Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
445
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Branch selector
codeql-cli/v2.26.1
User selector
All users
All time
Commit history
Commits on Jul 9, 2026
Merge pull request #22151 from github/release-prep/2.26.1
Show description for 373814b
oscarsj
authored
373814b
View commit details
Copy full SHA for 373814b
Browse repository at this point
Release preparation for version 2.26.1
github-actions[bot]
committed
9acbbb8
View commit details
Copy full SHA for 9acbbb8
Browse repository at this point
Merge pull request #22149 from jketema/jketema/cwe-114-tag
Show description for 161c8c4
jketema
authored
161c8c4
View commit details
Copy full SHA for 161c8c4
Browse repository at this point
C++: Add CWE 73 and CWE 78 tags to `cpp/uncontrolled-process-operation`
Show description for 72efb6a
jketema
committed
72efb6a
View commit details
Copy full SHA for 72efb6a
Browse repository at this point
C#: Add CWE-73 tag to `cs/assembly-path-injection`
Show description for 66fea69
jketema
committed
66fea69
View commit details
Copy full SHA for 66fea69
Browse repository at this point
C#: Remove misplaced change note
Show description for 2ae79d0
jketema
committed
2ae79d0
View commit details
Copy full SHA for 2ae79d0
Browse repository at this point
Merge pull request #22147 from github/codeql-spark-run-29025431896
Show description for 747aa45
coadaflorin
authored
747aa45
View commit details
Copy full SHA for 747aa45
Browse repository at this point
Merge pull request #22136 from github/tausbn/yeast-translate-with-context
Show description for 989154a
tausbn
authored
989154a
View commit details
Copy full SHA for 989154a
Browse repository at this point
update codeql documentation
github-actions[bot]
committed
36d0ceb
View commit details
Copy full SHA for 36d0ceb
Browse repository at this point
Merge pull request #22130 from github/jacknojo/apache_poi_mads
Show description for d5712ef
jacknojo
authored
d5712ef
View commit details
Copy full SHA for d5712ef
Browse repository at this point
Merge pull request #22141 from github/dependabot/go_modules/go/extractor/extractor-dependencies-017d72eac4
Show description for a238aee
owen-mc
authored
a238aee
View commit details
Copy full SHA for a238aee
Browse repository at this point
Bump golang.org/x/mod
Show description for 6da42a2
dependabot[bot]
authored
6da42a2
View commit details
Copy full SHA for 6da42a2
Browse repository at this point
Commits on Jul 8, 2026
Merge pull request #22114 from hvitved/type-inference-join
Show description for f4773e9
hvitved
authored
f4773e9
View commit details
Copy full SHA for f4773e9
Browse repository at this point
Merge pull request #22139 from github/codeql-spark-run-28955698948
Show description for 11be079
coadaflorin
authored
11be079
View commit details
Copy full SHA for 11be079
Browse repository at this point
update codeql documentation
github-actions[bot]
committed
47ea9b4
View commit details
Copy full SHA for 47ea9b4
Browse repository at this point
yeast: Fix typo
Show description for 33da3ef
tausbn
and
jketema
authored
33da3ef
View commit details
Copy full SHA for 33da3ef
Browse repository at this point
Merge pull request #22123 from owen-mc/csharp/convert-qlref-tests-to-inline-expectations
Show description for 25cd352
owen-mc
authored
25cd352
View commit details
Copy full SHA for 25cd352
Browse repository at this point
Merge pull request #22005 from github/dependabot/pip/misc/codegen/pip-02f7ad5a4b
Show description for 8bb12d1
geoffw0
authored
8bb12d1
View commit details
Copy full SHA for 8bb12d1
Browse repository at this point
Address review comment
hvitved
committed
15c7428
View commit details
Copy full SHA for 15c7428
Browse repository at this point
Remove comments "// BAD: but flagged by cs/constant-condition"
owen-mc
committed
aba008d
View commit details
Copy full SHA for aba008d
Browse repository at this point
Also run cs/constant-condition on test for cs/comparison-of-identical-expressions
owen-mc
committed
7b96f66
View commit details
Copy full SHA for 7b96f66
Browse repository at this point
yeast: Use clone-and-drop for per-rule context isolation
Show description for 9b7a9c3
tausbn
committed
9b7a9c3
View commit details
Copy full SHA for 9b7a9c3
Browse repository at this point
yeast: Add BuildCtx::scoped for isolated context modification
Show description for 13510b1
tausbn
committed
13510b1
View commit details
Copy full SHA for 13510b1
Browse repository at this point
yeast: Implement IntoIterator for Id as a singleton
Show description for 8272848
tausbn
committed
8272848
View commit details
Copy full SHA for 8272848
Browse repository at this point
Merge pull request #22120 from asgerf/unified/local-scoping
Show description for 3c3f740
tausbn
authored
3c3f740
View commit details
Copy full SHA for 3c3f740
Browse repository at this point
Apply suggestions from code review
Show description for 85d800f
owen-mc
and
geoffw0
authored
85d800f
View commit details
Copy full SHA for 85d800f
Browse repository at this point
Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization
Show description for 134e302
owen-mc
authored
134e302
View commit details
Copy full SHA for 134e302
Browse repository at this point
Merge pull request #22127 from owen-mc/cpp/convert-qlref-inline-expectations
Show description for a16e19a
owen-mc
authored
a16e19a
View commit details
Copy full SHA for a16e19a
Browse repository at this point
Merge pull request #22134 from github/workflow/coverage/update
Show description for 69ed2da
owen-mc
authored
69ed2da
View commit details
Copy full SHA for 69ed2da
Browse repository at this point
Remove `main` entries
jacknojo
committed
6c7b9f7
View commit details
Copy full SHA for 6c7b9f7
Browse repository at this point
Add changed framework coverage reports
github-actions[bot]
committed
bc966f6
View commit details
Copy full SHA for bc966f6
Browse repository at this point
Commits on Jul 7, 2026
Revert inline expectations for blazor integration tests with BMN
owen-mc
committed
b6d588c
View commit details
Copy full SHA for b6d588c
Browse repository at this point
Accept updated .expected output
owen-mc
committed
5ba1fe3
View commit details
Copy full SHA for 5ba1fe3
Browse repository at this point
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
Show description for 8363d2d
owen-mc
authored
8363d2d
View commit details
Copy full SHA for 8363d2d
Browse repository at this point
Update java/ql/lib/change-notes/2026-06-30-spring-webclient-uri-ssrf.md
Show description for b8f8370
joshimar
and
owen-mc
authored
b8f8370
View commit details
Copy full SHA for b8f8370
Browse repository at this point
Previous
Next
You can’t perform that action at this time.