Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
995
Pull requests
447
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
python
ql
test
query-tests
on
refs/heads/codeql-cli-2.25.3
User selector
All users
All time
Commit history
Commits on Apr 7, 2026
Python: Also exclude class scope
Show description for e368844
tausbn
committed
e368844
View commit details
Copy full SHA for e368844
View code at this point
Browse repository at this point
Merge pull request #21590 from github/tausbn/python-improve-bind-all-interfaces-query
Show description for 16683ae
tausbn
authored
16683ae
View commit details
Copy full SHA for 16683ae
View code at this point
Browse repository at this point
Commits on Mar 27, 2026
Python: Move isNetworkBind check into isSink
tausbn
committed
187f7c7
View commit details
Copy full SHA for 187f7c7
View code at this point
Browse repository at this point
Python: Exclude `AF_UNIX` sockets from BindToAllInterfaces
Show description for 4f74d42
tausbn
committed
4f74d42
View commit details
Copy full SHA for 4f74d42
View code at this point
Browse repository at this point
Python: Port ShouldUseWithStatement.ql
Show description for 47d2463
tausbn
committed
47d2463
View commit details
Copy full SHA for 47d2463
View code at this point
Browse repository at this point
Commits on Mar 26, 2026
Python: Convert BindToAllInterfaces to path-problem
Show description for c9832c3
tausbn
committed
c9832c3
View commit details
Copy full SHA for c9832c3
View code at this point
Browse repository at this point
Python: Replace type tracking with global data-flow
Show description for c439fc5
tausbn
committed
c439fc5
View commit details
Copy full SHA for c439fc5
View code at this point
Browse repository at this point
Python: Add test cases for BindToAllInterfaces FNs
Show description for 1ecd9e8
tausbn
committed
1ecd9e8
View commit details
Copy full SHA for 1ecd9e8
View code at this point
Browse repository at this point
Python: Convert BindToAllInterfaces test to inline expectations
tausbn
committed
824d004
View commit details
Copy full SHA for 824d004
View code at this point
Browse repository at this point
Commits on Mar 20, 2026
Python: Port DeprecatedSliceMethod.ql
Show description for 3584ad1
tausbn
committed
3584ad1
View commit details
Copy full SHA for 3584ad1
View code at this point
Browse repository at this point
Python: Port ShouldBeContextManager.ql
Show description for 283231b
tausbn
committed
283231b
View commit details
Copy full SHA for 283231b
View code at this point
Browse repository at this point
Commits on Mar 4, 2026
py: Inline expectation should have space before $
owen-mc
committed
91b6801
View commit details
Copy full SHA for 91b6801
View code at this point
Browse repository at this point
python: Inline expectation should have space after $
Show description for 5a97348
owen-mc
committed
5a97348
View commit details
Copy full SHA for 5a97348
View code at this point
Browse repository at this point
Commits on Feb 12, 2026
Pretty print for tests.
bdrodes
committed
4d4e7a1
View commit details
Copy full SHA for 4d4e7a1
View code at this point
Browse repository at this point
Commits on Feb 10, 2026
Update expected files. Copilot suggestions broke unit test expected results (column numbers).
bdrodes
committed
9f9c353
View commit details
Copy full SHA for 9f9c353
View code at this point
Browse repository at this point
More copilot suggestions.
bdrodes
committed
4bb110b
View commit details
Copy full SHA for 4bb110b
View code at this point
Browse repository at this point
Applying copilot PR suggestions.
bdrodes
committed
a91cf6b
View commit details
Copy full SHA for a91cf6b
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_path_validation.py
Show description for 9f8ed71
bdrodes
and
Copilot
authored
9f8ed71
View commit details
Copy full SHA for 9f8ed71
View code at this point
Browse repository at this point
Commits on Feb 6, 2026
Removing commented out test cases.
bdrodes
committed
f6c302b
View commit details
Copy full SHA for f6c302b
View code at this point
Browse repository at this point
Updating test case expected alerts.
bdrodes
committed
97f19d0
View commit details
Copy full SHA for 97f19d0
View code at this point
Browse repository at this point
Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fu…
Show description for 97ddab0
bdrodes
committed
97ddab0
View commit details
Copy full SHA for 97ddab0
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
Show description for 08b72d0
bdrodes
and
Copilot
committed
08b72d0
View commit details
Copy full SHA for 08b72d0
View code at this point
Browse repository at this point
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
Show description for 46a2a24
bdrodes
and
Copilot
committed
46a2a24
View commit details
Copy full SHA for 46a2a24
View code at this point
Browse repository at this point
Adding azure sdk test cases and updated test expected file.
bdrodes
committed
9912aaa
View commit details
Copy full SHA for 9912aaa
View code at this point
Browse repository at this point
Commits on Feb 4, 2026
Python: Altering SSRF MaD to use 'request-forgery' tag. Update to test cases expected results, off by one line. Changed to using ModelOutput::sinkNode.
bdrodes
committed
0a88425
View commit details
Copy full SHA for 0a88425
View code at this point
Browse repository at this point
Commits on Feb 2, 2026
Merge branch 'main' into azure_python_sdk_url_summary_upstream
bdrodes
authored
7ddfa80
View commit details
Copy full SHA for 7ddfa80
View code at this point
Browse repository at this point
Commits on Jan 30, 2026
Pretty print model numbers in tests
owen-mc
committed
ad6f800
View commit details
Copy full SHA for ad6f800
View code at this point
Browse repository at this point
Commits on Jan 22, 2026
python: add machinery for MaD barriers
Show description for 3dbfb9f
yoff
committed
3dbfb9f
View commit details
Copy full SHA for 3dbfb9f
View code at this point
Browse repository at this point
python: remove barrier that can be expressed in MaD
yoff
committed
699ed50
View commit details
Copy full SHA for 699ed50
View code at this point
Browse repository at this point
Commits on Dec 5, 2025
Merge pull request #20739 from github/tausbn/python-remove-top-level-points-to-imports
Show description for 1b51938
tausbn
authored
1b51938
View commit details
Copy full SHA for 1b51938
View code at this point
Browse repository at this point
Commits on Nov 26, 2025
Python: Fix all metrics-related compilation failures
Show description for 24a29f4
tausbn
committed
24a29f4
View commit details
Copy full SHA for 24a29f4
View code at this point
Browse repository at this point
python: model `urllib.ParseResult`
yoff
committed
ebe29dd
View commit details
Copy full SHA for ebe29dd
View code at this point
Browse repository at this point
python: add test for header injection
yoff
committed
d59f721
View commit details
Copy full SHA for d59f721
View code at this point
Browse repository at this point
Commits on Oct 24, 2025
Merge pull request #20494 from joefarebrother/python-insecure-cookie-split
Show description for 8c277bd
joefarebrother
authored
8c277bd
View commit details
Copy full SHA for 8c277bd
View code at this point
Browse repository at this point
Commits on Sep 30, 2025
Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_azure_client.py
Show description for d790c6d
bdrodes
and
Copilot
authored
d790c6d
View commit details
Copy full SHA for d790c6d
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.