Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
996
Pull requests
456
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
ext
on
codeql-cli/v2.16.2
User selector
All users
Datepicker
All time
Commit history
Commits on Feb 2, 2024
Java: Remove two redundant models implied by CharSequence models.
aschackmull
committed
49b00f3
View commit details
Copy full SHA for 49b00f3
View code at this point
Browse repository at this point
Commits on Jan 26, 2024
Merge pull request #15281 from joefarebrother/android-sensitive-ui-notif
Show description for 031bd8b
joefarebrother
authored
031bd8b
View commit details
Copy full SHA for 031bd8b
View code at this point
Browse repository at this point
Merge pull request #15436 from github/max-schaefer-patch-1
Show description for 73130ec
max-schaefer
authored
73130ec
View commit details
Copy full SHA for 73130ec
View code at this point
Browse repository at this point
Commits on Jan 25, 2024
Fix code review mistake
atorralba
committed
d299971
View commit details
Copy full SHA for d299971
View code at this point
Browse repository at this point
Add two more models.
Max Schaefer
committed
13f0df3
View commit details
Copy full SHA for 13f0df3
View code at this point
Browse repository at this point
Add models for overloads of DatagramPacket constructor
max-schaefer
authored and
Max Schaefer
committed
5235291
View commit details
Copy full SHA for 5235291
View code at this point
Browse repository at this point
Java: PR discussion
Stephan Brandauer
committed
1f9a968
View commit details
Copy full SHA for 1f9a968
View code at this point
Browse repository at this point
Update java/ql/lib/ext/com.fasterxml.jackson.databind.model.yml
Show description for 5d6ee9c
Stephan Brandauer
and
atorralba
authored
5d6ee9c
View commit details
Copy full SHA for 5d6ee9c
View code at this point
Browse repository at this point
Commits on Jan 24, 2024
Merge branch 'main' into java/update-mad-decls-after-triage-2024-01-24T10-05-04
Stephan Brandauer
authored
4e63cbc
View commit details
Copy full SHA for 4e63cbc
View code at this point
Browse repository at this point
Update MaD Declarations after Triage
Stephan Brandauer
committed
d5bcbcd
View commit details
Copy full SHA for d5bcbcd
View code at this point
Browse repository at this point
Commits on Jan 23, 2024
Address review comments - add barrierIn and fix a model for a PendingIntent sink
joefarebrother
committed
dedba1f
View commit details
Copy full SHA for dedba1f
View code at this point
Browse repository at this point
Reorder sink models
joefarebrother
committed
b23bbf9
View commit details
Copy full SHA for b23bbf9
View code at this point
Browse repository at this point
Remove sink models involving PendingIntent; as they do not carry sensitive data (including from the original intent they were created with)
joefarebrother
committed
d806fca
View commit details
Copy full SHA for d806fca
View code at this point
Browse repository at this point
Generate androidx stubs and correct some models
joefarebrother
committed
2ca164c
View commit details
Copy full SHA for 2ca164c
View code at this point
Browse repository at this point
Add tests to cover each modeled sink + some corrections to the models
joefarebrother
committed
bafd65b
View commit details
Copy full SHA for bafd65b
View code at this point
Browse repository at this point
Add sink models to notification builder setters
joefarebrother
committed
f9bb004
View commit details
Copy full SHA for f9bb004
View code at this point
Browse repository at this point
Add sensitive notification query
joefarebrother
committed
143ce0b
View commit details
Copy full SHA for 143ce0b
View code at this point
Browse repository at this point
Merge branch 'main' into java/update-mad-decls-after-triage-2023-12-21T14-39-02
Stephan Brandauer
authored
95b439b
View commit details
Copy full SHA for 95b439b
View code at this point
Browse repository at this point
work on review comments
Show description for cd765e7
Stephan Brandauer
and
atorralba
committed
cd765e7
View commit details
Copy full SHA for cd765e7
View code at this point
Browse repository at this point
Java: java.awt.Desktop::browse is a url-redirection sink
Show description for 8b34407
Stephan Brandauer
and
atorralba
authored
8b34407
View commit details
Copy full SHA for 8b34407
View code at this point
Browse repository at this point
Commits on Jan 11, 2024
Merge pull request #15280 from owen-mc/java/add-manual-models-for-df-generation
Show description for 2f01688
owen-mc
authored
2f01688
View commit details
Copy full SHA for 2f01688
View code at this point
Browse repository at this point
Commits on Jan 8, 2024
Merge branch 'main' into fix/update-gson-model
ebickle
authored
f6fa712
View commit details
Copy full SHA for f6fa712
View code at this point
Browse repository at this point
Remove zero width space characters.
ebickle
committed
929ce65
View commit details
Copy full SHA for 929ce65
View code at this point
Browse repository at this point
Hudson environment variables models
egregius313
committed
814885f
View commit details
Copy full SHA for 814885f
View code at this point
Browse repository at this point
`org.apache.commons.exec` models
egregius313
committed
028bd49
View commit details
Copy full SHA for 028bd49
View code at this point
Browse repository at this point
`environment-injection` sink
egregius313
committed
ad32b81
View commit details
Copy full SHA for ad32b81
View code at this point
Browse repository at this point
Merge pull request #14681 from atorralba/atorralba/java/weak-randomness-cve-coverage
Show description for 7e6f2d1
atorralba
authored
7e6f2d1
View commit details
Copy full SHA for 7e6f2d1
View code at this point
Browse repository at this point
Commits on Jan 4, 2024
Fix manual models for `String.valueOf(Object)`
Show description for ce3097e
owen-mc
committed
ce3097e
View commit details
Copy full SHA for ce3097e
View code at this point
Browse repository at this point
Improve manual models of java.lang.Exception
owen-mc
committed
0076f06
View commit details
Copy full SHA for 0076f06
View code at this point
Browse repository at this point
Reorder manual models of java.lang.Throwable
owen-mc
committed
e415c54
View commit details
Copy full SHA for e415c54
View code at this point
Browse repository at this point
Improve manual models of java.lang.Throwable
owen-mc
committed
f52ea5c
View commit details
Copy full SHA for f52ea5c
View code at this point
Browse repository at this point
Commits on Jan 2, 2024
Merge branch 'main' into fix/update-gson-model
ebickle
authored
0cd89bf
View commit details
Copy full SHA for 0cd89bf
View code at this point
Browse repository at this point
Commits on Dec 21, 2023
Update MaD Declarations after Triage
Stephan Brandauer
committed
a9d21ce
View commit details
Copy full SHA for a9d21ce
View code at this point
Browse repository at this point
Commits on Dec 20, 2023
Merge pull request #14646 from github/java/update-mad-decls-after-triage-2023-10-31T15-52-01
Show description for 1b9f59e
atorralba
authored
1b9f59e
View commit details
Copy full SHA for 1b9f59e
View code at this point
Browse repository at this point
Merge pull request #14580 from github/java/update-mad-decls-after-triage-2023-10-24T15-42-01
Show description for e744d97
atorralba
authored
e744d97
View commit details
Copy full SHA for e744d97
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.