Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql-action
Public
Notifications
You must be signed in to change notification settings
Fork
491
Star
1.6k
Code
Issues
158
Pull requests
33
Actions
Security and quality
2
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
Commits
Branch selector
main
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 11, 2026
Merge pull request #4140 from github/mario-campos/move-withTmpFile
Show description for 1cf8f51
mario-campos
authored
1cf8f51
View commit details
Copy full SHA for 1cf8f51
Browse repository at this point
Add JSDoc to `withTmpFile`
mario-campos
committed
faf4f3a
View commit details
Copy full SHA for faf4f3a
Browse repository at this point
Merge pull request #4143 from github/mbg/rename-script-to-changenote
Show description for e72db59
mbg
authored
e72db59
View commit details
Copy full SHA for e72db59
Browse repository at this point
Delete unnecessary `.js` file extension from `import` statement
Show description for 15b91db
mario-campos
and
mbg
authored
15b91db
View commit details
Copy full SHA for 15b91db
Browse repository at this point
Rename `validate-changelog` to `changenotes`
mbg
committed
27a821e
View commit details
Copy full SHA for 27a821e
Browse repository at this point
Merge pull request #4141 from github/mario-campos/finally-clean-withTmpDir
Show description for 032138d
mbg
authored
032138d
View commit details
Copy full SHA for 032138d
Browse repository at this point
Merge pull request #4139 from github/mbg/10sep26-deps
Show description for 7be8083
mbg
authored
7be8083
View commit details
Copy full SHA for 7be8083
Browse repository at this point
Commits on Sep 10, 2026
Always clean-up temp dirs in `withTmpDir`
mario-campos
committed
80d5f4e
View commit details
Copy full SHA for 80d5f4e
Browse repository at this point
Update npm commands in sync.sh to include workspace root dependencies
mario-campos
committed
297617d
View commit details
Copy full SHA for 297617d
Browse repository at this point
Reduce duplication by using `withTmpDir` in `withTmpFile`
mario-campos
committed
f6491d6
View commit details
Copy full SHA for f6491d6
Browse repository at this point
Move `withTmpFile` to `util.ts` and update tests to use it
mario-campos
committed
4375107
View commit details
Copy full SHA for 4375107
Browse repository at this point
Update dependencies
mbg
committed
a50b659
View commit details
Copy full SHA for a50b659
Browse repository at this point
Merge pull request #4128 from github/mbg/move-changetool
Show description for 14c568a
mbg
authored
14c568a
View commit details
Copy full SHA for 14c568a
Browse repository at this point
Merge remote-tracking branch 'origin/main' into mbg/move-changetool
mbg
committed
0484c3a
View commit details
Copy full SHA for 0484c3a
Browse repository at this point
Remove unneeded `Promise.resolve`
mbg
committed
aaa0143
View commit details
Copy full SHA for aaa0143
Browse repository at this point
Merge pull request #4134 from github/dependabot/npm_and_yarn/npm-minor-a30b170aad
Show description for 5584cec
mbg
authored
5584cec
View commit details
Copy full SHA for 5584cec
Browse repository at this point
Merge pull request #4136 from github/dependabot/github_actions/dot-github/workflows/actions-minor-4cf73e6ad1
Show description for d982658
mbg
authored
d982658
View commit details
Copy full SHA for d982658
Browse repository at this point
Commits on Sep 9, 2026
Rebuild
github-actions[bot]
committed
9f28912
View commit details
Copy full SHA for 9f28912
Browse repository at this point
Rebuild
github-actions[bot]
committed
d9ef050
View commit details
Copy full SHA for d9ef050
Browse repository at this point
Bump actions/setup-java
Show description for a727983
dependabot[bot]
authored
a727983
View commit details
Copy full SHA for a727983
Browse repository at this point
Bump the npm-minor group across 1 directory with 6 updates
Show description for d40707c
dependabot[bot]
authored
d40707c
View commit details
Copy full SHA for d40707c
Browse repository at this point
Merge pull request #4132 from github/mergeback/v4.38.0-to-main-b96794f0
Show description for e855781
henrymercer
authored
e855781
View commit details
Copy full SHA for e855781
Browse repository at this point
Rebuild
github-actions[bot]
committed
23a5edc
View commit details
Copy full SHA for 23a5edc
Browse repository at this point
Update changelog and version after v4.38.0
github-actions[bot]
committed
6f5a84b
View commit details
Copy full SHA for 6f5a84b
Browse repository at this point
Merge pull request #4131 from github/update-v4.38.0-7e08580a9
Show description for b96794f
henrymercer
authored
b96794f
View commit details
Copy full SHA for b96794f
Browse repository at this point
Update changelog for v4.38.0
github-actions[bot]
committed
02d5093
View commit details
Copy full SHA for 02d5093
Browse repository at this point
Merge pull request #4130 from github/henrymercer/workflow-runner-sizing
Show description for 7e08580
henrymercer
authored
7e08580
View commit details
Copy full SHA for 7e08580
Browse repository at this point
Run slow macOS checks on larger runners
Show description for bfcc52b
henrymercer
and
Copilot
committed
bfcc52b
View commit details
Copy full SHA for bfcc52b
Browse repository at this point
Merge pull request #4129 from github/update-bundle/codeql-bundle-v2.27.0
Show description for 8c251e7
henrymercer
authored
8c251e7
View commit details
Copy full SHA for 8c251e7
Browse repository at this point
Add changelog note
github-actions[bot]
committed
0b7ca40
View commit details
Copy full SHA for 0b7ca40
Browse repository at this point
Update default bundle to codeql-bundle-v2.27.0
github-actions[bot]
committed
40484b3
View commit details
Copy full SHA for 40484b3
Browse repository at this point
Address linter errors in `validate.test.mts`
mbg
committed
d235931
View commit details
Copy full SHA for d235931
Browse repository at this point
Fix some formatting in `pr-checks.yml`
mbg
committed
b136352
View commit details
Copy full SHA for b136352
Browse repository at this point
Migrate `changetool` to `pr-checks`
mbg
committed
83d1431
View commit details
Copy full SHA for 83d1431
Browse repository at this point
Commits on Sep 8, 2026
Merge pull request #4124 from github/henrymercer/toolcache-bundle-cleanup
Show description for 977e6ce
henrymercer
authored
977e6ce
View commit details
Copy full SHA for 977e6ce
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4&size=32){kind=avatar}
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=32){kind=avatar}
