards

Pull Request - State: closed - Opened by aschackmull 7 months ago - 1 comment
Labels: documentation, Java

#20116 - Java: Add support to Compact Source Files

Pull Request - State: closed - Opened by IdrissRio 7 months ago
Labels: depends on internal PR, documentation, Java

#20110 - Revert "Release preparation for version 2.22.2"

Pull Request - State: closed - Opened by nickrolfe 7 months ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#20105 - Release preparation for version 2.22.2

Pull Request - State: closed - Opened by codeql-ci 7 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#20097 - Java: Add support to `ModuleImportDeclaration`

Pull Request - State: closed - Opened by IdrissRio 7 months ago
Labels: depends on internal PR, documentation, Java

#20092 - Java: Improve more join-orders

Pull Request - State: closed - Opened by aschackmull 7 months ago - 1 comment
Labels: Java, no-change-note-required

#20091 - Java: Fix accidental CP in CFG for asserts.

Pull Request - State: closed - Opened by aschackmull 7 months ago - 1 comment
Labels: Java, no-change-note-required

#20083 - Java: Prune PathGraph for CsrfUnprotectedRequestType.ql

Pull Request - State: closed - Opened by aschackmull 7 months ago - 3 comments
Labels: Java, no-change-note-required

#20077 - Java: Diff-informed queries: phase 3 (non-trivial locations)

Pull Request - State: closed - Opened by d10c 7 months ago
Labels: Java, no-change-note-required

#20067 - Java: allow the definition of `java/unsafe-deserialization` sinks using data extensions

Pull Request - State: closed - Opened by owen-mc 7 months ago - 2 comments
Labels: documentation, Java

#20057 - Java: Accept new test result after extractor upgrade

Pull Request - State: closed - Opened by IdrissRio 7 months ago
Labels: Java

#20028 - Experiment: Make all data flow incremental

Pull Request - State: closed - Opened by jbj 7 months ago - 1 comment
Labels: Java, DataFlow Library

#20025 - Java: add extra sink for `java/unsafe-deserialization`

Pull Request - State: closed - Opened by owen-mc 7 months ago
Labels: documentation, Java

#20018 - Java: Update qhelp: SnakeYaml is safe from version 2.0

Pull Request - State: closed - Opened by owen-mc 7 months ago - 4 comments
Labels: documentation, Java

#20011 - Overlay: Add XML and Java property discarding

Pull Request - State: closed - Opened by kaspersv 7 months ago
Labels: Java, no-change-note-required

#19994 - Post-release preparation for codeql-cli-2.22.2

Pull Request - State: closed - Opened by codeql-ci 7 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19965 - Experiment: Overlay: Mark RefType.getAStrictAncestor caller?

Pull Request - State: closed - Opened by kaspersv 7 months ago
Labels: Java

#19956 - Java: disable failing maven fetches expectations for now

Pull Request - State: closed - Opened by redsun82 7 months ago
Labels: Java

#19950 - Java: Add 'Useless serialization member in record class' query

Pull Request - State: closed - Opened by tamasvajk 7 months ago - 1 comment
Labels: documentation, Java, no-change-note-required, ready-for-doc-review

#19943 - Support approximate related locations

Pull Request - State: closed - Opened by asgerf 7 months ago - 2 comments
Labels: Java, Python, no-change-note-required, Ruby

#19937 - EXPERIMENT: Test overlay fixes

Pull Request - State: closed - Opened by kaspersv 7 months ago
Labels: Java

#19931 - Ql4ql: Quality query tagging.

Pull Request - State: closed - Opened by michaelnebel 7 months ago - 3 comments
Labels: JS, documentation, Java, no-change-note-required, QL-for-QL

#19892 - Fix markdown query help formatting

Pull Request - State: closed - Opened by owen-mc 7 months ago
Labels: documentation, Java, Ruby, Actions

#19891 - Go/Ruby/Python: Freeze quality queries in `security-and-quality`.

