Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
448
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
semmle
code
java
security
on
codeql-cli/v2.26.2
User selector
All users
All time
Commit history
Commits on Jul 13, 2026
Address review comment
owen-mc
committed
2d00958
View commit details
Copy full SHA for 2d00958
View code at this point
Browse repository at this point
Commits on Jul 11, 2026
Fix path sanitizer
owen-mc
committed
6057b4b
View commit details
Copy full SHA for 6057b4b
View code at this point
Browse repository at this point
Commits on Jul 7, 2026
Refactor creating barriers with annotations
owen-mc
committed
a812e4a
View commit details
Copy full SHA for a812e4a
View code at this point
Browse repository at this point
Commits on Jul 3, 2026
Fix @Pattern sanitizer for TaintedPath
owen-mc
committed
76b4f4f
View commit details
Copy full SHA for 76b4f4f
View code at this point
Browse repository at this point
Commits on Jun 15, 2026
Java: Fix performance issue in type flow library
hvitved
committed
651770b
View commit details
Copy full SHA for 651770b
View code at this point
Browse repository at this point
Commits on May 7, 2026
Fix QL formatting
owen-mc
authored
f9240e7
View commit details
Copy full SHA for f9240e7
View code at this point
Browse repository at this point
Commits on May 4, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
4673941
View commit details
Copy full SHA for 4673941
View code at this point
Browse repository at this point
Merge pull request #21781 from aschackmull/java/rm-deprecated
Show description for f663ecc
aschackmull
authored
f663ecc
View commit details
Copy full SHA for f663ecc
View code at this point
Browse repository at this point
Java: Delete old deprecated code.
aschackmull
committed
17fded4
View commit details
Copy full SHA for 17fded4
View code at this point
Browse repository at this point
Commits on May 1, 2026
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
bafa892
View commit details
Copy full SHA for bafa892
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer
Show description for 87c35e6
owen-mc
authored
87c35e6
View commit details
Copy full SHA for 87c35e6
View code at this point
Browse repository at this point
Address review comments on path-injection[read] sub-kind
Show description for 936f0c6
MarkLee131
committed
936f0c6
View commit details
Copy full SHA for 936f0c6
View code at this point
Browse repository at this point
Merge branch 'main' into fix/path-injection-read-subkind
MarkLee131
authored
90741b1
View commit details
Copy full SHA for 90741b1
View code at this point
Browse repository at this point
Commits on Apr 29, 2026
Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer
Show description for 28a6ff2
MarkLee131
committed
28a6ff2
View commit details
Copy full SHA for 28a6ff2
View code at this point
Browse repository at this point
Java: move EncryptedSensitiveMethodCall into Sanitizers.qll
Show description for 51e2a54
MarkLee131
committed
51e2a54
View commit details
Copy full SHA for 51e2a54
View code at this point
Browse repository at this point
Merge branch 'main' into fix/trust-boundary-regexp-barrier
MarkLee131
authored
49d014c
View commit details
Copy full SHA for 49d014c
View code at this point
Browse repository at this point
Java: refactor trust-boundary sanitizers into TrustBoundaryValidationSanitizer subclasses
Show description for d27ee86
MarkLee131
committed
d27ee86
View commit details
Copy full SHA for d27ee86
View code at this point
Browse repository at this point
Commits on Apr 23, 2026
Merge branch 'main' into fix/path-injection-torealpath
owen-mc
authored
9f19791
View commit details
Copy full SHA for 9f19791
View code at this point
Browse repository at this point
Commits on Apr 21, 2026
Merge branch 'main' into fix/trust-boundary-regexp-barrier
MarkLee131
authored
af794ed
View commit details
Copy full SHA for af794ed
View code at this point
Browse repository at this point
Merge branch 'github:main' into fix/path-injection-read-subkind
MarkLee131
authored
07e97e2
View commit details
Copy full SHA for 07e97e2
View code at this point
Browse repository at this point
Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex
Show description for c91b5b3
owen-mc
authored
c91b5b3
View commit details
Copy full SHA for c91b5b3
View code at this point
Browse repository at this point
Commits on Apr 20, 2026
Java: split read-only path sinks into path-injection[read]
Show description for c336a15
MarkLee131
committed
c336a15
View commit details
Copy full SHA for c336a15
View code at this point
Browse repository at this point
Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal
Show description for 9f310c2
owen-mc
authored
9f310c2
View commit details
Copy full SHA for 9f310c2
View code at this point
Browse repository at this point
Use set literal for getCommonSensitiveInfoFPRegex
Show description for 92d205d
MarkLee131
committed
92d205d
View commit details
Copy full SHA for 92d205d
View code at this point
Browse repository at this point
Commits on Apr 19, 2026
Fix bug so `+= File.separator` is recognized
owen-mc
committed
6d4a397
View commit details
Copy full SHA for 6d4a397
View code at this point
Browse repository at this point
Commits on Apr 17, 2026
Address review: inline Woodstox into XmlParsers, move changelog to lib
Salah Baddou
authored and
chmodxxx
committed
fb2d53e
View commit details
Copy full SHA for fb2d53e
View code at this point
Browse repository at this point
Java: Add XXE sink model for Woodstox WstxInputFactory
Show description for f5131f9
Salah Baddou
authored and
chmodxxx
committed
f5131f9
View commit details
Copy full SHA for f5131f9
View code at this point
Browse repository at this point
Commits on Apr 4, 2026
Remove secretQuestion from FP exclusion list
Show description for 46ef020
MarkLee131
committed
46ef020
View commit details
Copy full SHA for 46ef020
View code at this point
Browse repository at this point
Java: add RegexpCheckBarrier to trust-boundary-violation sanitizers
Show description for 345b842
MarkLee131
committed
345b842
View commit details
Copy full SHA for 345b842
View code at this point
Browse repository at this point
Java: treat hash/encrypt/digest methods as sensitive-log sanitizers
Show description for f338ded
MarkLee131
committed
f338ded
View commit details
Copy full SHA for f338ded
View code at this point
Browse repository at this point
Java: reduce false positives in sensitive-log by expanding FP exclusion regex
Show description for 20cfe29
MarkLee131
committed
20cfe29
View commit details
Copy full SHA for 20cfe29
View code at this point
Browse repository at this point
Java: recognize Path.toRealPath() as path normalization sanitizer
Show description for 9ff4ed2
MarkLee131
committed
9ff4ed2
View commit details
Copy full SHA for 9ff4ed2
View code at this point
Browse repository at this point
Commits on Mar 29, 2026
Address review: update QLDoc comment and fix expected test output
Show description for e6adfbc
MarkLee131
committed
e6adfbc
View commit details
Copy full SHA for e6adfbc
View code at this point
Browse repository at this point
Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier
MarkLee131
authored
938039d
View commit details
Copy full SHA for 938039d
View code at this point
Browse repository at this point
Commits on Mar 28, 2026
Exclude bounds-check arithmetic from tainted-arithmetic sinks
Show description for 0c5e89a
MarkLee131
committed
0c5e89a
View commit details
Copy full SHA for 0c5e89a
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
