Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
521
(521)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
javascript
ql
src
Security
CWE-312
on
unified/modified-expr
User selector
All users
Datepicker
All time
Commit history
Commits on Jun 23, 2025
JS: Remove js/actions/actions-artifact-leak
Show description for 9dcb61e
asgerf
committed
9dcb61e
View commit details
Copy full SHA for 9dcb61e
View code at this point
Browse repository at this point
Commits on Jan 27, 2025
fix example in clear-text-logging qhelp to actually be bad
erik-krogh
committed
37a1727
View commit details
Copy full SHA for 37a1727
View code at this point
Browse repository at this point
Commits on Nov 20, 2024
Merge branch 'main' into js/shared-dataflow-merge-main
asgerf
committed
d52bc97
View commit details
Copy full SHA for d52bc97
View code at this point
Browse repository at this point
Commits on Nov 5, 2024
fix: add "actions" tag to ActionsArtifactLeak
Show description for 881fe0b
mbarbero
authored
881fe0b
View commit details
Copy full SHA for 881fe0b
View code at this point
Browse repository at this point
Commits on Sep 18, 2024
Merge branch 'main' into js/shared-dataflow-merge-main
asgerf
committed
1cd00a1
View commit details
Copy full SHA for 1cd00a1
View code at this point
Browse repository at this point
Commits on Sep 6, 2024
fix: Use YamlScalar for booleans
Alvaro Muñoz
committed
5d1da86
View commit details
Copy full SHA for 5d1da86
View code at this point
Browse repository at this point
Fix alert message
Alvaro Muñoz
committed
5df3af2
View commit details
Copy full SHA for 5df3af2
View code at this point
Browse repository at this point
[javascript] Query to detect GITHUB_TOKEN leaked in artifacts
Alvaro Muñoz
committed
d9e8792
View commit details
Copy full SHA for d9e8792
View code at this point
Browse repository at this point
Commits on Oct 13, 2023
JS: Port BuildArtifactLeak
asgerf
committed
2296a27
View commit details
Copy full SHA for 2296a27
View code at this point
Browse repository at this point
JS: Port CleartextStorage
asgerf
committed
40d68cb
View commit details
Copy full SHA for 40d68cb
View code at this point
Browse repository at this point
JS: Port CleartextLogging
asgerf
committed
b8a6f81
View commit details
Copy full SHA for b8a6f81
View code at this point
Browse repository at this point
Commits on Feb 2, 2023
Update javascript/ql/src/Security/CWE-312/CleartextLogging.qhelp
Show description for 231110d
knewbury01
and
erik-krogh
authored
231110d
View commit details
Copy full SHA for 231110d
View code at this point
Browse repository at this point
Commits on Feb 1, 2023
Update JS CleartextLogging qhelp
knewbury01
committed
dc5eb40
View commit details
Copy full SHA for dc5eb40
View code at this point
Browse repository at this point
Commits on Oct 7, 2022
fix some more style-guide violations in the alert-messages
erik-krogh
committed
368f847
View commit details
Copy full SHA for 368f847
View code at this point
Browse repository at this point
Commits on Sep 6, 2022
update alert-messages of the sensitive data queries to match #10314
erik-krogh
committed
24f2e3c
View commit details
Copy full SHA for 24f2e3c
View code at this point
Browse repository at this point
Commits on Sep 5, 2022
make the alert messages of taint-tracking queries more consistent
erik-krogh
committed
aa56ca3
View commit details
Copy full SHA for aa56ca3
View code at this point
Browse repository at this point
Commits on Nov 24, 2021
JS/PY: Remove CWE-315 form CleartextLogging
Show description for c05ffd4
RasmusWL
committed
c05ffd4
View commit details
Copy full SHA for c05ffd4
View code at this point
Browse repository at this point
Commits on Nov 10, 2021
add CWE-532 to the clear-text-logging query
erik-krogh
committed
5543465
View commit details
Copy full SHA for 5543465
View code at this point
Browse repository at this point
Commits on Aug 12, 2021
JS: Migrate to *Query.qll convention
asgerf
committed
f6da030
View commit details
Copy full SHA for f6da030
View code at this point
Browse repository at this point
Commits on Jun 15, 2021
Update security-severity scores
calumgrant
committed
771e686
View commit details
Copy full SHA for 771e686
View code at this point
Browse repository at this point
Commits on Jun 10, 2021
Add security-severity metadata
calumgrant
committed
a594afb
View commit details
Copy full SHA for a594afb
View code at this point
Browse repository at this point
Commits on Jun 17, 2020
add dot after bullet-point
erik-krogh
committed
69888f9
View commit details
Copy full SHA for 69888f9
View code at this point
Browse repository at this point
Commits on Jun 15, 2020
small corrections in documentation
Show description for 315faaf
erik-krogh
and
asgerf
authored
315faaf
View commit details
Copy full SHA for 315faaf
View code at this point
Browse repository at this point
qhelp
erik-krogh
committed
d2716c5
View commit details
Copy full SHA for d2716c5
View code at this point
Browse repository at this point
Commits on Jun 9, 2020
improve readability
Show description for eb00da5
erik-krogh
and
asgerf
authored
eb00da5
View commit details
Copy full SHA for eb00da5
View code at this point
Browse repository at this point
introduce basic BuildArtifactLeak query
erik-krogh
committed
be71ddf
View commit details
Copy full SHA for be71ddf
View code at this point
Browse repository at this point
Commits on Feb 8, 2019
JavaScript: Update qhelp example for `CleartextStorage`.
Max Schaefer
committed
aebc5bc
View commit details
Copy full SHA for aebc5bc
View code at this point
Browse repository at this point
Commits on Jan 7, 2019
JavaScript: Autoformat all QL files.
Max Schaefer
committed
31bb39a
View commit details
Copy full SHA for 31bb39a
View code at this point
Browse repository at this point
Commits on Nov 14, 2018
JavaScript: Rename `hasPathFlow` to `hasFlowPath` for consistency with other languages.
Max Schaefer
committed
3fcd02a
View commit details
Copy full SHA for 3fcd02a
View code at this point
Browse repository at this point
JavaScript: Select `Node`s (instead of `PathNode`s) everywhere.
Max Schaefer
committed
52ae757
View commit details
Copy full SHA for 52ae757
View code at this point
Browse repository at this point
JavaScript: Select `source` and `sink` in all path queries.
Max Schaefer
committed
e365b72
View commit details
Copy full SHA for e365b72
View code at this point
Browse repository at this point
JavaScript: Move from `Node` to `PathNode`.
Max Schaefer
committed
11d6259
View commit details
Copy full SHA for 11d6259
View code at this point
Browse repository at this point
JavaScript: Add `import DataFlow::PathGraph`.
Max Schaefer
committed
8d87f55
View commit details
Copy full SHA for 8d87f55
View code at this point
Browse repository at this point
JavaScript: Make all taint-based security queries have `@kind path-problem`.
Max Schaefer
committed
60a1357
View commit details
Copy full SHA for 60a1357
View code at this point
Browse repository at this point
JavaScript: Refactor security queries for uniformity.
Max Schaefer
committed
65bcf0f
View commit details
Copy full SHA for 65bcf0f
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.