Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
lib
semmle
python
internal
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jun 22, 2026
Python: deprecate AstNode.getAFlowNode() and rewrite internal callers
Show description for 717ff62
Copilot
authored and
yoff
committed
717ff62
View commit details
Copy full SHA for 717ff62
View code at this point
Browse repository at this point
Commits on Feb 16, 2026
Python: Simple dataflow annotations
Show description for df0f2f8
tausbn
committed
df0f2f8
View commit details
Copy full SHA for df0f2f8
View code at this point
Browse repository at this point
Python: Add overlay annotations to AST classes
Show description for fd7b123
tausbn
committed
fd7b123
View commit details
Copy full SHA for fd7b123
View code at this point
Browse repository at this point
Commits on Nov 28, 2025
Sync OverlayXml.qll
asgerf
committed
6257bed
View commit details
Copy full SHA for 6257bed
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Factor XML discard predicates into OverlayXml.qll
asgerf
committed
dbf14c1
View commit details
Copy full SHA for dbf14c1
View code at this point
Browse repository at this point
Commits on Oct 6, 2025
Add consistency query (exactly one path for every entity)
d10c
committed
20d4e42
View commit details
Copy full SHA for 20d4e42
View code at this point
Browse repository at this point
Commits on Jul 14, 2025
Properly share `ConceptsShared.qll`
jketema
committed
cbde11d
View commit details
Copy full SHA for cbde11d
View code at this point
Browse repository at this point
Properly share `CryptoAlgorithms` and `CryptoAlgorithmNames`
jketema
committed
f4ba2e1
View commit details
Copy full SHA for f4ba2e1
View code at this point
Browse repository at this point
Commits on Dec 12, 2024
Update data-flow -> data flow in all versions of ConceptsShared.qll.
geoffw0
committed
44a0ad2
View commit details
Copy full SHA for 44a0ad2
View code at this point
Browse repository at this point
Commits on Mar 13, 2024
Python: Implement new data flow interface
hvitved
committed
6c0ed28
View commit details
Copy full SHA for 6c0ed28
View code at this point
Browse repository at this point
Commits on Dec 14, 2023
Python: Adopt shared type tracking library
hvitved
committed
3b1146b
View commit details
Copy full SHA for 3b1146b
View code at this point
Browse repository at this point
Commits on Oct 26, 2023
Include more details in the message for `py/weak-cryptographic-algorithm`.
Show description for 3939167
Max Schaefer
committed
3939167
View commit details
Copy full SHA for 3939167
View code at this point
Browse repository at this point
Commits on Feb 27, 2023
Merge pull request #11376 from RasmusWL/call-graph-code
Show description for 25043f5
tausbn
authored
25043f5
View commit details
Copy full SHA for 25043f5
View code at this point
Browse repository at this point
Commits on Feb 15, 2023
Merge branch 'main' into call-graph-code
RasmusWL
committed
c4fbfb0
View commit details
Copy full SHA for c4fbfb0
View code at this point
Browse repository at this point
Merge branch 'main' into js-use-shared-cryptography
alexrford
authored
1556b1a
View commit details
Copy full SHA for 1556b1a
View code at this point
Browse repository at this point
dynamic: more detailed qldoc for CryptographicOperation#getBlockMode()
alexrford
committed
43af306
View commit details
Copy full SHA for 43af306
View code at this point
Browse repository at this point
dynamic: switch CryptographicOperation::Range#getBlockMode() back to being an abstract predicate
alexrford
committed
d4d0b91
View commit details
Copy full SHA for d4d0b91
View code at this point
Browse repository at this point
JS: avoid adding a deprecated CryptographicOperation#getInput to py/ruby
alexrford
committed
c7aaad9
View commit details
Copy full SHA for c7aaad9
View code at this point
Browse repository at this point
Commits on Feb 13, 2023
Python/Ruby/JS Crypto: Add a few algorithms + block modes
Show description for b2e79e2
RasmusWL
and
bdrodes
committed
b2e79e2
View commit details
Copy full SHA for b2e79e2
View code at this point
Browse repository at this point
Commits on Feb 3, 2023
ConceptsShared: add a default implementation of BlockMode CryptographicOperation#getBlockMode() for compatibility with external code
alexrford
committed
6c35fea
View commit details
Copy full SHA for 6c35fea
View code at this point
Browse repository at this point
Commits on Feb 2, 2023
ConceptsShared: Add BlockMode#matchesString(string) predicate
alexrford
committed
e5dfbe2
View commit details
Copy full SHA for e5dfbe2
View code at this point
Browse repository at this point
ConceptsShared: Add deprecated DataFlow::Node CryptographicOperation#getInput() predicate
alexrford
committed
61095b3
View commit details
Copy full SHA for 61095b3
View code at this point
Browse repository at this point
Commits on Nov 24, 2022
Python: Move `ControlFlowNode.toString()` to AST cached stage
Show description for d151e21
RasmusWL
committed
d151e21
View commit details
Copy full SHA for d151e21
View code at this point
Browse repository at this point
Commits on Nov 22, 2022
Python: Add call-graph to cached dataflow stage
Show description for 36e8b8b
RasmusWL
committed
36e8b8b
View commit details
Copy full SHA for 36e8b8b
View code at this point
Browse repository at this point
Python: Introduce points-to cached stage
Show description for fc05455
RasmusWL
committed
fc05455
View commit details
Copy full SHA for fc05455
View code at this point
Browse repository at this point
Commits on Aug 18, 2022
Python: Move `HTTP::Client::Request` to shared concepts
Show description for 635fd19
RasmusWL
committed
635fd19
View commit details
Copy full SHA for 635fd19
View code at this point
Browse repository at this point
Commits on Jun 21, 2022
Python: Rename getAUse -> getAValueReachableFromSource
asgerf
committed
b096f9e
View commit details
Copy full SHA for b096f9e
View code at this point
Browse repository at this point
Commits on May 23, 2022
Concepts: Move `CryptographicOperation.isWeak` to be Ruby specific
RasmusWL
committed
85fa6fb
View commit details
Copy full SHA for 85fa6fb
View code at this point
Browse repository at this point
Commits on May 19, 2022
Deprecate `CryptographicOperation#isWeak` and add a default implementation
alexrford
committed
d3662cf
View commit details
Copy full SHA for d3662cf
View code at this point
Browse repository at this point
Share the CryptographicOperation and BlockMode concepts between dynamic langs
alexrford
committed
3d66905
View commit details
Copy full SHA for 3d66905
View code at this point
Browse repository at this point
Commits on Mar 30, 2022
revert the Taint stage, as it caused an alert for ql/abstract-class-import
erik-krogh
committed
7ca6426
View commit details
Copy full SHA for 7ca6426
View code at this point
Browse repository at this point
cache a bit more (again)
erik-krogh
committed
b74852f
View commit details
Copy full SHA for b74852f
View code at this point
Browse repository at this point
cache more basicblock predicates
erik-krogh
committed
040196f
View commit details
Copy full SHA for 040196f
View code at this point
Browse repository at this point
a bit more caching
erik-krogh
committed
79713e0
View commit details
Copy full SHA for 79713e0
View code at this point
Browse repository at this point
revert caching of some large predicates that caused the DB size to increase too much
erik-krogh
committed
4089788
View commit details
Copy full SHA for 4089788
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.