Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
microsoft
codeql
Repository navigation
Code
Issues
15
(15)
Pull requests
28
(28)
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
python
ql
test
query-tests
on
macro-flow-partial-expr
User selector
All users
Datepicker
All time
Commit history
Commits on Oct 24, 2025
Merge pull request #20494 from joefarebrother/python-insecure-cookie-split
Show description for 8c277bd
Joe Farebrother (joefarebrother)
authored
8c277bd
View commit details
Copy full SHA for 8c277bd
View code at this point
Browse repository at this point
Commits on Sep 25, 2025
Merge pull request #20495 from github/tausbn/python-fix-unmatchable-dollar-in-lookahead
Show description for e592fd6
Taus (tausbn)
authored
e592fd6
View commit details
Copy full SHA for e592fd6
View code at this point
Browse repository at this point
Update alert message
Joe Farebrother (joefarebrother)
committed
cb7b1ef
View commit details
Copy full SHA for cb7b1ef
View code at this point
Browse repository at this point
Commits on Sep 24, 2025
Update test output
Joe Farebrother (joefarebrother)
committed
9f5bfeb
View commit details
Copy full SHA for 9f5bfeb
View code at this point
Browse repository at this point
Commits on Sep 23, 2025
Update and fix tests
Joe Farebrother (joefarebrother)
committed
2cffb21
View commit details
Copy full SHA for 2cffb21
View code at this point
Browse repository at this point
Add sensitive data heuristic
Joe Farebrother (joefarebrother)
committed
d28e800
View commit details
Copy full SHA for d28e800
View code at this point
Browse repository at this point
Commits on Sep 22, 2025
Merge pull request #20263 from joefarebrother/python-qual-exceptions
Show description for 463f79b
Joe Farebrother (joefarebrother)
authored
463f79b
View commit details
Copy full SHA for 463f79b
View code at this point
Browse repository at this point
Commits on Sep 19, 2025
Python: Fix false positive for unmatchable dollar/caret
Show description for 95a84ad
Taus (tausbn)
committed
95a84ad
View commit details
Copy full SHA for 95a84ad
View code at this point
Browse repository at this point
Split test cases for insecure cookie queries
Joe Farebrother (joefarebrother)
committed
2e95c2b
View commit details
Copy full SHA for 2e95c2b
View code at this point
Browse repository at this point
Commits on Sep 18, 2025
Merge pull request #20392 from joefarebrother/python-qual-file-not-closed
Show description for 2cd1d2f
Joe Farebrother (joefarebrother)
authored
2cd1d2f
View commit details
Copy full SHA for 2cd1d2f
View code at this point
Browse repository at this point
Commits on Sep 17, 2025
Merge pull request #20217 from joefarebrother/python-qual-signature-mismatch
Show description for f3802ec
Joe Farebrother (joefarebrother)
authored
f3802ec
View commit details
Copy full SHA for f3802ec
View code at this point
Browse repository at this point
Commits on Sep 16, 2025
Python: Add global variable nested field jump steps
Napalys Klicius (Napalys)
committed
e60d0c8
View commit details
Copy full SHA for e60d0c8
View code at this point
Browse repository at this point
Python: Added extra test cases for path injection with FastAPI
Napalys Klicius (Napalys)
committed
6c779c7
View commit details
Copy full SHA for 6c779c7
View code at this point
Browse repository at this point
Python: Updated PathInjection tests to use inline test expectations
Napalys Klicius (Napalys)
committed
f209e3a
View commit details
Copy full SHA for f209e3a
View code at this point
Browse repository at this point
Commits on Sep 9, 2025
Fix tests
Joe Farebrother (joefarebrother)
committed
ea562de
View commit details
Copy full SHA for ea562de
View code at this point
Browse repository at this point
Update test output
Joe Farebrother (joefarebrother)
committed
b01b40b
View commit details
Copy full SHA for b01b40b
View code at this point
Browse repository at this point
Improve check for containment in with statement
Joe Farebrother (joefarebrother)
committed
e382f7c
View commit details
Copy full SHA for e382f7c
View code at this point
Browse repository at this point
Commits on Sep 5, 2025
Update test output. Accepting some FNs due to dataflow issue.
