Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
518
(518)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
java
ql
src
experimental
on
rust/extractor-cli-args
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 23, 2026
Replace dead link in many qhelp files.
geoffw0
committed
e0654e0
View commit details
Copy full SHA for e0654e0
View code at this point
Browse repository at this point
Commits on Oct 16, 2026
Java/Ruby: Replace recursive algorithm string builders
Show description for d290e2f
jketema
and
Copilot
committed
d290e2f
View commit details
Copy full SHA for d290e2f
View code at this point
Browse repository at this point
Commits on May 4, 2026
Java: Fix reference in deprecated code.
aschackmull
committed
c7904b1
View commit details
Copy full SHA for c7904b1
View code at this point
Browse repository at this point
Commits on Feb 23, 2026
Java: Preparatory tweaks.
aschackmull
committed
2e98734
View commit details
Copy full SHA for 2e98734
View code at this point
Browse repository at this point
Commits on Feb 16, 2026
Fix places which already dealt with both javax and jakarta
owen-mc
committed
3184090
View commit details
Copy full SHA for 3184090
View code at this point
Browse repository at this point
Replace "javax" with `javaxOrJakarta()`
Show description for a5e6f6d
owen-mc
committed
a5e6f6d
View commit details
Copy full SHA for a5e6f6d
View code at this point
Browse repository at this point
Commits on Feb 13, 2026
Remove redundant variable
owen-mc
committed
ca4c988
View commit details
Copy full SHA for ca4c988
View code at this point
Browse repository at this point
Commits on Feb 11, 2026
Use new regex-related classes (no functional change)
owen-mc
committed
fa3fba4
View commit details
Copy full SHA for fa3fba4
View code at this point
Browse repository at this point
Commits on Feb 4, 2026
Java: Rename ReturnStmt.getResult to getExpr.
aschackmull
committed
6f40ac1
View commit details
Copy full SHA for 6f40ac1
View code at this point
Browse repository at this point
Commits on Jan 8, 2026
Delete experimental models that have been promoted
Show description for cce6823
owen-mc
committed
cce6823
View commit details
Copy full SHA for cce6823
View code at this point
Browse repository at this point
Commits on Dec 3, 2025
Use flowFrom.
aschackmull
committed
dc6d3fe
View commit details
Copy full SHA for dc6d3fe
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Remove trailing periods from @name metadata in query files
Show description for caf6b95
felicitymay
committed
caf6b95
View commit details
Copy full SHA for caf6b95
View code at this point
Browse repository at this point
Commits on Nov 12, 2025
Java: Replace getAUse with getARead.
aschackmull
committed
f4b9efc
View commit details
Copy full SHA for f4b9efc
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
Merge pull request #20690 from bdrodes/weak_symmetric_cipher_bug
Show description for d478752
nicolaswill
authored
d478752
View commit details
Copy full SHA for d478752
View code at this point
Browse repository at this point
Crypto: Simplifying expression for ql-for-ql alert.
bdrodes
committed
65d0ca9
View commit details
Copy full SHA for 65d0ca9
View code at this point
Browse repository at this point
Crypto: typo fix
bdrodes
committed
0394816
View commit details
Copy full SHA for 0394816
View code at this point
Browse repository at this point
Crypto: removing comments
bdrodes
committed
b20689f
View commit details
Copy full SHA for b20689f
View code at this point
Browse repository at this point
Crypto: Adding bad decrypt then mac order query. Fixes to BadMacOrderMacOnEncryptPlaintext as well.
bdrodes
committed
0e624f5
View commit details
Copy full SHA for 0e624f5
View code at this point
Browse repository at this point
Crypto: Fixed bug in WeakSymmetricCipher.qll, forgot to not only filter if !=AES but the algorithm must still be a SymmetriCipher algorithm.
