Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
test
query-tests
Security
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jul 8, 2026
Merge pull request #22005 from github/dependabot/pip/misc/codegen/pip-02f7ad5a4b
Show description for 8bb12d1
geoffw0
authored
8bb12d1
View commit details
Copy full SHA for 8bb12d1
View code at this point
Browse repository at this point
Commits on Jun 30, 2026
Python: hotfix - disable instanceFieldStep to avoid type-tracker blowup
Show description for f251a57
tausbn
committed
f251a57
View commit details
Copy full SHA for f251a57
View code at this point
Browse repository at this point
Commits on Jun 19, 2026
Convert Python qlref tests to inline expectations
owen-mc
committed
5497f2c
View commit details
Copy full SHA for 5497f2c
View code at this point
Browse repository at this point
Commits on Jun 18, 2026
Bump the pip group across 2 directories with 2 updates
Show description for 880011c
dependabot[bot]
authored
880011c
View commit details
Copy full SHA for 880011c
View code at this point
Browse repository at this point
Commits on Jun 14, 2026
Fix MISSING alert
owen-mc
committed
9c65082
View commit details
Copy full SHA for 9c65082
View code at this point
Browse repository at this point
Commits on Jun 12, 2026
Add thorough tests, including one MISSING alert
owen-mc
committed
434a994
View commit details
Copy full SHA for 434a994
View code at this point
Browse repository at this point
Convert sql-injection test to inline expectations
owen-mc
committed
d389ea4
View commit details
Copy full SHA for d389ea4
View code at this point
Browse repository at this point
Commits on Jun 2, 2026
Accept changed edges in test output
Show description for 20ce679
owen-mc
committed
20ce679
View commit details
Copy full SHA for 20ce679
View code at this point
Browse repository at this point
Adjust expected test output
owen-mc
committed
f62ebef
View commit details
Copy full SHA for f62ebef
View code at this point
Browse repository at this point
Commits on May 22, 2026
Update test results
owen-mc
committed
e877929
View commit details
Copy full SHA for e877929
View code at this point
Browse repository at this point
Commits on May 21, 2026
Python: reset test expectations
yoff
authored and
owen-mc
committed
3275c81
View commit details
Copy full SHA for 3275c81
View code at this point
Browse repository at this point
Python: adjust test expectations
Show description for 93e7ab5
yoff
authored and
owen-mc
committed
93e7ab5
View commit details
Copy full SHA for 93e7ab5
View code at this point
Browse repository at this point
Python: Remove imprecise container steps
Show description for b67694b
yoff
authored and
owen-mc
committed
b67694b
View commit details
Copy full SHA for b67694b
View code at this point
Browse repository at this point
Commits on May 7, 2026
Python: Accept test changes (improvement).
geoffw0
committed
1c704a0
View commit details
Copy full SHA for 1c704a0
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Python: Move isNetworkBind check into isSink
tausbn
committed
187f7c7
View commit details
Copy full SHA for 187f7c7
View code at this point
Browse repository at this point
Python: Exclude `AF_UNIX` sockets from BindToAllInterfaces
Show description for 4f74d42
tausbn
committed
4f74d42
View commit details
Copy full SHA for 4f74d42
View code at this point
Browse repository at this point
Commits on Mar 26, 2026
Python: Convert BindToAllInterfaces to path-problem
Show description for c9832c3
tausbn
committed
c9832c3
View commit details
Copy full SHA for c9832c3
View code at this point
Browse repository at this point
Python: Replace type tracking with global data-flow
Show description for c439fc5
tausbn
committed
c439fc5
View commit details
Copy full SHA for c439fc5
View code at this point
Browse repository at this point
Python: Add test cases for BindToAllInterfaces FNs
Show description for 1ecd9e8
tausbn
committed
1ecd9e8
View commit details
Copy full SHA for 1ecd9e8
View code at this point
Browse repository at this point
Python: Convert BindToAllInterfaces test to inline expectations
tausbn
committed
824d004
View commit details
Copy full SHA for 824d004
View code at this point
Browse repository at this point
Commits on Mar 4, 2026
py: Inline expectation should have space before $
owen-mc
committed
91b6801
View commit details
Copy full SHA for 91b6801
View code at this point
Browse repository at this point
python: Inline expectation should have space after $
Show description for 5a97348
owen-mc
committed
5a97348
View commit details
Copy full SHA for 5a97348
View code at this point
Browse repository at this point
Commits on Feb 12, 2026
Pretty print for tests.
bdrodes
committed
4d4e7a1
View commit details
Copy full SHA for 4d4e7a1
View code at this point
Browse repository at this point
Commits on Feb 10, 2026
Update expected files. Copilot suggestions broke unit test expected results (column numbers).
bdrodes
committed
9f9c353
View commit details
Copy full SHA for 9f9c353
View code at this point
Browse repository at this point
More copilot suggestions.
bdrodes
committed
4bb110b
View commit details
Copy full SHA for 4bb110b
View code at this point
Browse repository at this point
Applying copilot PR suggestions.
bdrodes
committed
a91cf6b
View commit details
Copy full SHA for a91cf6b
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_path_validation.py
Show description for 9f8ed71
bdrodes
and
Copilot
authored
9f8ed71
View commit details
Copy full SHA for 9f8ed71
View code at this point
Browse repository at this point
Commits on Feb 6, 2026
Removing commented out test cases.
bdrodes
committed
f6c302b
View commit details
Copy full SHA for f6c302b
View code at this point
Browse repository at this point
Updating test case expected alerts.
bdrodes
committed
97f19d0
View commit details
Copy full SHA for 97f19d0
View code at this point
Browse repository at this point
Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fu…
Show description for 97ddab0
bdrodes
committed
97ddab0
View commit details
Copy full SHA for 97ddab0
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
Show description for 08b72d0
bdrodes
and
Copilot
committed
08b72d0
View commit details
Copy full SHA for 08b72d0
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
Show description for 46a2a24
bdrodes
and
Copilot
committed
46a2a24
View commit details
Copy full SHA for 46a2a24
View code at this point
Browse repository at this point
Adding azure sdk test cases and updated test expected file.
bdrodes
committed
9912aaa
View commit details
Copy full SHA for 9912aaa
View code at this point
Browse repository at this point
Commits on Feb 4, 2026
Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.
bdrodes
committed
0a88425
View commit details
Copy full SHA for 0a88425
View code at this point
Browse repository at this point
Commits on Feb 2, 2026
Merge branch 'main' into azure_python_sdk_url_summary_upstream
bdrodes
authored
7ddfa80
View commit details
Copy full SHA for 7ddfa80
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=32){kind=avatar}
