github/codeql

Issues

• Recursive type checking in TypeScript

  #16611 opened 11 days ago by jpoly1219
  3

• C: False positive about "Potential double free" with negative array indices

  #16643 opened 8 days ago by rouault
  0

• Unable to resolve CodeQL SSRF warning for a HTTP request function that takes pip package names as input

  #16575 opened 18 days ago by tieneupin
  7

• General issue for CSharp| Is it possible to select a method call inside a method?

  #16613 opened 11 days ago by wwwjwww
  0

• How to resolve LocalTypeAccess into TypeExpr in TypeScript?

  #16595 opened 11 days ago by jpoly1219
  2

• [cpp] extractor crashed when creating database

  #16449 opened a month ago by Godrichp
  5

• Use-After-Query.ql does not work on this simple situation

  #16542 opened 19 days ago by zouyi73
  2

• How to write Metadata for queries to get Call Graph in JavaScript?

  #16587 opened 16 days ago by flyboss
  4

• Lack of notifications

  #16593 opened 13 days ago by mcandre
  1

• Text format

  #16594 opened 13 days ago by mcandre
  1

• False negative for JavaScript SQL injection

  #16548 opened 16 days ago by wtfiwtz
  7

• Https://GitHub.com/SOHEIL115/

  #16590 opened 15 days ago by SOHEIL115
  0

• Organization-level CodeQL Query packs

  #16555 opened 18 days ago by martinvks
  2

• Python: Dataflow fails when Class attributes are accessed as Instance attributes.

  #16501 opened 25 days ago by trentn
  2

• Python - unable to find suitable examples to iterate over objects

  #16532 opened 19 days ago by amygbAI
  8

• Use-After-Query.ql doesn't work on this simple situation

  #16543 opened 19 days ago by zouyi73
  0

• CodeQL XSS False Positive when using ESAPI.encoder().encodeForHTML() to defend against XSS

  #16531 opened 20 days ago by davewichers
  1

• General issue

  #16535 opened 19 days ago by MaxWlkp
  0

• CodeQL autobuild action doesn't work with reusable workflow

  #16536 opened 19 days ago by tacascer
  1

• Insecure randomness - Documentation issue - Code example is misleading and could be improved

  #16499 opened 24 days ago by thariq-nugrohotomo
  4

• raw.githubusercontent.com/square/okhttp/master/samples/guide/src/main/java/okhttp3/guide/PostExample.java

  #16525 opened 22 days ago by JessiG2319
  0

• CodeQL python scan failing

  #16370 opened a month ago by infa-aksharma
  5

• Soheil.ghaleie@github.com

  #16514 opened 23 days ago by SOHEIL115
  0

• Go Autobuild failure reason unclear

  #16469 opened 25 days ago by arsenetar
  2

• [REMOVED]

  #16492 opened 25 days ago by SOHEIL115
  0

• CPP SimpleRangeAnalysis::getTruncatedUpperBounds NegativeArraySizeException

  #16437 opened a month ago by ropwareJB
  3

• False positive - A secret detected in a go context causes codeql to think all context values are secret

  #16486 opened a month ago by Jamstah
  3

• Create a database from a project with Bazel, can't do it

  #16466 opened a month ago by KeuntaeShin
  2

• Problems porting deprecated DataFlow to new IR DataFlow (field-involved)

  #16470 opened a month ago by f0rm2l1n
  2

• Taint Tracking to a LocalVariable

  #16438 opened a month ago by mies47
  2

• Add dummy passwords to documentation for rule 'js/hardcoded-passwords'

  #16359 opened a month ago by ebickle
  4

• CodeQL is throwing errors while analyzing on a python flask app

  #16467 opened a month ago by spignelon
  4

• CodeQL run time increased from mins to hours

  #16448 opened a month ago by asreehari-splunk
  8

• False positive for jsonwebtoken.sign with a dummy password used as a secret key

  #16360 opened a month ago by ebickle
  7

• CodeQL being very slow when passed --command parameter

  #16361 opened a month ago by amir734jj
  3

• General issue

  #16439 opened a month ago by PANCHOHACK
  0

• False positive - go/allocation-size-overflow

  #16368 opened a month ago by natefinch
  2

• Python SQL Injection not being detected for CWE-089

  #16353 opened a month ago by leviaurizon
  4

• Fully qualified names

  #16352 opened a month ago by OrenGitHub
  13

• Enable scans and notifications by default

  #16348 opened a month ago by mcandre
  1

• Using binary logs to significantly increase CodeQL analysis performance for C#

  #16346 opened a month ago by jaredpar
  6

• General issue

  #16410 opened a month ago by braydenmckinney737
  0

• Missing option to enable CodeQL at personal org level

  #16350 opened a month ago by mcandre
  1

• TypeScriptParser error

  #16357 opened a month ago by kexinoh
  1

• False positive: go/uncontrolled-allocation-size, even though length is limited via `min` function

  #16371 opened a month ago by fzipp
  1

• CodeQL detected code written in Java/Kotlin but could not process any of it

  #16335 opened a month ago by ShanRen995
  4

• False positive: Missing X-Frame-Options HTTP header

  #16334 opened a month ago by alensiljak
  0

• False positive: Insecure Direct Object Reference (cs/web/insecure-direct-object-reference) and Missing function level access control (cs/web/missing-function-level-access-control)

  #16327 opened a month ago by alensiljak
  1

• TypeScript Parsing Error

  #16347 opened a month ago by aydinnyunus
  2

• codeql database create crash

  #16324 opened a month ago by knubonrk
  2