Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
481
(481)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
java
ql
src
Security
on
codeql-cli/v2.15.4
User selector
All users
Datepicker
All time
Commit history
Commits on Nov 16, 2023
Merge pull request #14793 from github/max-schaefer/tainted-path-qhelp
Show description for ca33402
max-schaefer
authored
ca33402
View commit details
Copy full SHA for ca33402
View code at this point
Browse repository at this point
Revert "Add additional example."
Show description for a5e7ef4
Max Schaefer
committed
a5e7ef4
View commit details
Copy full SHA for a5e7ef4
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 143e168
max-schaefer
and
subatoi
authored
143e168
View commit details
Copy full SHA for 143e168
View code at this point
Browse repository at this point
Add additional example.
Max Schaefer
committed
947b094
View commit details
Copy full SHA for 947b094
View code at this point
Browse repository at this point
Address suggestions from review.
Max Schaefer
committed
009d580
View commit details
Copy full SHA for 009d580
View code at this point
Browse repository at this point
Commits on Nov 15, 2023
Java: Improve QHelp for `java/path-injection` to mention less disruptive fixes.
Max Schaefer
committed
a46a7fa
View commit details
Copy full SHA for a46a7fa
View code at this point
Browse repository at this point
Commits on Nov 8, 2023
Merge pull request #14610 from atorralba/atorralba/java/jms-deserialization
Show description for 5442cdb
atorralba
authored
5442cdb
View commit details
Copy full SHA for 5442cdb
View code at this point
Browse repository at this point
Commits on Nov 7, 2023
Update dead link.
geoffw0
committed
e8a466a
View commit details
Copy full SHA for e8a466a
View code at this point
Browse repository at this point
Commits on Oct 26, 2023
Java: Add JMS sink to java/unsafe-deserialization
atorralba
committed
7af3d23
View commit details
Copy full SHA for 7af3d23
View code at this point
Browse repository at this point
Commits on Oct 24, 2023
Autoformat
smowton
committed
e8c9708
View commit details
Copy full SHA for e8c9708
View code at this point
Browse repository at this point
Mass rename L/RValue -> VarWrite/Read
smowton
authored
ac38d4c
View commit details
Copy full SHA for ac38d4c
View code at this point
Browse repository at this point
Add aliases for public, importable renamed classes and predicates.
Show description for 59a49ee
smowton
authored
59a49ee
View commit details
Copy full SHA for 59a49ee
View code at this point
Browse repository at this point
Mass-rename MethodAccess -> MethodCall
smowton
authored
f552a15
View commit details
Copy full SHA for f552a15
View code at this point
Browse repository at this point
Commits on Oct 16, 2023
Java: Improve java/spring-disabled-csrf-protection
atorralba
committed
d08ee76
View commit details
Copy full SHA for d08ee76
View code at this point
Browse repository at this point
Commits on Sep 18, 2023
Java: Further alert message improvement
Show description for 874f91c
intrigus-lgtm
and
atorralba
authored
874f91c
View commit details
Copy full SHA for 874f91c
View code at this point
Browse repository at this point
Commits on Sep 12, 2023
Java: Fix alert message
Show description for b6417ca
intrigus-lgtm
committed
b6417ca
View commit details
Copy full SHA for b6417ca
View code at this point
Browse repository at this point
Commits on Aug 17, 2023
Apply docs review suggestions
Show description for 8d88af1
egregius313
and
sabrowning1
committed
8d88af1
View commit details
Copy full SHA for 8d88af1
View code at this point
Browse repository at this point
Use more appropriate description
egregius313
committed
b305962
View commit details
Copy full SHA for b305962
View code at this point
Browse repository at this point
Typos and style fixes
Show description for 929090a
egregius313
and
atorralba
committed
929090a
View commit details
Copy full SHA for 929090a
View code at this point
Browse repository at this point
Documentation fixes
egregius313
committed
172b8a6
View commit details
Copy full SHA for 172b8a6
View code at this point
Browse repository at this point
Documentation
egregius313
committed
b567ec8
View commit details
Copy full SHA for b567ec8
View code at this point
Browse repository at this point
Trust Boundary Work
egregius313
committed
f58590c
View commit details
Copy full SHA for f58590c
View code at this point
Browse repository at this point
Style fixes
egregius313
committed
3e7444c
View commit details
Copy full SHA for 3e7444c
View code at this point
Browse repository at this point
Add missing security severity
egregius313
committed
1537050
View commit details
Copy full SHA for 1537050
View code at this point
Browse repository at this point
Convert trust boundary models to MaD
egregius313
committed
a8b7e70
View commit details
Copy full SHA for a8b7e70
View code at this point
Browse repository at this point
Trust Boundary Query
egregius313
committed
76438f1
View commit details
Copy full SHA for 76438f1
View code at this point
Browse repository at this point
Commits on Jul 13, 2023
C#/Java/Ruby: Remove superfluous module members.
aschackmull
committed
91de43f
View commit details
Copy full SHA for 91de43f
View code at this point
Browse repository at this point
Commits on Jun 27, 2023
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
Show description for a7c2a25
atorralba
authored
a7c2a25
View commit details
Copy full SHA for a7c2a25
View code at this point
Browse repository at this point
Commits on Jun 19, 2023
Adjust ZipSlip query description according to review suggestions.
atorralba
committed
8f6d2ed
View commit details
Copy full SHA for 8f6d2ed
View code at this point
Browse repository at this point
Apply code review suggestions.
Show description for 3c4d938
atorralba
and
asgerf
committed
3c4d938
View commit details
Copy full SHA for 3c4d938
View code at this point
Browse repository at this point
Commits on Jun 16, 2023
Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query
Show description for 3e96fe6
atorralba
committed
3e96fe6
View commit details
Copy full SHA for 3e96fe6
View code at this point
Browse repository at this point
Commits on Jun 13, 2023
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
atorralba
authored
ffe6768
View commit details
Copy full SHA for ffe6768
View code at this point
Browse repository at this point
Commits on Jun 2, 2023
Add PathCreation.qll sinks to models-as-data
Show description for 527fe52
atorralba
committed
527fe52
View commit details
Copy full SHA for 527fe52
View code at this point
Browse repository at this point
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
atorralba
authored
c3b1ef2
View commit details
Copy full SHA for c3b1ef2
View code at this point
Browse repository at this point
Commits on May 25, 2023
also fix the first code-block
erik-krogh
committed
9f5bf8f
View commit details
Copy full SHA for 9f5bf8f
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
×
×
Рекламное место
свободно