Skip to content

Actions: github/codeql

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
2,500+ workflow runs
2,500+ workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
CFG: Add a new shared inline CFG test and apply it to unified/swift Check synchronized files #53963: Pull request #22557 synchronize by aschackmull
23s aschackmull:cfg/inline-test
aschackmull:cfg/inline-test
23s
CFG: Add a new shared inline CFG test and apply it to unified/swift Run QL for QL #50838: Pull request #22557 synchronize by aschackmull
3m 22s aschackmull:cfg/inline-test
aschackmull:cfg/inline-test
3m 22s
C#: Very basic support for .NET 11 RC1. Check overlay annotations #9820: Pull request #22565 synchronize by michaelnebel
18s michaelnebel:csharp/dotnetrc1test
michaelnebel:csharp/dotnetrc1test
18s
C#: Very basic support for .NET 11 RC1. Code scanning - action #26110: Pull request #22565 synchronize by michaelnebel
3m 15s michaelnebel:csharp/dotnetrc1test
michaelnebel:csharp/dotnetrc1test
3m 15s
C#: Very basic support for .NET 11 RC1. C#: Run QL Tests #11011: Pull request #22565 synchronize by michaelnebel
5m 24s michaelnebel:csharp/dotnetrc1test
michaelnebel:csharp/dotnetrc1test
5m 24s
C#: Very basic support for .NET 11 RC1. Run QL for QL #50837: Pull request #22565 synchronize by michaelnebel
2m 50s michaelnebel:csharp/dotnetrc1test
michaelnebel:csharp/dotnetrc1test
2m 50s
C#: Very basic support for .NET 11 RC1. Check synchronized files #53962: Pull request #22565 synchronize by michaelnebel
22s michaelnebel:csharp/dotnetrc1test
michaelnebel:csharp/dotnetrc1test
22s
Handling of axios in functions and making axios create function recur… Check change note #40213: Pull request #19337 labeled by andersfugmann
Action required rotem-cider:main
rotem-cider:main
Action required
Fix typo from occured to occurred Check change note #40212: Pull request #19485 labeled by andersfugmann
Action required MaxFork:max-updates-typo-mistake-occured-to-occurred
MaxFork:max-updates-typo-mistake-occured-to-occurred
Action required
Pull Request Labeler Pull Request Labeler #57946: Scheduled
2m 55s main
main
2m 55s
Actions: Add taint summary for suisei-cn/actions-download-file url input Check change note #40211: Pull request #21600 labeled by andersfugmann
Action required XinyuZhangXvX:suisei-cn#actions-download-file
XinyuZhangXvX:suisei-cn#actions-download-file
Action required
Actions: Removed a false positive injection sink model for theveracode/veracode-sca action. Check change note #40210: Pull request #21604 labeled by andersfugmann
Action required XinyuZhangXvX:veracode#veracode-sca
XinyuZhangXvX:veracode#veracode-sca
Action required
JavaScript: Add setHTMLUnsafe and parseHTMLUnsafe as XSS sinks Check change note #40209: Pull request #21648 labeled by andersfugmann
Action required sunnyeo:js/add-setHTMLUnsafe-parseHTMLUnsafe-sinks
sunnyeo:js/add-setHTMLUnsafe-parseHTMLUnsafe-sinks
Action required
Rust: Add AlertSuppression.ql for inline suppression comments Check change note #40208: Pull request #21638 labeled by andersfugmann
Action required cnuss:rust/alert-suppression
cnuss:rust/alert-suppression
Action required
Add repr() and %r sanitizers to py/log-injection query to reduce false positives Check change note #40207: Pull request #22038 labeled by andersfugmann
Action required mrigankpawagi:mrigankpawagi/py-log-injection-fix
mrigankpawagi:mrigankpawagi/py-log-injection-fix
Action required
Java: model LDAP bind-DN sinks for java/ldap-injection Check change note #40206: Pull request #22002 labeled by andersfugmann
Action required tonghuaroot:ldap-bind-dn-sinks
tonghuaroot:ldap-bind-dn-sinks
Action required
Python: Ignore await and typing ellipsis as non-effectful statements Check change note #40205: Pull request #22291 labeled by andersfugmann
Action required maxfischer2781:python/stmt_effects_async_stub
maxfischer2781:python/stmt_effects_async_stub
Action required
Lua: Add Lua as a new CodeQL language Check change note #40204: Pull request #22223 labeled by andersfugmann
Action required prankster009:lua-51-language-analysis-pr
prankster009:lua-51-language-analysis-pr
Action required
Python: Reduce log injection false positives Check change note #40203: Pull request #22231 labeled by andersfugmann
Action required Ali-Razmjoo:python-log-injection
Ali-Razmjoo:python-log-injection
Action required
Python: Model ldap3 paged searches Check change note #40202: Pull request #22303 labeled by andersfugmann
Action required theinfosecguy:python-ldap3-paged-search
theinfosecguy:python-ldap3-paged-search
Action required
Python: add SQL injection models for the duckdb package Check change note #40201: Pull request #22352 labeled by andersfugmann
Action required jtabsbm:add-duckdb-python-models
jtabsbm:add-duckdb-python-models
Action required
Rust: Add unsafe deserialization query (CWE-502) Check change note #40200: Pull request #22324 labeled by andersfugmann
Action required lcmangalagiri:rust-cwe-502-unsafe-deserialization
lcmangalagiri:rust-cwe-502-unsafe-deserialization
Action required
Python: Handle dynamic module exports Check change note #40199: Pull request #22354 labeled by andersfugmann
Action required theinfosecguy:python-undefined-export-getattr
theinfosecguy:python-undefined-export-getattr
Action required
Python: Model shell -c command arguments Check change note #40198: Pull request #22434 labeled by andersfugmann
Action required theinfosecguy:python-shell-c-command-modeling
theinfosecguy:python-shell-c-command-modeling
Action required
Pull Request Labeler Pull Request Labeler #57945: Scheduled
45s main
main
45s
ProTip! You can narrow down the results and go further in time using created:<2026-09-15 or the other filters available.