Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.2k
Code
Issues
1k
Pull requests
481
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
src
Security
CWE-020-ExternalAPIs
on
codeql-cli/v2.27.0
User selector
All users
Datepicker
All time
Commit history
Commits on Dec 3, 2025
Use more flowTo.
aschackmull
committed
78e1879
View commit details
Copy full SHA for 78e1879
View code at this point
Browse repository at this point
Commits on Apr 30, 2025
Fix cwe tags to include leading zero
owen-mc
committed
cf614a5
View commit details
Copy full SHA for cf614a5
View code at this point
Browse repository at this point
Commits on Feb 6, 2025
Python: resolve remaining TODOs
asgerf
committed
d3ee658
View commit details
Copy full SHA for d3ee658
View code at this point
Browse repository at this point
Python: mass enable diff-informed data flow
asgerf
committed
e4a1847
View commit details
Copy full SHA for e4a1847
View code at this point
Browse repository at this point
Commits on Dec 3, 2024
Python: Remove deprecated configuration classes referencing deleted api.
aschackmull
committed
8a5fc97
View commit details
Copy full SHA for 8a5fc97
View code at this point
Browse repository at this point
Commits on Apr 12, 2024
Python: Add alert provenance plumbing.
aschackmull
committed
a8fc100
View commit details
Copy full SHA for a8fc100
View code at this point
Browse repository at this point
Commits on Aug 28, 2023
Python: Move `UntrustedDataToExternalAPI` to new dataflow API
RasmusWL
committed
acde192
View commit details
Copy full SHA for acde192
View code at this point
Browse repository at this point
Commits on Jun 9, 2023
delete old deprecations
erik-krogh
committed
6dfeb25
View commit details
Copy full SHA for 6dfeb25
View code at this point
Browse repository at this point
Commits on May 3, 2023
Python: Make implicit this receivers explicit
kaspersv
committed
3eb5a95
View commit details
Copy full SHA for 3eb5a95
View code at this point
Browse repository at this point
Commits on Jan 17, 2023
Python: `ExternalAPIs.qll`: Swap order of classes
Show description for ae1d4de
RasmusWL
and
yoff
committed
ae1d4de
View commit details
Copy full SHA for ae1d4de
View code at this point
Browse repository at this point
Python: Minor adjustment in QLDoc
Show description for 608b16c
RasmusWL
and
yoff
authored
608b16c
View commit details
Copy full SHA for 608b16c
View code at this point
Browse repository at this point
Python: Fix ql4ql
RasmusWL
committed
700e40b
View commit details
Copy full SHA for 700e40b
View code at this point
Browse repository at this point
Commits on Jan 16, 2023
Merge branch 'main' into call-graph-code
RasmusWL
committed
61151d4
View commit details
Copy full SHA for 61151d4
View code at this point
Browse repository at this point
Commits on Jan 10, 2023
Python: Remove omittable exists variables
atorralba
committed
d87c8c7
View commit details
Copy full SHA for d87c8c7
View code at this point
Browse repository at this point
Commits on Nov 22, 2022
Python: Fix ql4ql alerts
Show description for 69b43f1
RasmusWL
committed
69b43f1
View commit details
Copy full SHA for 69b43f1
View code at this point
Browse repository at this point
Python: Don't rely on all `DataFlowCall` being resolved
Show description for df4d09b
RasmusWL
committed
df4d09b
View commit details
Copy full SHA for df4d09b
View code at this point
Browse repository at this point
Python: Adjust ExternalAPI qhelp files
RasmusWL
committed
7c1320e
View commit details
Copy full SHA for 7c1320e
View code at this point
Browse repository at this point
Python: Suppress more spurious alerts from ExternalAPI queries
RasmusWL
committed
af9be6a
View commit details
Copy full SHA for af9be6a
View code at this point
Browse repository at this point
Python: Suppress `None.json.dumps` from ExternalAPI queries
RasmusWL
committed
70cc986
View commit details
Copy full SHA for 70cc986
View code at this point
Browse repository at this point
Python: Fix ExternalAPIs queries
Show description for 7648462
RasmusWL
committed
7648462
View commit details
Copy full SHA for 7648462
View code at this point
Browse repository at this point
Commits on Sep 12, 2022
Python: remove `NonLibraryDataFlowCallable`
Show description for 0f95992
yoff
committed
0f95992
View commit details
Copy full SHA for 0f95992
View code at this point
Browse repository at this point
Commits on Aug 25, 2022
Merge branch 'main' of https://github.com/github/codeql into python-dataflow/flow-summaries-from-scratch
Show description for 0b5d4c5
yoff
committed
0b5d4c5
View commit details
Copy full SHA for 0b5d4c5
View code at this point
Browse repository at this point
Commits on Aug 22, 2022
add missing qldoc (that was already missing?)
erik-krogh
committed
a593a52
View commit details
Copy full SHA for a593a52
View code at this point
Browse repository at this point
Commits on Aug 10, 2022
fix common misspellings throughout github/codeql
erik-krogh
committed
887f655
View commit details
Copy full SHA for 887f655
View code at this point
Browse repository at this point
Commits on Jun 23, 2022
python: make `DataFlowCall` "publicly usable"
Show description for cedf9ef
yoff
authored
cedf9ef
View commit details
Copy full SHA for cedf9ef
View code at this point
Browse repository at this point
Commits on May 11, 2022
python: various fixes
Show description for 4445cf1
yoff
authored
4445cf1
View commit details
Copy full SHA for 4445cf1
View code at this point
Browse repository at this point
Commits on May 10, 2022
python: Flow summaries based on type tracking
Show description for f14ee0e
yoff
authored
f14ee0e
View commit details
Copy full SHA for f14ee0e
View code at this point
Browse repository at this point
Python: Compiles and mostly pass tests
Show description for 80175a9
yoff
authored
80175a9
View commit details
Copy full SHA for 80175a9
View code at this point
Browse repository at this point
Commits on Mar 11, 2022
patch upper-case acronyms to be PascalCase
erik-krogh
committed
69353bb
View commit details
Copy full SHA for 69353bb
View code at this point
Browse repository at this point
Commits on Nov 10, 2021
Python: Always use `@id py/`
Show description for 77099fe
RasmusWL
committed
77099fe
View commit details
Copy full SHA for 77099fe
View code at this point
Browse repository at this point
Commits on Jun 15, 2021
Update security-severity scores
calumgrant
committed
771e686
View commit details
Copy full SHA for 771e686
View code at this point
Browse repository at this point
Commits on Jun 10, 2021
Add security-severity metadata
calumgrant
committed
a594afb
View commit details
Copy full SHA for a594afb
View code at this point
Browse repository at this point
Commits on Feb 17, 2021
Python: Add a single missing QLDoc
RasmusWL
committed
4880350
View commit details
Copy full SHA for 4880350
View code at this point
Browse repository at this point
Revert "Merge pull request #5171 from RasmusWL/restructure-queries"
Show description for 7afe397
RasmusWL
committed
7afe397
View commit details
Copy full SHA for 7afe397
View code at this point
Browse repository at this point
Commits on Feb 16, 2021
Python: Restructure query file location
Show description for 3a18881
RasmusWL
committed
3a18881
View commit details
Copy full SHA for 3a18881
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
×
×
Рекламное место
свободно