Pull Request - State: closed - Opened by michaelnebel 7 months ago
Labels: C#, JS, Java, Python, no-change-note-required, Go, Ruby

#19888 - Java, Ruby: add missing .qlref tests

Pull Request - State: closed - Opened by d10c 7 months ago
Labels: Java, no-change-note-required, Ruby

#19872 - Overlay: Enable overlay compilation for Java

Pull Request - State: closed - Opened by kaspersv 8 months ago - 5 comments
Labels: Java, no-change-note-required

#19864 - Post-release preparation for codeql-cli-2.22.1

Pull Request - State: closed - Opened by codeql-ci 8 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19857 - DataFlow: Run overlay-informed if not diff-informed

Pull Request - State: closed - Opened by jbj 8 months ago
Labels: Java, Awaiting evaluation, no-change-note-required, DataFlow Library

#19846 - Java: Diff-informed CleartextStorageCookie.ql

Pull Request - State: closed - Opened by jbj 8 months ago - 1 comment
Labels: Java, no-change-note-required

#19842 - Java: convert remaining `java-code-scanning.qls` query tests to `.qlref`

Pull Request - State: closed - Opened by d10c 8 months ago
Labels: Java, no-change-note-required

#19795 - Java: mass enable diff-informed data flow + `none()` overrides

Pull Request - State: closed - Opened by d10c 8 months ago
Labels: Java, no-change-note-required

#19785 - Openssl acronym normalization

Pull Request - State: closed - Opened by bdrodes 8 months ago
Labels: C++, Java

#19779 - Overlay: Add overlay annotations to Java & shared libraries

Pull Request - State: closed - Opened by kaspersv 8 months ago - 7 comments
Labels: C#, Java, Python, no-change-note-required, DataFlow Library

#19738 - Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages (#2)

Pull Request - State: closed - Opened by owen-mc 8 months ago
Labels: C#, documentation, Java, Swift

#19704 - Post-release preparation for codeql-cli-2.22.0

Pull Request - State: closed - Opened by codeql-ci 8 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19664 - CodeQL Docs: SnakeYaml is now secure by default

Issue - State: closed - Opened by JLLeitschuh 8 months ago - 4 comments
Labels: question, Java

#19602 - Post-release preparation for codeql-cli-2.21.4

Pull Request - State: closed - Opened by codeql-ci 8 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19560 - Java: Add test showing correct usage

Pull Request - State: closed - Opened by owen-mc 9 months ago
Labels: documentation, Java, no-change-note-required

#19556 - Java: Fix SpringRequestMappingMethod URL Extraction #2

Pull Request - State: closed - Opened by owen-mc 9 months ago
Labels: documentation, Java

#19543 - Java: Add test showing missing dispatch for incomplete parameterised type

Pull Request - State: open - Opened by aschackmull 9 months ago
Labels: Java, no-change-note-required

#19541 - Openssl ec key gen

Pull Request - State: open - Opened by bdrodes 9 months ago
Labels: C++, Java

#19540 - Openssl ec key gen

Pull Request - State: closed - Opened by bdrodes 9 months ago
Labels: C++, Java

#19539 - Java: Queries for thread-safe classes

Pull Request - State: open - Opened by yoff 9 months ago
Labels: documentation, Java

#19531 - Changenotes for 2.21.3

Pull Request - State: closed - Opened by jonjanego 9 months ago - 1 comment
Labels: documentation, Java, Go, Ruby, Swift

#19531 - Changenotes for 2.21.3

Pull Request - State: closed - Opened by jonjanego 9 months ago - 1 comment
Labels: documentation, Java, Go, Ruby, Swift

#19530 - Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages

Pull Request - State: open - Opened by felickz 9 months ago
Labels: C#, Java, Swift

#19528 - Crypto: Add OpenSSL elliptic curve algorithm instances and consumers

Pull Request - State: closed - Opened by bdrodes 9 months ago
Labels: C++, Java

#19512 - Fix SpringRequestMappingMethod URL Extraction: Use getAStringArrayValue Instead of getValue

Pull Request - State: open - Opened by sentient0being 9 months ago - 1 comment
Labels: Java

#19509 - Quantum: Expand OpenSSL cipher modeling and fix JCA false reporting of intermediate calls

Pull Request - State: closed - Opened by bdrodes 9 months ago
Labels: C++, Java

#19509 - Quantum: Expand OpenSSL cipher modeling and fix JCA false reporting of intermediate calls

Pull Request - State: closed - Opened by bdrodes 9 months ago
Labels: C++, Java

#19507 - Exclude some queries from query suites by lowering their precision.

