Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
microsoft
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
24
Star
27
Code
Issues
15
Pull requests
25
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
binary
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on May 15, 2026
Add parameter type signatures for IL and JVM methods (#358)
Show description for a3cc253
Giulia Stocco (gfs)
and
Copilot
authored
a3cc253
View commit details
Copy full SHA for a3cc253
View code at this point
Browse repository at this point
Rename ConditionKind to BinaryConditionKind to resolve name conflict with ConditionKind definition which was added in upstream base QL.
Giulia Stocco (gfs)
committed
0bb42f7
View commit details
Copy full SHA for 0bb42f7
View code at this point
Browse repository at this point
Commits on Jan 21, 2026
Binary/JVM: Autoformat.
Mathias Vorreiter Pedersen (MathiasVP)
committed
2dec095
View commit details
Copy full SHA for 2dec095
View code at this point
Browse repository at this point
Binary/JVM: Add warning for implicit 'this' and slightly modify a predicate to prepare for autoformatting.
Mathias Vorreiter Pedersen (MathiasVP)
committed
2f64978
View commit details
Copy full SHA for 2f64978
View code at this point
Browse repository at this point
Commits on Jan 13, 2026
Binary: Small cleanup by moving some x86 stuff into another file like we do for CIL and JVM instructions.
Mathias Vorreiter Pedersen (MathiasVP)
committed
ba28175
View commit details
Copy full SHA for ba28175
View code at this point
Browse repository at this point
Revert "Refactor call graph predicates for vulnerable method detection"
Show description for 0fd33da
Giulia Stocco (gfs)
committed
0fd33da
View commit details
Copy full SHA for 0fd33da
View code at this point
Browse repository at this point
Refactor call graph predicates for vulnerable method detection
Show description for 43109f5
Giulia Stocco (gfs)
committed
43109f5
View commit details
Copy full SHA for 43109f5
View code at this point
Browse repository at this point
Revert VulnerableCalls pragma[nomagic] optimizations
Show description for b9ccfee
Giulia Stocco (gfs)
committed
b9ccfee
View commit details
Copy full SHA for b9ccfee
View code at this point
Browse repository at this point
Revert JVM stack state precomputation
Show description for bc98a0f
Giulia Stocco (gfs)
committed
bc98a0f
View commit details
Copy full SHA for bc98a0f
View code at this point
Browse repository at this point
Commits on Jan 12, 2026
Use single TRAP file for JVM extraction
Show description for 0926f3d
Giulia Stocco (gfs)
committed
0926f3d
View commit details
Copy full SHA for 0926f3d
View code at this point
Browse repository at this point
Commits on Jan 9, 2026
Cleanup state
Show description for 5dedaee
Giulia Stocco (gfs)
committed
5dedaee
View commit details
Copy full SHA for 5dedaee
View code at this point
Browse repository at this point
Optimize vulnerable call detection and summarization
Show description for 02fd414
Giulia Stocco (gfs)
committed
02fd414
View commit details
Copy full SHA for 02fd414
View code at this point
Browse repository at this point
Refactor stack element access to use getInputStackVariable
Show description for c2f683b
Giulia Stocco (gfs)
committed
c2f683b
View commit details
Copy full SHA for c2f683b
View code at this point
Browse repository at this point
Add JVM stack state extraction and QL accessors
Show description for 7256e95
Giulia Stocco (gfs)
committed
7256e95
View commit details
Copy full SHA for 7256e95
View code at this point
Browse repository at this point
Commits on Jan 6, 2026
Improve detection of transitive vulnerable calls
Show description for 5e83ca4
Giulia Stocco (gfs)
committed
5e83ca4
View commit details
Copy full SHA for 5e83ca4
View code at this point
Browse repository at this point
Update dependencies in qlpack.yml files
Show description for d80ab2d
Giulia Stocco (gfs)
committed
d80ab2d
View commit details
Copy full SHA for d80ab2d
View code at this point
Browse repository at this point
Extract and expose CIL method access flags
