Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
test
on
codeql-cli/v2.19.3
User selector
All users
All time
Commit history
Commits on Nov 1, 2024
Merge branch 'main' into js-threat-models
RasmusWL
authored
c0ad9ba
View commit details
Copy full SHA for c0ad9ba
View code at this point
Browse repository at this point
Commits on Oct 31, 2024
JS: Model `readline` as a `stdin` threat-model source
Show description for 61e60de
RasmusWL
committed
61e60de
View commit details
Copy full SHA for 61e60de
View code at this point
Browse repository at this point
JS: Do simple modeling of `process.stdin` as threat-model source
RasmusWL
committed
eca8bf5
View commit details
Copy full SHA for eca8bf5
View code at this point
Browse repository at this point
JS: Model fs.promises.readFile as file source
Show description for 34b86c3
RasmusWL
committed
34b86c3
View commit details
Copy full SHA for 34b86c3
View code at this point
Browse repository at this point
JS: Include `fs` externs
Show description for 971f538
RasmusWL
committed
971f538
View commit details
Copy full SHA for 971f538
View code at this point
Browse repository at this point
JS: Add tests for `stdin` threat-model sources
RasmusWL
committed
b47fa77
View commit details
Copy full SHA for b47fa77
View code at this point
Browse repository at this point
Commits on Oct 29, 2024
JS: Add initial `file` threat-model support
Show description for 2b6c27e
RasmusWL
committed
2b6c27e
View commit details
Copy full SHA for 2b6c27e
View code at this point
Browse repository at this point
JS: Add `database` threat-model source modeling
RasmusWL
committed
3656864
View commit details
Copy full SHA for 3656864
View code at this point
Browse repository at this point
JS: Post-processing query for inline test expectations
hvitved
committed
1259b7e
View commit details
Copy full SHA for 1259b7e
View code at this point
Browse repository at this point
JS: Expand attribute regex to include some Vue attributes
asgerf
committed
3cc6b11
View commit details
Copy full SHA for 3cc6b11
View code at this point
Browse repository at this point
JS: Add test with some special Vue attributes
asgerf
committed
560b3da
View commit details
Copy full SHA for 560b3da
View code at this point
Browse repository at this point
Commits on Oct 25, 2024
JS: Add e2e threat-model test
RasmusWL
committed
1726287
View commit details
Copy full SHA for 1726287
View code at this point
Browse repository at this point
JS: Model newer `yargs` command-line parsing pattern
RasmusWL
committed
d3ae4c9
View commit details
Copy full SHA for d3ae4c9
View code at this point
Browse repository at this point
JS: Consolidate command-line argument modeling
Show description for 3448751
RasmusWL
committed
3448751
View commit details
Copy full SHA for 3448751
View code at this point
Browse repository at this point
JS: Add `environment` threat-model source
RasmusWL
committed
412e841
View commit details
Copy full SHA for 412e841
View code at this point
Browse repository at this point
JS: Remove 'response' from default threat-models
Show description for dbfbd2c
RasmusWL
committed
dbfbd2c
View commit details
Copy full SHA for dbfbd2c
View code at this point
Browse repository at this point
JS: Add test showing default active threat-models
RasmusWL
committed
05dce8a
View commit details
Copy full SHA for 05dce8a
View code at this point
Browse repository at this point
Commits on Oct 4, 2024
JS: Update expected test output
hvitved
committed
d0ca39f
View commit details
Copy full SHA for d0ca39f
View code at this point
Browse repository at this point
Commits on Sep 25, 2024
resolve id conflict with dom based xss test ql
5idg5
committed
e8c68ff
View commit details
Copy full SHA for e8c68ff
View code at this point
Browse repository at this point
Commits on Sep 11, 2024
Merge pull request #17401 from pwntester/js/actions/secrets-in-artifacts
Show description for 07bd854
asgerf
authored
07bd854
View commit details
Copy full SHA for 07bd854
View code at this point
Browse repository at this point
Adds test for arbitrary specifiers in TS files
Show description for 3516117
sidshank
committed
3516117
View commit details
Copy full SHA for 3516117
View code at this point
Browse repository at this point
Renames test file
sidshank
committed
785af12
View commit details
Copy full SHA for 785af12
View code at this point
Browse repository at this point
Commits on Sep 6, 2024
fix: Use YamlScalar for booleans
Alvaro Muñoz
committed
5d1da86
View commit details
Copy full SHA for 5d1da86
View code at this point
Browse repository at this point
[javascript] Query to detect GITHUB_TOKEN leaked in artifacts
Alvaro Muñoz
committed
d9e8792
View commit details
Copy full SHA for d9e8792
View code at this point
Browse repository at this point
Commits on Sep 3, 2024
use my script to delete outdated deprecations
erik-krogh
committed
0fdd06f
View commit details
Copy full SHA for 0fdd06f
View code at this point
Browse repository at this point
Commits on Aug 22, 2024
Merge pull request #17212 from mbaluda/main
Show description for 09aca6b
asgerf
authored
09aca6b
View commit details
Copy full SHA for 09aca6b
View code at this point
Browse repository at this point
Commits on Aug 16, 2024
JS: Delete unneeded test code (and shift line numbers)
asgerf
committed
7a7ab45
View commit details
Copy full SHA for 7a7ab45
View code at this point
Browse repository at this point
JS: Move AngularJSTemplateUrlSink to ClientSideUrlRedirection query
Show description for 9ee7599
asgerf
committed
9ee7599
View commit details
Copy full SHA for 9ee7599
View code at this point
Browse repository at this point
JS: Update a RegExp injection test
Show description for 699d3a0
asgerf
committed
699d3a0
View commit details
Copy full SHA for 699d3a0
View code at this point
Browse repository at this point
Commits on Aug 13, 2024
Add support for importing NPM modules in XSJS sources
mbaluda
committed
be0a60a
View commit details
Copy full SHA for be0a60a
View code at this point
Browse repository at this point
Commits on Aug 8, 2024
Merge pull request #14666 from am0o0/amammad-js-hardcodedJWTKey
Show description for 41506fb
erik-krogh
authored
41506fb
View commit details
Copy full SHA for 41506fb
View code at this point
Browse repository at this point
Commits on Aug 6, 2024
support arbitary export specifiers
erik-krogh
committed
b8187ed
View commit details
Copy full SHA for b8187ed
View code at this point
Browse repository at this point
support arbitary import specifiers
erik-krogh
committed
5f7f37f
View commit details
Copy full SHA for 5f7f37f
View code at this point
Browse repository at this point
Commits on Aug 1, 2024
apply changes from @erik-krogh
am0o0
committed
354fcbe
View commit details
Copy full SHA for 354fcbe
View code at this point
Browse repository at this point
Commits on Jul 12, 2024
Merge branch 'main' into aegilops/polyfill-io-compromised-script
aegilops
authored
c9af53f
View commit details
Copy full SHA for c9af53f
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.