github/codeql issues and pull requests

#17175 - Release preparation for version 2.18.2

Pull Request - State: closed - Opened by codeql-ci over 1 year ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17175 - Release preparation for version 2.18.2

Pull Request - State: closed - Opened by codeql-ci over 1 year ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17174 - Revert "Release preparation for version 2.18.2"

Pull Request - State: closed - Opened by alexet over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17174 - Revert "Release preparation for version 2.18.2"

Pull Request - State: closed - Opened by alexet over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17173 - Shared: Apply `ShowProvenance` in `InlineFlowTest.qll`

Pull Request - State: open - Opened by hvitved over 1 year ago
Labels: C#, JS, Java, Python, no-change-note-required, Go, Ruby, Kotlin, DataFlow Library

#17159 - Release preparation for version 2.18.2

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17159 - Release preparation for version 2.18.2

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17154 - Python: Upgrade lockfile for extractor tests

Pull Request - State: closed - Opened by RasmusWL over 1 year ago
Labels: Python

#17154 - Python: Upgrade lockfile for extractor tests

Pull Request - State: open - Opened by RasmusWL over 1 year ago
Labels: Python

#17108 - Dataflow: Propagate provenance correctly for flow-through wrappers.

Pull Request - State: closed - Opened by aschackmull over 1 year ago
Labels: C#, Java, Python, no-change-note-required, Go, Ruby, DataFlow Library

#17080 - Python: Add Streamlit models

Pull Request - State: closed - Opened by sylwia-budzynska over 1 year ago - 8 comments
Labels: documentation, Python

#17070 - Dataflow: Replace `ppReprType` with `DataFlowType.toString`.

Pull Request - State: closed - Opened by aschackmull over 1 year ago - 1 comment
Labels: C#, C++, documentation, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#17070 - Dataflow: Replace `ppReprType` with `DataFlowType.toString`.

Pull Request - State: closed - Opened by aschackmull over 1 year ago
Labels: C#, C++, documentation, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#17041 - Post-release preparation for codeql-cli-2.18.1

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17040 - Release preparation for version 2.18.1

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17032 - Release preparation for version 2.18.1

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#17031 - Python: Tweak 2024-06-24-cookie-header-writes.md

Pull Request - State: closed - Opened by cklin over 1 year ago - 1 comment
Labels: documentation, Python

#17030 - Python: remove the imprecise container taint steps

Pull Request - State: open - Opened by yoff over 1 year ago
Labels: Python

#16989 - [Python] : Cors misconfiguration

Pull Request - State: closed - Opened by ahmed-farid-dev over 1 year ago - 1 comment
Labels: documentation, Python, awaiting-response, external-contribution

#16989 - [Python] : Cors misconfiguration

Pull Request - State: closed - Opened by ahmed-farid-dev over 1 year ago - 1 comment
Labels: documentation, Python, awaiting-response, external-contribution

#16979 - Dataflow: Replace MakeSets with QlBuiltins::InternSets.

Pull Request - State: closed - Opened by aschackmull over 1 year ago - 1 comment
Labels: C#, C++, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16970 - Data flow: Compute local big step relation as stage output

Pull Request - State: open - Opened by hvitved over 1 year ago - 3 comments
Labels: C#, C++, depends on internal PR, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16970 - Data flow: Compute local big step relation as stage output

Pull Request - State: closed - Opened by hvitved over 1 year ago - 3 comments
Labels: C#, C++, depends on internal PR, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16940 - Python: Handle diagnostics writing for `BuiltinModuleExtractable`

Pull Request - State: closed - Opened by RasmusWL over 1 year ago - 2 comments
Labels: Python

#16933 - Python: Promote the insecure cookie query from experimental

Pull Request - State: closed - Opened by joefarebrother over 1 year ago - 3 comments
Labels: documentation, Python

