Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
996
Pull requests
454
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
semmle
code
on
codeql-cli/v2.26.3
User selector
All users
Datepicker
All time
Commit history
Commits on Jul 14, 2026
Merge pull request #22175 from owen-mc/java/fix-path-sanitizer
Show description for 05734dc
owen-mc
authored
05734dc
View commit details
Copy full SHA for 05734dc
View code at this point
Browse repository at this point
Commits on Jul 13, 2026
Address review comment
owen-mc
committed
2d00958
View commit details
Copy full SHA for 2d00958
View code at this point
Browse repository at this point
Merge pull request #22159 from aschackmull/java/join-order-effnonvirt
Show description for 42843f1
michaelnebel
authored
42843f1
View commit details
Copy full SHA for 42843f1
View code at this point
Browse repository at this point
Commits on Jul 11, 2026
Fix path sanitizer
owen-mc
committed
6057b4b
View commit details
Copy full SHA for 6057b4b
View code at this point
Browse repository at this point
Commits on Jul 10, 2026
Java: Improve join order.
Show description for 33261f4
aschackmull
committed
33261f4
View commit details
Copy full SHA for 33261f4
View code at this point
Browse repository at this point
Commits on Jul 7, 2026
Refactor creating barriers with annotations
owen-mc
committed
a812e4a
View commit details
Copy full SHA for a812e4a
View code at this point
Browse repository at this point
Commits on Jul 3, 2026
Fix @Pattern sanitizer for TaintedPath
owen-mc
committed
76b4f4f
View commit details
Copy full SHA for 76b4f4f
View code at this point
Browse repository at this point
Commits on Jun 30, 2026
Merge branch 'main' into mad-write-through-model
MathiasVP
committed
b7b731b
View commit details
Copy full SHA for b7b731b
View code at this point
Browse repository at this point
Commits on Jun 23, 2026
Java: Fixes after changes to the flow summary API.
MathiasVP
committed
9865b66
View commit details
Copy full SHA for 9865b66
View code at this point
Browse repository at this point
Cfg: Change AST/CFG for CatchClauses to use a pattern.
aschackmull
committed
41297c5
View commit details
Copy full SHA for 41297c5
View code at this point
Browse repository at this point
Commits on Jun 18, 2026
Java/C#: Adapt to signature change.
aschackmull
committed
f844cd3
View commit details
Copy full SHA for f844cd3
View code at this point
Browse repository at this point
Commits on Jun 16, 2026
Merge pull request #21987 from hvitved/type-flow-ranking
Show description for d287f0c
hvitved
authored
d287f0c
View commit details
Copy full SHA for d287f0c
View code at this point
Browse repository at this point
Commits on Jun 15, 2026
Update java/ql/lib/semmle/code/java/dataflow/TypeFlow.qll
Show description for 686e98c
hvitved
and
aschackmull
authored
686e98c
View commit details
Copy full SHA for 686e98c
View code at this point
Browse repository at this point
Java: Fix performance issue in type flow library
hvitved
committed
651770b
View commit details
Copy full SHA for 651770b
View code at this point
Browse repository at this point
Commits on Jun 12, 2026
Cfg: Add support for until-statements.
aschackmull
committed
ff61344
View commit details
Copy full SHA for ff61344
View code at this point
Browse repository at this point
Cfg: Fix type.
aschackmull
committed
f3ec708
View commit details
Copy full SHA for f3ec708
View code at this point
Browse repository at this point
Commits on Jun 8, 2026
Cfg: Fold getTryInit into indexed getBody.
aschackmull
committed
01173bf
View commit details
Copy full SHA for 01173bf
View code at this point
Browse repository at this point
Commits on Jun 4, 2026
Add back alias for module
BazookaMusic
committed
d2972cb
View commit details
Copy full SHA for d2972cb
View code at this point
Browse repository at this point
Commits on Jun 3, 2026
No duplicate Ssa and remove release changenot
BazookaMusic
committed
f342756
View commit details
Copy full SHA for f342756
View code at this point
Browse repository at this point
review comments
BazookaMusic
committed
0a80144
View commit details
Copy full SHA for 0a80144
View code at this point
Browse repository at this point
Commits on Jun 1, 2026
formatting
BazookaMusic
committed
71a3635
View commit details
Copy full SHA for 71a3635
View code at this point
Browse repository at this point
Commits on May 27, 2026
missed changes
BazookaMusic
committed
acb5c0e
View commit details
Copy full SHA for acb5c0e
View code at this point
Browse repository at this point
move identical java and cs bound.qll to shared library
BazookaMusic
committed
6042ade
View commit details
Copy full SHA for 6042ade
View code at this point
Browse repository at this point
Commits on May 21, 2026
Java: add ForStmt wrapper class
owen-mc
committed
2070daf
View commit details
Copy full SHA for 2070daf
View code at this point
Browse repository at this point
Commits on May 8, 2026
Merge pull request #21741 from MarkLee131/fix/path-injection-read-subkind
Show description for 36554d1
owen-mc
authored
36554d1
View commit details
Copy full SHA for 36554d1
View code at this point
Browse repository at this point
Commits on May 7, 2026
Fix QL formatting
owen-mc
authored
f9240e7
View commit details
Copy full SHA for f9240e7
View code at this point
Browse repository at this point
C#/Java: Adjust Guards instantiations.
aschackmull
committed
072166b
View commit details
Copy full SHA for 072166b
View code at this point
Browse repository at this point
Cfg: Rework CFG for switch case patterns.
aschackmull
committed
48785a0
View commit details
Copy full SHA for 48785a0
View code at this point
Browse repository at this point
Commits on May 4, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
4673941
View commit details
Copy full SHA for 4673941
View code at this point
Browse repository at this point
Merge pull request #21781 from aschackmull/java/rm-deprecated
Show description for f663ecc
aschackmull
authored
f663ecc
View commit details
Copy full SHA for f663ecc
View code at this point
Browse repository at this point
Java: Delete old deprecated code.
aschackmull
committed
17fded4
View commit details
Copy full SHA for 17fded4
View code at this point
Browse repository at this point
Commits on May 1, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
bafa892
View commit details
Copy full SHA for bafa892
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer
Show description for 87c35e6
owen-mc
authored
87c35e6
View commit details
Copy full SHA for 87c35e6
View code at this point
Browse repository at this point
Address review comments on path-injection[read] sub-kind
Show description for 936f0c6
MarkLee131
committed
936f0c6
View commit details
Copy full SHA for 936f0c6
View code at this point
Browse repository at this point
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
90741b1
View commit details
Copy full SHA for 90741b1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.