bdrodes
committed
ed492c7
View commit details
Copy full SHA for ed492c7
View code at this point
Browse repository at this point
Commits on Oct 22, 2025
Crypto: Adjust output of bad mac order queries, update associated bad mac order expected results, fix erroneous change to ID for a slicing query, update model to specify elliptic curve type as a pr…
Show description for dd60cf9
bdrodes
committed
dd60cf9
View commit details
Copy full SHA for dd60cf9
View code at this point
Browse repository at this point
Commits on Oct 21, 2025
Crypto: ql-for-ql alert fixes.
bdrodes
committed
c50175b
View commit details
Copy full SHA for c50175b
View code at this point
Browse repository at this point
Commits on Oct 20, 2025
Crypto: Adding a proof of concept bad mac ordering predicate that takes in an ArtifactNode to be used for graph generation to intercept nodes with known mac ordering issues, in order to format the …
Show description for 22c0f9f
bdrodes
committed
22c0f9f
View commit details
Copy full SHA for 22c0f9f
View code at this point
Browse repository at this point
Crypto: To allow for graph generation to have properties informed by assessments, altering a few queries weak/vuln/bad crypto to have qll files that can be accessed for other purposes, like graph g…
Show description for eff94ef
bdrodes
committed
eff94ef
View commit details
Copy full SHA for eff94ef
View code at this point
Browse repository at this point
Commits on Oct 18, 2025
Merge branch 'main' into santander-java-crypto-check
bdrodes
authored
2b683c2
View commit details
Copy full SHA for 2b683c2
View code at this point
Browse repository at this point
Commits on Oct 17, 2025
Crypto: more ID renaming to include "examples", fix singleton issues with ql-for-ql, use formatted test for WeakAsymmetricKeyGenSize (add post processing in the qlref), misc expected files updated …
Show description for c01c060
bdrodes
committed
c01c060
View commit details
Copy full SHA for c01c060
View code at this point
Browse repository at this point
Crypto: altering all query IDs in examples to have "examples" in the ID, to make clear the query is not intended for production.
bdrodes
committed
b06e053
View commit details
Copy full SHA for b06e053
View code at this point
Browse repository at this point
Removing WeakRSA, this is redundant with weak asymmetric key size.
bdrodes
committed
1b205d8
View commit details
Copy full SHA for 1b205d8
View code at this point
Browse repository at this point
Crypto: Modify BadMacOrderMacOnEncryptPlaintext to be a path query that traces through any intermediate encrypt or mac to the final encrypt or mac.
bdrodes
committed
628bab9
View commit details
Copy full SHA for 628bab9
View code at this point
Browse repository at this point
Crypto: removing precision tags on experimental queries.
bdrodes
committed
ff7840d
View commit details
Copy full SHA for ff7840d
View code at this point
Browse repository at this point
Commits on Oct 16, 2025
Crypto: Addressing FPs in BadMacOrderMacOnEncryptPlaintext
bdrodes
committed
ef6f022
View commit details
Copy full SHA for ef6f022
View code at this point
Browse repository at this point
Crypto: Bad Mac use tests, and fix for BadMacOrderMacOnEncryptPlaintext (barriers were blocking flow through an encrypt to a subsequent mac on the same plaintext)
bdrodes
committed
700f34e
View commit details
Copy full SHA for 700f34e
View code at this point
Browse repository at this point
Crypto: Initial sketch for unknown hash, the model needs to recognize unknowns but where the algorithm category (e.g., hashing) is known.
bdrodes
committed
79ccef3
View commit details
Copy full SHA for 79ccef3
View code at this point
Browse repository at this point
Commits on Oct 15, 2025
Crypto: Tweaks to bad crypto ordering queries.
bdrodes
committed
15e266d
View commit details
Copy full SHA for 15e266d
View code at this point
Browse repository at this point
Crypto: remove precision tag
bdrodes
committed
c6174fb
View commit details
Copy full SHA for c6174fb
View code at this point
Browse repository at this point
Crypto: Remove all precision tags from all experimental queries. Precision is largely in flux while the models are being developed.
bdrodes
committed
c7be23e
View commit details
Copy full SHA for c7be23e
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.