Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
996
Pull requests
453
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
actions
ql
src
Security
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jun 25, 2026
Merge pull request #21986 from JarLob/userpermissions
Show description for b67644c
redsun82
authored
b67644c
View commit details
Copy full SHA for b67644c
View code at this point
Browse repository at this point
Commits on Jun 18, 2026
Fix false negatives when one of the jobs had proper checks and the other didn't
JarLob
committed
2d6feb1
View commit details
Copy full SHA for 2d6feb1
View code at this point
Browse repository at this point
Commits on Jun 4, 2026
Correct query metadata for `actions/untrusted-checkout/medium`
henrymercer
committed
f4dc86e
View commit details
Copy full SHA for f4dc86e
View code at this point
Browse repository at this point
Commits on May 21, 2026
Merge branch 'main' into knewbury01/adjust-actions-queries-untrusted-checkout-second-iteration
knewbury01
authored
5503140
View commit details
Copy full SHA for 5503140
View code at this point
Browse repository at this point
Fix merge conflicts
knewbury01
committed
a094a8e
View commit details
Copy full SHA for a094a8e
View code at this point
Browse repository at this point
Address review feedback
knewbury01
committed
2f8c0df
View commit details
Copy full SHA for 2f8c0df
View code at this point
Browse repository at this point
Merge pull request #21800 from knewbury01/knewbury01/adjust-actions-queries-untrusted-checkout-critical-alert
Show description for 2280955
owen-mc
authored
2280955
View commit details
Copy full SHA for 2280955
View code at this point
Browse repository at this point
Commits on May 19, 2026
Adjust wording helpfiles UntrustedCheckoutX all three files
knewbury01
committed
bfc6dee
View commit details
Copy full SHA for bfc6dee
View code at this point
Browse repository at this point
Adjust name UntrustedCheckoutHigh wording trusted to privileged
knewbury01
committed
0a87658
View commit details
Copy full SHA for 0a87658
View code at this point
Browse repository at this point
Commits on May 18, 2026
Merge pull request #21838 from github/copilot/widen-regex-for-pinned-actions
Show description for ad69cfb
owen-mc
authored
ad69cfb
View commit details
Copy full SHA for ad69cfb
View code at this point
Browse repository at this point
Merge pull request #21692 from github/copilot/update-codeql-query-for-composite-actions
Show description for 8a199f9
oscarsj
authored
8a199f9
View commit details
Copy full SHA for 8a199f9
View code at this point
Browse repository at this point
Commits on May 14, 2026
Improve UntrustedCheckoutX helpfiles
knewbury01
committed
914c7e1
View commit details
Copy full SHA for 914c7e1
View code at this point
Browse repository at this point
Add full stop to alert messages in UntrustedCheckoutHigh and UntrustedCheckoutCritical
knewbury01
committed
29ffd87
View commit details
Copy full SHA for 29ffd87
View code at this point
Browse repository at this point
Adjust untrusted checkout actions queries
knewbury01
committed
c36ad7b
View commit details
Copy full SHA for c36ad7b
View code at this point
Browse repository at this point
Commits on May 12, 2026
Widen pinned SHA regex to support SHA-256 (64-char hex) and add tests
Copilot
authored and
owen-mc
committed
ef1bde7
View commit details
Copy full SHA for ef1bde7
View code at this point
Browse repository at this point
Commits on May 6, 2026
Merge pull request #21715 from knewbury01/knewbury01/adjust-actions-queries-untrusted-checkout
Show description for e6f587e
owen-mc
authored
e6f587e
View commit details
Copy full SHA for e6f587e
View code at this point
Browse repository at this point
Commits on May 5, 2026
Adjust alert location UntrustedCheckoutCritical
knewbury01
committed
3f44a23
View commit details
Copy full SHA for 3f44a23
View code at this point
Browse repository at this point
Commits on May 4, 2026
Undo larger change in this PR
knewbury01
committed
f9f1349
View commit details
Copy full SHA for f9f1349
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
Update help files CWE-829/UntrustedCheckoutX
knewbury01
committed
4fd0222
View commit details
Copy full SHA for 4fd0222
View code at this point
Browse repository at this point
Commits on Apr 20, 2026
Update UnpinnedActionsTag query metadata scope
Show description for b204603
Copilot
and
oscarsj
authored
b204603
View commit details
Copy full SHA for b204603
View code at this point
Browse repository at this point
Commits on Apr 15, 2026
Improve formatting helpfiles
knewbury01
committed
ed4e2bc
View commit details
Copy full SHA for ed4e2bc
View code at this point
Browse repository at this point
Revert accidental change
knewbury01
committed
a342efc
View commit details
Copy full SHA for a342efc
View code at this point
Browse repository at this point
Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries
knewbury01
committed
1233d81
View commit details
Copy full SHA for 1233d81
View code at this point
Browse repository at this point
Commits on Apr 10, 2026
Merge pull request #21636 from jketema/actions-perm
Show description for 888d392
jketema
authored
888d392
View commit details
Copy full SHA for 888d392
View code at this point
Browse repository at this point
Extend unpinned-tag query to scan composite action metadata
Show description for ec12035
Copilot
and
oscarsj
authored
ec12035
View commit details
Copy full SHA for ec12035
View code at this point
Browse repository at this point
Commits on Apr 8, 2026
Change alert location CWE-829/ArtifactPoisoning queries
knewbury01
committed
7b7411f
View commit details
Copy full SHA for 7b7411f
View code at this point
Browse repository at this point
Commits on Apr 2, 2026
Adjust alert messages actions CWE-829
knewbury01
committed
4171465
View commit details
Copy full SHA for 4171465
View code at this point
Browse repository at this point
Adjust alert messages CWE-829/ArtifactPoisoning[Critical|Medium]
knewbury01
committed
e69e30a
View commit details
Copy full SHA for e69e30a
View code at this point
Browse repository at this point
Actions: Correctly check permissions in `actions/missing-workflow-permissions`
jketema
committed
74e6d34
View commit details
Copy full SHA for 74e6d34
View code at this point
Browse repository at this point
Commits on Dec 5, 2025
Actions: note imprecision of MissingActionsPermissions.ql
Show description for 02caa09
smowton
authored
02caa09
View commit details
Copy full SHA for 02caa09
View code at this point
Browse repository at this point
Commits on Dec 4, 2025
Make predicates containing query logic more self-contained
owen-mc
committed
fb841ea
View commit details
Copy full SHA for fb841ea
View code at this point
Browse repository at this point
Fix filtering of code injection alerts between medium and critical
owen-mc
committed
f6bdb3a
View commit details
Copy full SHA for f6bdb3a
View code at this point
Browse repository at this point
Commits on Sep 5, 2025
Remove non-breaking spaces from code
aibaars
committed
5d3ec35
View commit details
Copy full SHA for 5d3ec35
View code at this point
Browse repository at this point
Commits on Aug 15, 2025
[DIFF-INFORMED] Actions: EnvVarInjection
Show description for 126d24a
d10c
committed
126d24a
View commit details
Copy full SHA for 126d24a
View code at this point
Browse repository at this point
[DIFF-INFORMED] Actions: EnvPathInjection
Show description for f1445eb
d10c
committed
f1445eb
View commit details
Copy full SHA for f1445eb
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