Joe Farebrother (joefarebrother)
committed
ff4c11f
View commit details
Copy full SHA for ff4c11f
View code at this point
Browse repository at this point
Update test output
Joe Farebrother (joefarebrother)
committed
0b293ea
View commit details
Copy full SHA for 0b293ea
View code at this point
Browse repository at this point
Switch to dataflow check for guards exceptions
Show description for bd3fa7f
Joe Farebrother (joefarebrother)
committed
bd3fa7f
View commit details
Copy full SHA for bd3fa7f
View code at this point
Browse repository at this point
Commits on Sep 3, 2025
Add missing predicate + update test output
Joe Farebrother (joefarebrother)
committed
cd6a151
View commit details
Copy full SHA for cd6a151
View code at this point
Browse repository at this point
Commits on Sep 2, 2025
Increase precision in detecting call matches signature
Joe Farebrother (joefarebrother)
committed
318d1cd
View commit details
Copy full SHA for 318d1cd
View code at this point
Browse repository at this point
Commits on Sep 1, 2025
Updae other test output
Joe Farebrother (joefarebrother)
committed
502ea82
View commit details
Copy full SHA for 502ea82
View code at this point
Browse repository at this point
Add additional test cases
Joe Farebrother (joefarebrother)
committed
2bbf24b
View commit details
Copy full SHA for 2bbf24b
View code at this point
Browse repository at this point
Update tests, update alert messages
Joe Farebrother (joefarebrother)
committed
f429b90
View commit details
Copy full SHA for f429b90
View code at this point
Browse repository at this point
Rank multiple calls so only the first 2 calls are alerted
Joe Farebrother (joefarebrother)
committed
f709713
View commit details
Copy full SHA for f709713
View code at this point
Browse repository at this point
Update qhelp + alert messages
Joe Farebrother (joefarebrother)
committed
ba86584
View commit details
Copy full SHA for ba86584
View code at this point
Browse repository at this point
Update tests and add an additional test
Joe Farebrother (joefarebrother)
committed
daa5525
View commit details
Copy full SHA for daa5525
View code at this point
Browse repository at this point
Add additional test case + update missing del tests
Joe Farebrother (joefarebrother)
committed
9619ae8
View commit details
Copy full SHA for 9619ae8
View code at this point
Browse repository at this point
Update tests for calls to init + fixes
Joe Farebrother (joefarebrother)
committed
c9932e1
View commit details
Copy full SHA for c9932e1
View code at this point
Browse repository at this point
Update test outputs + fix semantics
Joe Farebrother (joefarebrother)
committed
99a05ed
View commit details
Copy full SHA for 99a05ed
View code at this point
Browse repository at this point
Move tests and add inline expectation postprocessing
Joe Farebrother (joefarebrother)
committed
732c818
View commit details
Copy full SHA for 732c818
View code at this point
Browse repository at this point
Commits on Aug 29, 2025
Merge pull request #20048 from Napalys/js/xml_bomb_sinks
Show description for bafe22c
Napalys Klicius (Napalys)
authored
bafe22c
View commit details
Copy full SHA for bafe22c
View code at this point
Browse repository at this point
Commits on Aug 28, 2025
Merge pull request #20142 from joefarebrother/python-qual-subclass-shadow
Show description for 7ef2b01
Joe Farebrother (joefarebrother)
authored
7ef2b01
View commit details
Copy full SHA for 7ef2b01
View code at this point
Browse repository at this point
Merge pull request #20303 from hvitved/python/jump-to-def-unpack-tests
Show description for fa7295f
Tom Hvitved (hvitved)
authored
fa7295f
View commit details
Copy full SHA for fa7295f
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.