Show description for 13f79e6
Giulia Stocco (gfs)
committed
13f79e6
View commit details
Copy full SHA for 13f79e6
View code at this point
Browse repository at this point
Extract and expose JVM method access flags
Show description for 83e1236
Giulia Stocco (gfs)
committed
83e1236
View commit details
Copy full SHA for 83e1236
View code at this point
Browse repository at this point
Refactor JVM instruction hierarchy and translation
Show description for f66db26
Giulia Stocco (gfs)
committed
f66db26
View commit details
Copy full SHA for f66db26
View code at this point
Browse repository at this point
Add JVM IR translation support and test model
Show description for 31dd0e8
Giulia Stocco (gfs)
committed
31dd0e8
View commit details
Copy full SHA for 31dd0e8
View code at this point
Browse repository at this point
Refactor JVM extractor indexing and opcode handling
Show description for d5a8da2
Giulia Stocco (gfs)
committed
d5a8da2
View commit details
Copy full SHA for d5a8da2
View code at this point
Browse repository at this point
Commits on Jan 5, 2026
Handle null names in JVM extractor
Show description for 1c3a107
Giulia Stocco (gfs)
committed
1c3a107
View commit details
Copy full SHA for 1c3a107
View code at this point
Browse repository at this point
Add initial Java bytecode extractor and QL support
Show description for d743fbf
Giulia Stocco (gfs)
committed
d743fbf
View commit details
Copy full SHA for d743fbf
View code at this point
Browse repository at this point
Commits on Dec 16, 2025
Binary: Translate 'CilLdfld' to IR.
Mathias Vorreiter Pedersen (MathiasVP)
committed
85d9007
View commit details
Copy full SHA for 85d9007
View code at this point
Browse repository at this point
Binary: Translate 'CilStfld' to IR.
Mathias Vorreiter Pedersen (MathiasVP)
committed
03a907e
View commit details
Copy full SHA for 03a907e
View code at this point
Browse repository at this point
Binary: Add a FieldAddress instruction to the IR.
Mathias Vorreiter Pedersen (MathiasVP)
committed
ecf00f9
View commit details
Copy full SHA for ecf00f9
View code at this point
Browse repository at this point
Binary: Extract field references.
Mathias Vorreiter Pedersen (MathiasVP)
committed
79817dc
View commit details
Copy full SHA for 79817dc
View code at this point
Browse repository at this point
Binary: Add IR for 'dup' instructions.
Mathias Vorreiter Pedersen (MathiasVP)
committed
4378da4
View commit details
Copy full SHA for 4378da4
View code at this point
Browse repository at this point
Binary: Generate IR for CIL's newobject instruction.
Mathias Vorreiter Pedersen (MathiasVP)
committed
cc4bbc2
View commit details
Copy full SHA for cc4bbc2
View code at this point
Browse repository at this point
Binary: Only emit an external ref instruction when the call is external.
Mathias Vorreiter Pedersen (MathiasVP)
committed
88a3f09
View commit details
Copy full SHA for 88a3f09
View code at this point
Browse repository at this point
Binary: Delete the 'InstrRef' opcode and don't generate IR using it.
Mathias Vorreiter Pedersen (MathiasVP)
committed
9f228f5
View commit details
Copy full SHA for 9f228f5
View code at this point
Browse repository at this point
Commits on Dec 12, 2025
Update tools folder path for macOS build
Show description for 842a500
Giulia Stocco (gfs)
committed
842a500
View commit details
Copy full SHA for 842a500
View code at this point
Browse repository at this point
Simplify CIL autobuild and index scripts
Show description for 462479a
Giulia Stocco (gfs)
committed
462479a
View commit details
Copy full SHA for 462479a
View code at this point
Browse repository at this point
Commits on Dec 10, 2025
Remove obsolete binary cache and operand files
Show description for e70a576
Giulia Stocco (gfs)
committed
e70a576
View commit details
Copy full SHA for e70a576
View code at this point
Browse repository at this point
Add C# IL extractor autobuild and indexing scripts
Show description for 4ece696
Giulia Stocco (gfs)
committed
4ece696
View commit details
Copy full SHA for 4ece696
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.