Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
9.9k
Code
Issues
995
Pull requests
445
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
lib
on
refs/heads/codeql-cli-2.25.4
User selector
All users
All time
Commit history
Commits on May 5, 2026
Release preparation for version 2.25.4
github-actions[bot]
committed
88e1d86
View commit details
Copy full SHA for 88e1d86
View code at this point
Browse repository at this point
Commits on May 4, 2026
Merge pull request #21781 from aschackmull/java/rm-deprecated
Show description for f663ecc
aschackmull
authored
f663ecc
View commit details
Copy full SHA for f663ecc
View code at this point
Browse repository at this point
Java: Delete old deprecated code.
aschackmull
committed
17fded4
View commit details
Copy full SHA for 17fded4
View code at this point
Browse repository at this point
Commits on Apr 30, 2026
Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer
Show description for 87c35e6
owen-mc
authored
87c35e6
View commit details
Copy full SHA for 87c35e6
View code at this point
Browse repository at this point
Merge pull request #21759 from hvitved/csharp/cfg-params
Show description for a473fdb
hvitved
authored
a473fdb
View commit details
Copy full SHA for a473fdb
View code at this point
Browse repository at this point
Commits on Apr 29, 2026
Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer
Show description for 28a6ff2
MarkLee131
committed
28a6ff2
View commit details
Copy full SHA for 28a6ff2
View code at this point
Browse repository at this point
Java: move EncryptedSensitiveMethodCall into Sanitizers.qll
Show description for 51e2a54
MarkLee131
committed
51e2a54
View commit details
Copy full SHA for 51e2a54
View code at this point
Browse repository at this point
Merge branch 'main' into fix/trust-boundary-regexp-barrier
MarkLee131
authored
49d014c
View commit details
Copy full SHA for 49d014c
View code at this point
Browse repository at this point
Java: refactor trust-boundary sanitizers into TrustBoundaryValidationSanitizer subclasses
Show description for d27ee86
MarkLee131
committed
d27ee86
View commit details
Copy full SHA for d27ee86
View code at this point
Browse repository at this point
Java: Adapt to changes in shared CFG library
hvitved
committed
99b5cec
View commit details
Copy full SHA for 99b5cec
View code at this point
Browse repository at this point
Commits on Apr 24, 2026
Move generated MaDs for Java into modelgenerator/
jacknojo
committed
6ec2509
View commit details
Copy full SHA for 6ec2509
View code at this point
Browse repository at this point
Merge pull request #21749 from github/copilot/add-hibernate-sql-injection-tests
Show description for 9fbe447
owen-mc
authored
9fbe447
View commit details
Copy full SHA for 9fbe447
View code at this point
Browse repository at this point
Commits on Apr 23, 2026
Add Java change note for Hibernate sinks
Show description for 083909e
Copilot
and
owen-mc
authored
083909e
View commit details
Copy full SHA for 083909e
View code at this point
Browse repository at this point
Model additional Hibernate query sinks
Show description for 25d232b
Copilot
and
owen-mc
authored
25d232b
View commit details
Copy full SHA for 25d232b
View code at this point
Browse repository at this point
Merge pull request #21743 from hvitved/cfg/body-parts
Show description for eee5b06
hvitved
authored
eee5b06
View commit details
Copy full SHA for eee5b06
View code at this point
Browse repository at this point
Merge branch 'main' into fix/path-injection-torealpath
owen-mc
authored
9f19791
View commit details
Copy full SHA for 9f19791
View code at this point
Browse repository at this point
Commits on Apr 22, 2026
Java: Adapt to changes in CFG library
hvitved
committed
6ebf4ee
View commit details
Copy full SHA for 6ebf4ee
View code at this point
Browse repository at this point
Commits on Apr 21, 2026
Merge pull request #21565 from aschackmull/csharp/cfg2
Show description for f912731
aschackmull
authored
f912731
View commit details
Copy full SHA for f912731
View code at this point
Browse repository at this point
Merge branch 'main' into fix/trust-boundary-regexp-barrier
MarkLee131
authored
af794ed
View commit details
Copy full SHA for af794ed
View code at this point
Browse repository at this point
Merge pull request #21523 from owen-mc/docs/mad/barriers
Show description for 6efb213
owen-mc
authored
6efb213
View commit details
Copy full SHA for 6efb213
View code at this point
Browse repository at this point
Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex
Show description for c91b5b3
owen-mc
authored
c91b5b3
View commit details
Copy full SHA for c91b5b3
View code at this point
Browse repository at this point
Merge pull request #21737 from github/post-release-prep/codeql-cli-2.25.3
Show description for 58e9bad
mbg
authored
58e9bad
View commit details
Copy full SHA for 58e9bad
View code at this point
Browse repository at this point
Commits on Apr 20, 2026
Post-release preparation for codeql-cli-2.25.3
github-actions[bot]
committed
a0bab53
View commit details
Copy full SHA for a0bab53
View code at this point
Browse repository at this point
Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal
Show description for 9f310c2
owen-mc
authored
9f310c2
View commit details
Copy full SHA for 9f310c2
View code at this point
Browse repository at this point
Release preparation for version 2.25.3
github-actions[bot]
committed
c861d99
View commit details
Copy full SHA for c861d99
View code at this point
Browse repository at this point
Use set literal for getCommonSensitiveInfoFPRegex
Show description for 92d205d
MarkLee131
committed
92d205d
View commit details
Copy full SHA for 92d205d
View code at this point
Browse repository at this point
Commits on Apr 19, 2026
Add change note
Show description for c6f641e
owen-mc
and
Copilot
committed
c6f641e
View commit details
Copy full SHA for c6f641e
View code at this point
Browse repository at this point
Fix bug so `+= File.separator` is recognized
owen-mc
committed
6d4a397
View commit details
Copy full SHA for 6d4a397
View code at this point
Browse repository at this point
Commits on Apr 17, 2026
Address review: inline Woodstox into XmlParsers, move changelog to lib
Salah Baddou
authored and
chmodxxx
committed
fb2d53e
View commit details
Copy full SHA for fb2d53e
View code at this point
Browse repository at this point
Java: Add XXE sink model for Woodstox WstxInputFactory
Show description for f5131f9
Salah Baddou
authored and
chmodxxx
committed
f5131f9
View commit details
Copy full SHA for f5131f9
View code at this point
Browse repository at this point
Commits on Apr 14, 2026
Fix link formatting in change notes
owen-mc
committed
8f17b73
View commit details
Copy full SHA for 8f17b73
View code at this point
Browse repository at this point
Add change notes
owen-mc
committed
c86ba38
View commit details
Copy full SHA for c86ba38
View code at this point
Browse repository at this point
Merge branch 'main' into post-release-prep/codeql-cli-2.25.2
henrymercer
authored
43c9b95
View commit details
Copy full SHA for 43c9b95
View code at this point
Browse repository at this point
Merge pull request #21584 from owen-mc/shared/update-mad-comments
Show description for 7458674
owen-mc
authored
7458674
View commit details
Copy full SHA for 7458674
View code at this point
Browse repository at this point
Commits on Apr 10, 2026
Cfg/Java: Move InstanceOfExpr CFG into shared lib.
aschackmull
committed
6ffed85
View commit details
Copy full SHA for 6ffed85
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
github-actions[bot]