Pull Request - State: open - Opened by michaelnebel 9 months ago - 3 comments
Labels: C#, JS, documentation, Java, Python, Go, Ruby, Swift

#19505 - Java: Use the shared BasicBlocks library.

Pull Request - State: open - Opened by aschackmull 9 months ago - 1 comment
Labels: C++, documentation, Java, Kotlin

#19505 - Java: Use the shared BasicBlocks library.

Pull Request - State: closed - Opened by aschackmull 9 months ago - 1 comment
Labels: C++, documentation, Java, Kotlin

#19504 - All: delete outdated deprecations

Pull Request - State: closed - Opened by Napalys 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library

#19504 - All: delete outdated deprecations

Pull Request - State: closed - Opened by Napalys 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library

#19489 - Post-release preparation for codeql-cli-2.21.3

Pull Request - State: closed - Opened by codeql-ci 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19488 - Release preparation for version 2.21.3

Pull Request - State: closed - Opened by codeql-ci 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19488 - Release preparation for version 2.21.3

Pull Request - State: closed - Opened by codeql-ci 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift, DataFlow Library, Actions

#19487 - Fix typo from `tommorow` to `tomorrow`

Pull Request - State: closed - Opened by BaseMax 9 months ago - 1 comment
Labels: JS, Java

#19487 - Fix typo from `tommorow` to `tomorrow`

Pull Request - State: closed - Opened by BaseMax 9 months ago - 1 comment
Labels: JS, Java

#19486 - Fix typo from `commited` to `committed`

Pull Request - State: closed - Opened by BaseMax 9 months ago - 1 comment
Labels: JS, Java

#19486 - Fix typo from `commited` to `committed`

Pull Request - State: closed - Opened by BaseMax 9 months ago - 1 comment
Labels: JS, Java

#19485 - Fix typo from `occured` to `occurred`

Pull Request - State: open - Opened by BaseMax 9 months ago - 1 comment
Labels: JS, Java

#19481 - Generate more value preserving summaries 2

Pull Request - State: closed - Opened by michaelnebel 9 months ago
Labels: C#, C++, Java, Rust

#19481 - Generate more value preserving summaries 2

Pull Request - State: closed - Opened by michaelnebel 9 months ago
Labels: C#, C++, Java, Rust

#19469 - Add CodeQL Quantum models and queries (Java, C++) to experimental

Pull Request - State: closed - Opened by nicolaswill 9 months ago - 9 comments
Labels: C++, Java, no-change-note-required

#19469 - Add CodeQL Quantum models and queries (Java, C++) to experimental

Pull Request - State: closed - Opened by nicolaswill 9 months ago - 11 comments
Labels: C++, Java, no-change-note-required

#19468 - A few missed component governance changes

Pull Request - State: closed - Opened by denislevin 9 months ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift

#19468 - A few missed component governance changes

Pull Request - State: closed - Opened by denislevin 9 months ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Rust, Swift

#19453 - Redsun82/kotlin 2.2.0 support

Pull Request - State: closed - Opened by redsun82 9 months ago
Labels: documentation, Java, Kotlin

#19453 - Redsun82/kotlin 2.2.0 support

Pull Request - State: closed - Opened by redsun82 9 months ago
Labels: documentation, Java, Kotlin

#19452 - Shared: Remove the language-specific model generator scripts

Pull Request - State: closed - Opened by paldepind 9 months ago - 2 comments
Labels: C#, C++, Java, Rust

#19452 - Shared: Remove the language-specific model generator scripts

Pull Request - State: closed - Opened by paldepind 9 months ago - 2 comments
Labels: C#, C++, Java, Rust

#19443 - Shared: Generate more value-preserving flow summaries

Pull Request - State: closed - Opened by MathiasVP 9 months ago - 6 comments
Labels: C#, C++, Java, no-change-note-required, Rust

GitHub / github/codeql issues and pull requests