#16923 - Python: Add test for impossible isinstance flow

Pull Request - State: closed - Opened by RasmusWL over 1 year ago
Labels: Python

#16921 - Release preparation for version 2.18.0

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16912 - Python: False positive caused by impossible `isinstance` check

Issue - State: closed - Opened by DefinetlyNotAI over 1 year ago - 2 comments
Labels: Python, false-positive

#16910 - Python: Exclude probable test files in model editor

Pull Request - State: closed - Opened by koesie10 over 1 year ago
Labels: Python, no-change-note-required

#16896 - SSA: Add `BasicBlock.{getNode/1,length/0}` to the input signature

Pull Request - State: closed - Opened by hvitved over 1 year ago
Labels: C#, C++, Java, Python, no-change-note-required, Ruby, Swift, DataFlow Library

#16885 - Python: Fix bad join in function resolution

Pull Request - State: closed - Opened by tausbn over 1 year ago - 1 comment
Labels: Python, no-change-note-required

#16883 - Python: Fix bad join in `getImmediateModuleReference`

Pull Request - State: closed - Opened by tausbn over 1 year ago
Labels: Python, no-change-note-required

#16876 - Python: Add Hardcoded Credentials MaD support

Pull Request - State: closed - Opened by GeekMasher over 1 year ago
Labels: documentation, Python

#16860 - Python: fix typo pointed out in review but missed by me

Pull Request - State: closed - Opened by yoff over 1 year ago
Labels: documentation, Python

#16848 - Users/chanely/insecure sql connection versioncheck

Pull Request - State: closed - Opened by chanel-y over 1 year ago - 2 comments
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16843 - Python: stdlib models qa

Pull Request - State: closed - Opened by yoff over 1 year ago - 3 comments
Labels: Python, Awaiting evaluation, no-change-note-required

#16840 - Python: Modelling of the Standard Library

Pull Request - State: closed - Opened by yoff over 1 year ago - 3 comments
Labels: Python, no-change-note-required

#16840 - Python: Modelling of the Standard Library

Pull Request - State: open - Opened by yoff over 1 year ago - 3 comments
Labels: Python, no-change-note-required

#16830 - Post-release preparation for codeql-cli-2.17.6

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16821 - Release preparation for version 2.17.6

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16814 - WIP: Python: CORS Bypass

Pull Request - State: closed - Opened by porcupineyhairs over 1 year ago - 4 comments
Labels: documentation, Python, external-contribution

#16812 - Python: Pycurl SSL Disabled

Pull Request - State: closed - Opened by porcupineyhairs over 1 year ago - 3 comments
Labels: documentation, Python, external-contribution

#16812 - Python: Pycurl SSL Disabled

Pull Request - State: closed - Opened by porcupineyhairs over 1 year ago - 3 comments
Labels: documentation, Python, external-contribution

#16804 - Python: Fix bad join in `DataFlowDispatch`

Pull Request - State: closed - Opened by tausbn over 1 year ago
Labels: Python, no-change-note-required

#16789 - python: Document MaD format

Pull Request - State: closed - Opened by yoff over 1 year ago - 1 comment
Labels: documentation, Python, ready-for-doc-review

#16785 - Dataflow: Replace stage 3 type pruning with flow-insensitive type pruning.

Pull Request - State: closed - Opened by aschackmull over 1 year ago - 4 comments
Labels: C#, C++, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16784 - C++/Java: Accept new warning format in ql tests

Pull Request - State: closed - Opened by redsun82 over 1 year ago
Labels: JS, C++, depends on internal PR, Java, Python

#16771 - Python : Arbitrary code execution due to Js2Py

Pull Request - State: closed - Opened by porcupineyhairs over 1 year ago - 6 comments
Labels: documentation, Python, external-contribution

