Skip to content

Pull requests: github/codeql

New pull request New
440 Open 16,902 Closed
440 Open 16,902 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Detect unpinned reusable workflows Actions Analysis of GitHub Actions documentation
#22285 opened Aug 5, 2026 by theinfosecguy Contributor Loading…
1
Unified: Track all local name kinds in one pass no-change-note-required This PR does not need a change note
#22284 opened Aug 5, 2026 by asgerf Contributor Loading…
4
Java: model R2DBC SQL injection sinks documentation Java
#22279 opened Aug 4, 2026 by felickz Contributor Loading…
4
C#: Bumping C# MessagePack to v3.1.7 C#
#22277 opened Aug 4, 2026 by andrewngo Loading…
Actions: Fix false positives from static matrix values Actions Analysis of GitHub Actions documentation
#22270 opened Aug 3, 2026 by JarLob Contributor Loading…
6
Java: model org.apache.commons.xml XmlFactories as safe XXE sources documentation Java
#22269 opened Aug 2, 2026 by ppkarwasz Loading…
5 tasks done
5
C#: Improve ASP.NET Core MVC controller discovery C# documentation
#22265 opened Jul 31, 2026 by JarLob Contributor Loading…
7
Actions: Add new models for external actions/workflows Actions Analysis of GitHub Actions documentation
#22263 opened Jul 31, 2026 by JarLob Contributor Loading…
15
Ruby: Fix ExprReturnNode to handle Rescue, Ensure, and Else. no-change-note-required This PR does not need a change note Ruby
#22256 opened Jul 30, 2026 by aschackmull Contributor Loading…
1
build(deps): bump platforms from 1.0.0 to 1.1.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22254 opened Jul 30, 2026 by dependabot Bot Loading…
unified: Always run corpus tests depends on internal PR This PR should only be merged in sync with an internal Semmle PR documentation no-change-note-required This PR does not need a change note
#22248 opened Jul 29, 2026 by tausbn Contributor Loading…
3
QL: Autoformat test files QL-for-QL
#22232 opened Jul 24, 2026 by redsun82 Contributor Loading…
8
Python: Reduce log injection false positives documentation Python
#22231 opened Jul 23, 2026 by Ali-Razmjoo Loading…
Support --learn for inline expectation tests C# C++ Go Java JS no-change-note-required This PR does not need a change note Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22228 opened Jul 23, 2026 by d10c Contributor Loading…
9
C++ regex parser: align with std::regex ECMAScript grammar and fix literal-location mapping
#22227 opened Jul 23, 2026 by Copilot AI • Draft
@jketema
Lua: Add Lua as a new CodeQL language documentation
#22223 opened Jul 22, 2026 by prankster009 Loading…
Actions: Normalize explicit untrusted checkout paths Actions Analysis of GitHub Actions documentation
#22221 opened Jul 21, 2026 by 1sgtpepper • Draft
1
6
Add C++ ECMAScript regular-expression parser and tree view
#22220 opened Jul 21, 2026 by Copilot AI • Draft
@jketema
Bump the npm_and_yarn group across 9 directories with 6 updates dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code JS
#22212 opened Jul 18, 2026 by dependabot Bot Loading…
Support multi-tag column surgery and tag-generic learning in --learn inline expectations C# C++ Go Java JS Python QL-for-QL Ruby Rust Pull requests that update Rust code Swift
#22208 opened Jul 16, 2026 by d10c Contributor • Draft
14
C#: Allow virtual member access in nameof expressions in cs/virtual-call-in-constructor. C# documentation
#22205 opened Jul 16, 2026 by michaelnebel Contributor Loading…
2
build(deps): bump buildifier_prebuilt from 6.4.0 to 8.5.1.3 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22203 opened Jul 16, 2026 by dependabot Bot Loading…
build(deps): bump rules_cc from 0.2.17 to 0.2.22 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22202 opened Jul 16, 2026 by dependabot Bot Loading…
Bump abseil-cpp from 20260107.1 to 20260526.0 bazel Pull requests that update bazel code dependencies Pull requests that update a dependency file
#22201 opened Jul 16, 2026 by dependabot Bot Loading…
C++ regex parse tree and RegexTreeViewSig implementation (Phase 1 of ReDoS support) C++ documentation
#22200 opened Jul 15, 2026 by Copilot AI • Draft
@jketema
19
ProTip! What’s not been updated in a month: updated:<2026-07-05.