Skip to content

Issues: github/codeql

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

807 Open 1,542 Closed
807 Open 1,542 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Experimental CodeInjection query for JavaScript doesn't seem to work question Further information is requested
#18619 opened Jan 29, 2025 by yonajix
2
js/weak-cryptographic-algorithm/BrokenCryptoAlgorithm got 25-30x slower question Further information is requested
#18604 opened Jan 28, 2025 by maschwenk
2
Analysis on Maven projects failing due to certificate validation error against Maven Central artefacts question Further information is requested
#18598 opened Jan 27, 2025 by rvesse
3
RegExpInjection takes 6 hours to scan the TypeScript repo after 2.20.2 acknowledged GitHub staff acknowledges this issue
#18584 opened Jan 24, 2025 by jakebailey
4
GBK encoding caused CodeQL to detect code written in Java/Kotlin, but it was unable to process any of it question Further information is requested
#18527 opened Jan 17, 2025 by Weijin-wj
7
Python: Mixing implicit/explicit returns false positive false-positive
#18521 opened Jan 17, 2025 by henriquevcosta
2
Weak Hashing findings vanished from 1.1.11 ruleset? question Further information is requested
#18518 opened Jan 16, 2025 by davewichers
5
Implement CodeQL SARIF file improvements suggested by Microsoft SARIF SDK tool question Further information is requested
#18477 opened Jan 10, 2025 by davewichers
1
Go: LoadGoModules incorrectly still flags 1.23 as an invalid toolchain false-positive
#18447 opened Jan 8, 2025 by dnwe
2
False positive py/uninitialized-local-variable false-positive Python
#18390 opened Jan 3, 2025 by woodywuuu
3
False positive - Incomplete string escaping false-positive
#18379 opened Dec 29, 2024 by kuhe
8
General issue: Missing vulnerability reports due to incomplete self variable reference relationships in Python classes Python question Further information is requested
#18374 opened Dec 27, 2024 by Firebasky
4
CodeQL: Setting paths in Github Advanced Security for Azure Devops question Further information is requested
#18372 opened Dec 27, 2024 by woeterman94
6
General issue question Further information is requested
#18363 opened Dec 24, 2024 by ashutosh7107
8
So many false positives that I doubt it actually works false-positive
#18359 opened Dec 22, 2024 by Scoppio
2
False positive for Prototype-polluting function false-positive javascript Pull requests that update Javascript code
#18327 opened Dec 19, 2024 by dbauszus-glx
4
[Actions] Unpinned actions in same organization or same enterprise incorrectly trigger actions/unpinned-tag false-positive
#18316 opened Dec 18, 2024 by ebickle
2
How to publish a public pack with codeql question Further information is requested
#18311 opened Dec 18, 2024 by trganda
1
Unable to validate code scanning workflow: error: getWorkflow() failed question Further information is requested
#18279 opened Dec 12, 2024 by parsley72
6
codeql pack download microsoft/[email protected] fail question Further information is requested
#18264 opened Dec 11, 2024 by lovelifezhenzhen
1
[JS]: False positive "superfluous trailing arguments" for Web Streams API TransformStream constructor with one argument false-positive
#18249 opened Dec 9, 2024 by AlCalzone
C++ extraction aborted for compiler invocation when using std::format question Further information is requested
#18244 opened Dec 8, 2024 by ryftchen
17
Failed to run query: The query depends on an extensional predicate selectedSourceColumn which has not been defined. question Further information is requested
#18227 opened Dec 5, 2024 by SwiftExtender
3
Possible false positive "Uncontrolled data used in path expression" still after stripping path from input. false-positive
#18225 opened Dec 5, 2024 by valuator18
Rule tags in SARIF file exceed limits question Further information is requested
#18193 opened Dec 3, 2024 by stephenegriffin
5
ProTip! Adding no:label will show everything without a label.