#16764 - Python: tests with false positives around `match`

Pull Request - State: closed - Opened by redsun82 over 1 year ago
Labels: Python

#16764 - Python: tests with false positives around `match`

Pull Request - State: closed - Opened by redsun82 over 1 year ago
Labels: Python

#16762 - Python: failing unused import test case

Pull Request - State: closed - Opened by redsun82 over 1 year ago
Labels: Python

#16754 - Python: Disregard unused imports in `pytest` tests

Pull Request - State: closed - Opened by tausbn over 1 year ago - 3 comments
Labels: Python, no-change-note-required

#16725 - Mergeback from `rc/3.14`

Pull Request - State: closed - Opened by MathiasVP over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16717 - Post-release preparation for codeql-cli-2.17.5

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16716 - Rust: Move to bzlmod.

Pull Request - State: closed - Opened by criemen over 1 year ago - 1 comment
Labels: C#, JS, depends on internal PR, Python, Ruby

#16715 - Release preparation for version 2.17.5

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16670 - Python: Add type-tracking flow for class (instance) attributes

Pull Request - State: open - Opened by RasmusWL over 1 year ago - 2 comments
Labels: Python

#16657 - Python: Add additional sanitizers to SSRF

Pull Request - State: closed - Opened by joefarebrother over 1 year ago
Labels: documentation, Python

#16654 - Python: Fixes an error in the deprecation notice for a taint tracking configuration

Pull Request - State: closed - Opened by sidshank over 1 year ago
Labels: Python, no-change-note-required

#16646 - Python: Update url-redirect qhelp with `https:/example.com` handling

Pull Request - State: closed - Opened by RasmusWL over 1 year ago - 1 comment
Labels: documentation, Python

#16642 - Post-release preparation for codeql-cli-2.17.4

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16640 - Release preparation for version 2.17.4

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16625 - Revert "Release preparation for version 2.17.4"

Pull Request - State: closed - Opened by cklin over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16612 - Python: Support Prepared Requests - Experimental Module

Pull Request - State: closed - Opened by naneer over 1 year ago - 4 comments
Labels: Python, awaiting-response, external-contribution

#16612 - Python: Support Prepared Requests - Experimental Module

Pull Request - State: closed - Opened by naneer over 1 year ago - 4 comments
Labels: Python, awaiting-response, external-contribution

#16607 - Post-release preparation for codeql-cli-2.17.4

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16605 - Release preparation for version 2.17.4

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16598 - Python: Add models for `opml`

Pull Request - State: closed - Opened by jorgectf over 1 year ago
Labels: documentation, Python

#16586 - Python: Use Rust 1.74

Pull Request - State: closed - Opened by hvitved over 1 year ago
Labels: depends on internal PR, Python, no-change-note-required, Ruby

#16575 - Unable to resolve CodeQL SSRF warning for a HTTP request function that takes pip package names as input

Issue - State: closed - Opened by tieneupin over 1 year ago - 8 comments
Labels: Python

#16565 - Release preparation for version 2.17.4

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16564 - Update all pack versions to `1.0.0`

Pull Request - State: closed - Opened by dbartol over 1 year ago - 5 comments
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, QL-for-QL, Swift, DataFlow Library

#16562 - Dataflow: Fix qltests following https://github.com/github/codeql/pull/16511

Pull Request - State: closed - Opened by aschackmull over 1 year ago
Labels: C++, Java, Python, no-change-note-required, Go

#16560 - Dataflow: dummy CI trigger [DON'T MERGE]

Pull Request - State: closed - Opened by aschackmull over 1 year ago
Labels: C#, C++, Java, Python, Go, Ruby, Swift

#16526 - Python: Add tracking steps for class level attributes

Pull Request - State: closed - Opened by naneer over 1 year ago - 2 comments
Labels: documentation, Python, external-contribution

#16512 - Python: Allow provenance in additional taint steps

Pull Request - State: closed - Opened by yoff over 1 year ago - 1 comment
Labels: Python, no-change-note-required

#16491 - Post-release preparation for codeql-cli-2.17.3

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16489 - Release preparation for version 2.17.3

