Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
518
(518)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
cpp
ql
lib
ext
on
rust/extractor-cli-args
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 14, 2026
Additional taint tracking for setData and setPropertiesRef
Show description for ae00382
geoffw0
and
Copilot
authored
ae00382
View commit details
Copy full SHA for ae00382
View code at this point
Browse repository at this point
Merge branch 'main' into kumarak/cpp-bmqa-models
Show description for 01eb47d
geoffw0
and
Copilot
committed
01eb47d
View commit details
Copy full SHA for 01eb47d
View code at this point
Browse repository at this point
Commits on Sep 28, 2026
Merge pull request #22562 from trail-of-forks/comdb2-sql-injection-models
Show description for 4048b13
geoffw0
authored
4048b13
View commit details
Copy full SHA for 4048b13
View code at this point
Browse repository at this point
Commits on Sep 24, 2026
C++: Model BDE bal codec taint flow
Show description for 5286eae
kumarak
and
geoffw0
committed
5286eae
View commit details
Copy full SHA for 5286eae
View code at this point
Browse repository at this point
fix(cpp): address remaining bslx review feedback
kumarak
committed
b704ed4
View commit details
Copy full SHA for b704ed4
View code at this point
Browse repository at this point
cpp: model BDE bslx in-stream deserialization taint flow
Show description for 1021241
kumarak
committed
1021241
View commit details
Copy full SHA for 1021241
View code at this point
Browse repository at this point
Commits on Sep 16, 2026
Merge branch 'main' into flow-through-forwards-using-callbacks-3
MathiasVP
committed
18affcd
View commit details
Copy full SHA for 18affcd
View code at this point
Browse repository at this point
Commits on Sep 14, 2026
C++: Model Comdb2 SQL execution sinks
kumarak
committed
75d9457
View commit details
Copy full SHA for 75d9457
View code at this point
Browse repository at this point
Commits on Sep 9, 2026
C++: Model BlazingMQ bmqa message and property taint flow
Show description for d3a53bd
kumarak
committed
d3a53bd
View commit details
Copy full SHA for d3a53bd
View code at this point
Browse repository at this point
test(cpp): add sink-based protobuf model tests and trim comments
Show description for d603cdd
kumarak
committed
d603cdd
View commit details
Copy full SHA for d603cdd
View code at this point
Browse repository at this point
fix(cpp): correct protobuf string parse models and expand test coverage
kumarak
committed
d84a302
View commit details
Copy full SHA for d84a302
View code at this point
Browse repository at this point
cpp: model Protocol Buffers parse/serialize taint flow
Show description for 9c85aab
kumarak
committed
9c85aab
View commit details
Copy full SHA for 9c85aab
View code at this point
Browse repository at this point
C++: Add tests with missing flow.
Show description for 1b41bae
MathiasVP
committed
1b41bae
View commit details
Copy full SHA for 1b41bae
View code at this point
Browse repository at this point
Commits on Sep 8, 2026
C++: Also add taint from the service argument.
MathiasVP
committed
ae6fb33
View commit details
Copy full SHA for ae6fb33
View code at this point
Browse repository at this point
C++: Add models for boost::asio::ip's resolve function.
MathiasVP
committed
d42e432
View commit details
Copy full SHA for d42e432
View code at this point
Browse repository at this point
Commits on Sep 4, 2026
Merge pull request #22455 from trail-of-forks/kumarak/cpp-bdlbb-blob-models
Show description for 4c14393
jketema
authored
4c14393
View commit details
Copy full SHA for 4c14393
View code at this point
Browse repository at this point
Commits on Sep 3, 2026
fix(cpp): model bdlbb::BlobBuffer::buffer and trim model comments
Show description for 9559357
kumarak
committed
9559357
View commit details
Copy full SHA for 9559357
View code at this point
Browse repository at this point
Commits on Aug 30, 2026
cpp: model BDE bdlbb::Blob byte-buffer taint flow
Show description for 8701ce9
kumarak
committed
8701ce9
View commit details
Copy full SHA for 8701ce9
View code at this point
Browse repository at this point
cpp: address review feedback on libpq SQL-injection sinks
Show description for 4796ff4
kumarak
committed
4796ff4
View commit details
Copy full SHA for 4796ff4
View code at this point
Browse repository at this point
Commits on Aug 27, 2026
cpp: model libpq query functions as SQL-injection sinks
Show description for 4623819
kumarak
committed
4623819
View commit details
Copy full SHA for 4623819
View code at this point
Browse repository at this point
Commits on Jul 31, 2026
C++: Remove 'StringFromGUID' model.
MathiasVP
committed
a7c1978
View commit details
Copy full SHA for a7c1978
View code at this point
Browse repository at this point
Commits on Jul 30, 2026
C++: Respond to Copilot comments.
MathiasVP
committed
b1867d8
View commit details
Copy full SHA for b1867d8
View code at this point
Browse repository at this point
C++: Add flow models and accept test changes.
MathiasVP
committed
05c6fe3
View commit details
Copy full SHA for 05c6fe3
View code at this point
Browse repository at this point
C++: Make "windows-registry" a subkind of local flow sources so we can target those specifically in queries.
MathiasVP
committed
f9125b7
View commit details
Copy full SHA for f9125b7
View code at this point
Browse repository at this point
C++: Add models and accept test changes.
MathiasVP
committed
5256b95
View commit details
Copy full SHA for 5256b95
View code at this point
Browse repository at this point
Commits on Jul 28, 2026
C++: Add models for 'RegGetValue' and friends.
MathiasVP
committed
daefacf
View commit details
Copy full SHA for daefacf
View code at this point
Browse repository at this point
C++: Add flow sources for 'winreg.h'.
MathiasVP
committed
16ad0a3
View commit details
Copy full SHA for 16ad0a3
View code at this point
Browse repository at this point
Commits on Apr 29, 2026
Merge pull request #21751 from github/jacknojo/move_java_generated_mads
Show description for 0192ffa
jacknojo
authored
0192ffa
View commit details
Copy full SHA for 0192ffa
View code at this point
Browse repository at this point
Commits on Apr 28, 2026
C++: Add strsafe.h model.
MathiasVP
committed
2805f78
View commit details
Copy full SHA for 2805f78
View code at this point
Browse repository at this point
Commits on Apr 24, 2026
Move generated MaDs for CPP into modelgenerator/
jacknojo
committed
07cb980
View commit details
Copy full SHA for 07cb980
View code at this point
Browse repository at this point
Commits on Apr 17, 2026
Add models of ::aligned_alloc, std::aligned_alloc, and bsl::aligned_alloc
jeongsoolee09
committed
d2d594a
View commit details
Copy full SHA for d2d594a
View code at this point
Browse repository at this point
Commits on Mar 31, 2026
C++: Model a few more remote flow sources from 'http.h' and accept test changes.
MathiasVP
committed
21ea7eb
View commit details
Copy full SHA for 21ea7eb
View code at this point
Browse repository at this point
Commits on Mar 26, 2026
Convert C++ CSV models from QL files to .model.yml data extensions
Show description for a637714
Copilot
and
owen-mc
authored
a637714
View commit details
Copy full SHA for a637714
View code at this point
Browse repository at this point
Commits on Feb 3, 2026
C++: Add flow sources and summary models.
MathiasVP
committed
cbc2dbc
View commit details
Copy full SHA for cbc2dbc
View code at this point
Browse repository at this point
Commits on Jan 23, 2026
C++: Add MaD models for MySQL escaping
jketema
committed
ecd247b
View commit details
Copy full SHA for ecd247b
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.