Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.1k
Code
Issues
995
Pull requests
459
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
actions
ql
lib
codeql
on
codeql-cli/v2.25.4
User selector
All users
Datepicker
All time
Commit history
Commits on Jan 23, 2026
Use posessive quantifier to avoid stack overflow on large ${{}} expressions
smowton
committed
dc26a57
View commit details
Copy full SHA for dc26a57
View code at this point
Browse repository at this point
Commits on Dec 4, 2025
Pull out logic into separate predicate
owen-mc
committed
4a16de2
View commit details
Copy full SHA for 4a16de2
View code at this point
Browse repository at this point
Make predicates containing query logic more self-contained
owen-mc
committed
fb841ea
View commit details
Copy full SHA for fb841ea
View code at this point
Browse repository at this point
Fix filtering of code injection alerts between medium and critical
owen-mc
committed
f6bdb3a
View commit details
Copy full SHA for f6bdb3a
View code at this point
Browse repository at this point
Commits on Oct 28, 2025
Actions/CodeInjectionQuery
Show description for 974d174
d10c
committed
974d174
View commit details
Copy full SHA for 974d174
View code at this point
Browse repository at this point
Actions/ArgumentInjectionQuery
Show description for 62fde8f
d10c
committed
62fde8f
View commit details
Copy full SHA for 62fde8f
View code at this point
Browse repository at this point
Actions/EnvVarInjectionQuery
Show description for c402233
d10c
committed
c402233
View commit details
Copy full SHA for c402233
View code at this point
Browse repository at this point
Actions/EnvPathInjectionQuery
Show description for edc72d2
d10c
committed
edc72d2
View commit details
Copy full SHA for edc72d2
View code at this point
Browse repository at this point
Actions/ArtifactPoisoningQuery
Show description for 1f53ffb
d10c
committed
1f53ffb
View commit details
Copy full SHA for 1f53ffb
View code at this point
Browse repository at this point
Actions/SecretExfiltrationQuery
Show description for bb10307
d10c
committed
bb10307
View commit details
Copy full SHA for bb10307
View code at this point
Browse repository at this point
Actions/RequestForgeryQuery
Show description for 890ca8e
d10c
committed
890ca8e
View commit details
Copy full SHA for 890ca8e
View code at this point
Browse repository at this point
Actions/OutputClobberingQuery
Show description for 3fa8259
d10c
committed
3fa8259
View commit details
Copy full SHA for 3fa8259
View code at this point
Browse repository at this point
Commits on Sep 3, 2025
Merge pull request #20324 from michaelnebel/actions/ql4ql
Show description for a9baf34
michaelnebel
authored
a9baf34
View commit details
Copy full SHA for a9baf34
View code at this point
Browse repository at this point
Commits on Sep 1, 2025
Actions: Fix some Ql4Ql violations.
michaelnebel
committed
64f9758
View commit details
Copy full SHA for 64f9758
View code at this point
Browse repository at this point
Shared: Use shared SuccessorType in shared Cfg and BasicBlock libs.
aschackmull
committed
144e34c
View commit details
Copy full SHA for 144e34c
View code at this point
Browse repository at this point
Actions: Use shared SuccessorType.
aschackmull
committed
92fcda3
View commit details
Copy full SHA for 92fcda3
View code at this point
Browse repository at this point
Commits on Aug 15, 2025
[DIFF-INFORMED] Actions: EnvVarInjection
Show description for 126d24a
d10c
committed
126d24a
View commit details
Copy full SHA for 126d24a
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: EnvPathInjection
Show description for f1445eb
d10c
committed
f1445eb
View commit details
Copy full SHA for f1445eb
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: CommandInjection
Show description for f1b995a
d10c
committed
f1b995a
View commit details
Copy full SHA for f1b995a
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: CodeInjection
Show description for 418e4b4
d10c
committed
418e4b4
View commit details
Copy full SHA for 418e4b4
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: ArtifactPoisoning
Show description for bbda290
d10c
committed
bbda290
View commit details
Copy full SHA for bbda290
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: ArgumentInjection
Show description for 896819f
d10c
committed
896819f
View commit details
Copy full SHA for 896819f
View code at this point
Browse repository at this point
Commits on Jul 10, 2025
Handle multiple whitespaces in runner temp regex.
Show description for 7be938c
AdnaneKhan
and
Napalys
authored
7be938c
View commit details
Copy full SHA for 7be938c
View code at this point
Browse repository at this point
Commits on Jul 9, 2025
Merge branch 'main' into patch-1
AdnaneKhan
authored
db954d6
View commit details
Copy full SHA for db954d6
View code at this point
Browse repository at this point
Commits on Jul 8, 2025
Add tests and path normalization fix to handle $ expansion
JarLob
committed
9393181
View commit details
Copy full SHA for 9393181
View code at this point
Browse repository at this point
Correctly specify regex.
Show description for f4f9196
AdnaneKhan
and
JarLob
authored
f4f9196
View commit details
Copy full SHA for f4f9196
View code at this point
Browse repository at this point
Commits on Jun 17, 2025
Actions: mass-add `none()` location overrides
d10c
committed
fc61910
View commit details
Copy full SHA for fc61910
View code at this point
Browse repository at this point
Commits on Jun 11, 2025
Actions: mass enable diff-informed data flow
Show description for f2bd454
d10c
committed
f2bd454
View commit details
Copy full SHA for f2bd454
View code at this point
Browse repository at this point
Commits on Jun 9, 2025
Actions: Order quoted strings by their ID, not text
Show description for 848064e
adityasharad
committed
848064e
View commit details
Copy full SHA for 848064e
View code at this point
Browse repository at this point
Actions: Refactor logic for identifying quoted strings
Show description for fbe11cf
adityasharad
committed
fbe11cf
View commit details
Copy full SHA for fbe11cf
View code at this point
Browse repository at this point
Actions: Order command substitutions by their ID, not text
Show description for 321513c
adityasharad
committed
321513c
View commit details
Copy full SHA for 321513c
View code at this point
Browse repository at this point
Actions: Refactor logic for identifying command substitution
Show description for 39e710e
adityasharad
committed
39e710e
View commit details
Copy full SHA for 39e710e
View code at this point
Browse repository at this point
Commits on Jun 5, 2025
Actions: Make `Env` non-abstract
Show description for 338d383
smowton
authored
338d383
View commit details
Copy full SHA for 338d383
View code at this point
Browse repository at this point
Commits on Apr 25, 2025
Fix escaping.
AdnaneKhan
authored
a9c4d6f
View commit details
Copy full SHA for a9c4d6f
View code at this point
Browse repository at this point
Exclude artifacts downloaded to runner temp.
AdnaneKhan
authored
38f0077
View commit details
Copy full SHA for 38f0077
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.