Pull Request - State: closed - Opened by codeql-ci over 1 year ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16483 - Python: The MaD token `Instance` now follows subclasses

Pull Request - State: closed - Opened by yoff over 1 year ago
Labels: Python, no-change-note-required

#16446 - Ruby/Python/JS/Swift: Add category of Private information to shared sensitive data heuristics

Pull Request - State: closed - Opened by joefarebrother almost 2 years ago - 4 comments
Labels: JS, documentation, Python, Ruby, Swift

#16444 - Shared data flow: Make summaryThroughStepValue include param outputs

Pull Request - State: closed - Opened by owen-mc almost 2 years ago - 1 comment
Labels: C#, C++, Java, Python, no-change-note-required, Go, Ruby, Swift, DataFlow Library

#16430 - Tree-sitter: Bump to 0.22.6

Pull Request - State: closed - Opened by hvitved almost 2 years ago - 1 comment
Labels: Python, Ruby, QL-for-QL

#16423 - Python: Use entities in reorder directives

Pull Request - State: closed - Opened by cklin almost 2 years ago
Labels: Python

#16412 - Tree-sitter: Handle `alias($.foo, $.bar)` when `$.bar` is undefined

Pull Request - State: closed - Opened by hvitved almost 2 years ago
Labels: Python, Ruby, QL-for-QL

#16408 - Post-release preparation for codeql-cli-2.17.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, Java, Python, Go, Ruby, Swift, DataFlow Library

#16407 - Release preparation for version 2.17.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16392 - External flow: standardize `empty.model.yml`

Pull Request - State: closed - Opened by owen-mc almost 2 years ago - 1 comment
Labels: C#, JS, Java, Python, no-change-note-required, Go, Ruby

#16370 - CodeQL python scan failing

Issue - State: closed - Opened by infa-aksharma almost 2 years ago - 1 comment
Labels: question, Python

#16365 - Post-release preparation for codeql-cli-2.17.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16363 - Release preparation for version 2.17.2

Pull Request - State: closed - Opened by codeql-ci almost 2 years ago
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby, Swift, DataFlow Library

#16330 - All: delete outdated deprecations

Pull Request - State: closed - Opened by erik-krogh almost 2 years ago - 1 comment
Labels: C#, JS, C++, documentation, Java, Python, Go, Ruby

#16320 - [8th May 2024] Add deprecation notices to CodeQL for VS Code documentation

Pull Request - State: closed - Opened by subatoi almost 2 years ago - 3 comments
Labels: documentation, Python, ready-for-doc-review, Go

#16316 - Redsun82/buildifier test

Pull Request - State: closed - Opened by redsun82 almost 2 years ago
Labels: JS, Python, Swift

#16315 - Bazel: introduce buildifier formatting

Pull Request - State: closed - Opened by redsun82 almost 2 years ago - 2 comments
Labels: JS, Python, Swift

#16306 - JS: do fewer regexp matches in SensitiveActions

Pull Request - State: closed - Opened by nickrolfe almost 2 years ago - 1 comment
Labels: JS, Python, no-change-note-required, Ruby, Swift

#16252 - Python: Move dataflow tests out of experimental

Pull Request - State: closed - Opened by RasmusWL almost 2 years ago - 1 comment
Labels: documentation, Python, no-change-note-required

#16245 - Python: Rename `StrConst` to `StringLiteral`

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: documentation, Python

#16235 - JS: Add library for exporting graphs as type models (v2)

Pull Request - State: closed - Opened by asgerf almost 2 years ago
Labels: JS, Python, Ruby

#16233 - Python: Fix flags test

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: Python, no-change-note-required

#16231 - Python: Remove test with CRLF line endings

Pull Request - State: closed - Opened by tausbn almost 2 years ago
Labels: documentation, Python, no-change-note-required

GitHub / github/codeql issues and pull requests