Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
997
Pull requests
451
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
src
experimental
semmle
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Jun 30, 2025
Merge pull request #19762 from trailofbits/VF/type-orm-model-improvements
Show description for 3247bab
asgerf
authored
3247bab
View commit details
Copy full SHA for 3247bab
View code at this point
Browse repository at this point
Commits on Jun 26, 2025
Update formatting
Vasco-jofra
committed
8a75165
View commit details
Copy full SHA for 8a75165
View code at this point
Browse repository at this point
Commits on Jun 24, 2025
JS: moved `execa` out of experimental
Napalys
committed
d8b5cb5
View commit details
Copy full SHA for d8b5cb5
View code at this point
Browse repository at this point
Commits on Jun 13, 2025
Model the TypeORM Repository API
Vasco-jofra
committed
4ea5377
View commit details
Copy full SHA for 4ea5377
View code at this point
Browse repository at this point
Commits on Mar 14, 2025
JS: Deprecate getUnknownMember() and replace its uses with getArrayElement()
Show description for ab74898
asgerf
committed
ab74898
View commit details
Copy full SHA for ab74898
View code at this point
Browse repository at this point
Commits on May 21, 2024
Merge branch 'main' into amammad-js-CodeInjection_execa
erik-krogh
committed
c166cb4
View commit details
Copy full SHA for c166cb4
View code at this point
Browse repository at this point
Commits on Jan 25, 2024
Merge branch 'main' into amammad-js-bombs
ghsecuritylab
authored
df10a7e
View commit details
Copy full SHA for df10a7e
View code at this point
Browse repository at this point
Commits on Dec 5, 2023
added inline tests, move to experimental dir
am0o0
committed
1547cd0
View commit details
Copy full SHA for 1547cd0
View code at this point
Browse repository at this point
Commits on Nov 23, 2023
Merge branch 'main' into amammad-js-SQLI
erik-krogh
committed
abb8d65
View commit details
Copy full SHA for abb8d65
View code at this point
Browse repository at this point
fix second round of code review. improve documents, fix better-sqlite3 method
am0o0
committed
60b422a
View commit details
Copy full SHA for 60b422a
View code at this point
Browse repository at this point
Commits on Nov 21, 2023
move TypeORM library file and tests to experimental
Show description for 0328a29
am0o0
committed
0328a29
View commit details
Copy full SHA for 0328a29
View code at this point
Browse repository at this point
Commits on Oct 10, 2023
move to experimental
am0o0
committed
32859eb
View commit details
Copy full SHA for 32859eb
View code at this point
Browse repository at this point
Commits on Oct 9, 2023
JS: delete various outdated deprecations
erik-krogh
committed
c2942b3
View commit details
Copy full SHA for c2942b3
View code at this point
Browse repository at this point
Commits on May 4, 2022
leave a deprecated alias for Actions.qll
erik-krogh
committed
bc470b8
View commit details
Copy full SHA for bc470b8
View code at this point
Browse repository at this point
move the Actions API out of experimental
erik-krogh
committed
9db67d4
View commit details
Copy full SHA for 9db67d4
View code at this point
Browse repository at this point
Commits on Apr 12, 2022
reintroduce the number sinks
erik-krogh
committed
e2b7f7d
View commit details
Copy full SHA for e2b7f7d
View code at this point
Browse repository at this point
use the `Query.qll` pattern
erik-krogh
committed
688b2b6
View commit details
Copy full SHA for 688b2b6
View code at this point
Browse repository at this point
Commits on Mar 13, 2022
use some Sanitizer classes that were unused in the query code
erik-krogh
committed
9cf0a94
View commit details
Copy full SHA for 9cf0a94
View code at this point
Browse repository at this point
Commits on Dec 20, 2021
run the non-us patch
erik-krogh
committed
d17879e
View commit details
Copy full SHA for d17879e
View code at this point
Browse repository at this point
Commits on Oct 26, 2021
delete the experimental query library for cookie queries
erik-krogh
committed
9193984
View commit details
Copy full SHA for 9193984
View code at this point
Browse repository at this point
port experimental cookie models to non-experimental
erik-krogh
committed
6858acc
View commit details
Copy full SHA for 6858acc
View code at this point
Browse repository at this point
refactor, cleanup, and improvements in experimental cookie queries
erik-krogh
committed
44db920
View commit details
Copy full SHA for 44db920
View code at this point
Browse repository at this point
Commits on May 3, 2021
Apply suggestions from code review
Show description for 27c680e
Edwin
and
esbena
authored
27c680e
View commit details
Copy full SHA for 27c680e
View code at this point
Browse repository at this point
Support string expressions
edvraa
committed
cef845a
View commit details
Copy full SHA for cef845a
View code at this point
Browse repository at this point
typo
edvraa
committed
000826a
View commit details
Copy full SHA for 000826a
View code at this point
Browse repository at this point
Move to experimental
edvraa
committed
65183cd
View commit details
Copy full SHA for 65183cd
View code at this point
Browse repository at this point
Commits on Mar 18, 2021
Merge pull request #5350 from JarLob/actions
Show description for 6bab41c
erik-krogh
authored
6bab41c
View commit details
Copy full SHA for 6bab41c
View code at this point
Browse repository at this point
Fix regex per suggestion
JarLob
committed
a9ed331
View commit details
Copy full SHA for a9ed331
View code at this point
Browse repository at this point
Commits on Mar 17, 2021
Update javascript/ql/src/experimental/semmle/javascript/Actions.qll
Show description for 7b6773c
JarLob
and
erik-krogh
authored
7b6773c
View commit details
Copy full SHA for 7b6773c
View code at this point
Browse repository at this point
Removed positive lookbehind
JarLob
committed
e3bf308
View commit details
Copy full SHA for e3bf308
View code at this point
Browse repository at this point
JS: Update with new AdditionalTaintStep subclasses
asgerf
committed
96c6e4d
View commit details
Copy full SHA for 96c6e4d
View code at this point
Browse repository at this point
Commits on Mar 15, 2021
Update javascript/ql/src/experimental/semmle/javascript/Actions.qll
Show description for 8445ec6
JarLob
and
erik-krogh
authored
8445ec6
View commit details
Copy full SHA for 8445ec6
View code at this point
Browse repository at this point
Ranamed to CWE-094
JarLob
committed
a823baa
View commit details
Copy full SHA for a823baa
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 16ca231
JarLob
and
erik-krogh
authored
16ca231
View commit details
Copy full SHA for 16ca231
View code at this point
Browse repository at this point
Commits on Mar 6, 2021
github actions queries
JarLob
committed
673e649
View commit details
Copy full SHA for 673e649
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.