Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
ql
test
library-tests
on
codeql-cli/v2.19.3
User selector
All users
All time
Commit history
Commits on Nov 1, 2024
Merge branch 'main' into js-threat-models
RasmusWL
authored
c0ad9ba
View commit details
Copy full SHA for c0ad9ba
View code at this point
Browse repository at this point
Commits on Oct 31, 2024
JS: Model `readline` as a `stdin` threat-model source
Show description for 61e60de
RasmusWL
committed
61e60de
View commit details
Copy full SHA for 61e60de
View code at this point
Browse repository at this point
JS: Do simple modeling of `process.stdin` as threat-model source
RasmusWL
committed
eca8bf5
View commit details
Copy full SHA for eca8bf5
View code at this point
Browse repository at this point
JS: Model fs.promises.readFile as file source
Show description for 34b86c3
RasmusWL
committed
34b86c3
View commit details
Copy full SHA for 34b86c3
View code at this point
Browse repository at this point
JS: Include `fs` externs
Show description for 971f538
RasmusWL
committed
971f538
View commit details
Copy full SHA for 971f538
View code at this point
Browse repository at this point
JS: Add tests for `stdin` threat-model sources
RasmusWL
committed
b47fa77
View commit details
Copy full SHA for b47fa77
View code at this point
Browse repository at this point
Commits on Oct 29, 2024
JS: Add initial `file` threat-model support
Show description for 2b6c27e
RasmusWL
committed
2b6c27e
View commit details
Copy full SHA for 2b6c27e
View code at this point
Browse repository at this point
JS: Add `database` threat-model source modeling
RasmusWL
committed
3656864
View commit details
Copy full SHA for 3656864
View code at this point
Browse repository at this point
JS: Expand attribute regex to include some Vue attributes
asgerf
committed
3cc6b11
View commit details
Copy full SHA for 3cc6b11
View code at this point
Browse repository at this point
JS: Add test with some special Vue attributes
asgerf
committed
560b3da
View commit details
Copy full SHA for 560b3da
View code at this point
Browse repository at this point
Commits on Oct 25, 2024
JS: Model newer `yargs` command-line parsing pattern
RasmusWL
committed
d3ae4c9
View commit details
Copy full SHA for d3ae4c9
View code at this point
Browse repository at this point
JS: Consolidate command-line argument modeling
Show description for 3448751
RasmusWL
committed
3448751
View commit details
Copy full SHA for 3448751
View code at this point
Browse repository at this point
JS: Add `environment` threat-model source
RasmusWL
committed
412e841
View commit details
Copy full SHA for 412e841
View code at this point
Browse repository at this point
JS: Remove 'response' from default threat-models
Show description for dbfbd2c
RasmusWL
committed
dbfbd2c
View commit details
Copy full SHA for dbfbd2c
View code at this point
Browse repository at this point
JS: Add test showing default active threat-models
RasmusWL
committed
05dce8a
View commit details
Copy full SHA for 05dce8a
View code at this point
Browse repository at this point
Commits on Oct 4, 2024
JS: Update expected test output
hvitved
committed
d0ca39f
View commit details
Copy full SHA for d0ca39f
View code at this point
Browse repository at this point
Commits on Sep 11, 2024
Adds test for arbitrary specifiers in TS files
Show description for 3516117
sidshank
committed
3516117
View commit details
Copy full SHA for 3516117
View code at this point
Browse repository at this point
Renames test file
sidshank
committed
785af12
View commit details
Copy full SHA for 785af12
View code at this point
Browse repository at this point
Commits on Aug 6, 2024
support arbitary export specifiers
erik-krogh
committed
b8187ed
View commit details
Copy full SHA for b8187ed
View code at this point
Browse repository at this point
support arbitary import specifiers
erik-krogh
committed
5f7f37f
View commit details
Copy full SHA for 5f7f37f
View code at this point
Browse repository at this point
Commits on Jun 20, 2024
add test for the better type-narrowing in TS 5.5
erik-krogh
committed
0de4fd8
View commit details
Copy full SHA for 0de4fd8
View code at this point
Browse repository at this point
add test for the inferred type predicates in TS5.5
erik-krogh
committed
a691ec0
View commit details
Copy full SHA for a691ec0
View code at this point
Browse repository at this point
Commits on Jun 14, 2024
JS: Support spread arguments in `array.splice`
RasmusWL
committed
3f2befc
View commit details
Copy full SHA for 3f2befc
View code at this point
Browse repository at this point
JS: Add `splice(...arr)` test
RasmusWL
committed
269f8ca
View commit details
Copy full SHA for 269f8ca
View code at this point
Browse repository at this point
JS: Prepare for new test
RasmusWL
committed
68ccec3
View commit details
Copy full SHA for 68ccec3
View code at this point
Browse repository at this point
JS: Updated `.expected`
RasmusWL
committed
194ef60
View commit details
Copy full SHA for 194ef60
View code at this point
Browse repository at this point
Commits on Jun 12, 2024
JS: Provide better model for `Array.splice`
RasmusWL
committed
ec18786
View commit details
Copy full SHA for ec18786
View code at this point
Browse repository at this point
JS: Add new test for Array.splice
RasmusWL
committed
54a0e6d
View commit details
Copy full SHA for 54a0e6d
View code at this point
Browse repository at this point
JS: prepare to extend Array tests
Show description for 9ed6da1
RasmusWL
committed
9ed6da1
View commit details
Copy full SHA for 9ed6da1
View code at this point
Browse repository at this point
Commits on May 21, 2024
JS: Add isTypeUsed to avoid overpruning
asgerf
committed
6f19fc2
View commit details
Copy full SHA for 6f19fc2
View code at this point
Browse repository at this point
JS: Add failing test due to overpruning
asgerf
committed
632cce2
View commit details
Copy full SHA for 632cce2
View code at this point
Browse repository at this point
Commits on May 17, 2024
Merge pull request #14291 from am0o0/amammad-js-CodeInjection_Shelljs
Show description for 03cf9b7
erik-krogh
authored
03cf9b7
View commit details
Copy full SHA for 03cf9b7
View code at this point
Browse repository at this point
Commits on Apr 23, 2024
JS: Allow generated models to use (package)
asgerf
committed
db07c16
View commit details
Copy full SHA for db07c16
View code at this point
Browse repository at this point
Update ModelGeneration.expected
asgerf
committed
9d00f66
View commit details
Copy full SHA for 9d00f66
View code at this point
Browse repository at this point
Commits on Apr 19, 2024
Merge pull request #16241 from asgerf/js/re-export
Show description for ac34b92
asgerf
authored
ac34b92
View commit details
Copy full SHA for ac34b92
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.