Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
luvandy
/
codeql
Public
forked from
github/codeql
Notifications
You must be signed in to change notification settings
Fork
0
Star
0
Code
Pull requests
0
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Pull requests
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
javascript
on
main
User selector
All users
All time
Commit history
Commits on May 27, 2025
Update javascript/ql/src/codeql-suites/javascript-security-and-quality.qls
Show description for 1f6b3ad
Napalys
and
michaelnebel
authored
1f6b3ad
View commit details
Copy full SHA for 1f6b3ad
View code at this point
Browse repository at this point
Commits on May 26, 2025
JS: Move query suite selector logic to `javascript-security-and-quality.qls`
Napalys
committed
37024ad
View commit details
Copy full SHA for 37024ad
View code at this point
Browse repository at this point
Commits on May 23, 2025
SSA: Distinguish between has and controls branch edge.
aschackmull
committed
1d30103
View commit details
Copy full SHA for 1d30103
View code at this point
Browse repository at this point
Commits on May 22, 2025
Merge pull request #19516 from asgerf/js/npm-package-name-join
Show description for 9202a1b
asgerf
authored
9202a1b
View commit details
Copy full SHA for 9202a1b
View code at this point
Browse repository at this point
Commits on May 19, 2025
JS: Update UnresolvableImports to handle nested packages
asgerf
committed
317e61d
View commit details
Copy full SHA for 317e61d
View code at this point
Browse repository at this point
JS: More efficient nested package naming
asgerf
committed
1e8a49f
View commit details
Copy full SHA for 1e8a49f
View code at this point
Browse repository at this point
Add change-notes.
michaelnebel
committed
dabeddb
View commit details
Copy full SHA for dabeddb
View code at this point
Browse repository at this point
Update integration tests expected output.
michaelnebel
committed
530025b
View commit details
Copy full SHA for 530025b
View code at this point
Browse repository at this point
Lower the precision of a range of harcoded password queries to remove them from query suites.
michaelnebel
committed
03ecd24
View commit details
Copy full SHA for 03ecd24
View code at this point
Browse repository at this point
Commits on May 16, 2025
Merge pull request #19356 from Napalys/js/merge_classes
Show description for f6a8909
Napalys
authored
f6a8909
View commit details
Copy full SHA for f6a8909
View code at this point
Browse repository at this point
Commits on May 13, 2025
Post-release preparation for codeql-cli-2.21.3
github-actions[bot]
committed
5f9dd75
View commit details
Copy full SHA for 5f9dd75
View code at this point
Browse repository at this point
Release preparation for version 2.21.3
github-actions[bot]
committed
2de4a01
View commit details
Copy full SHA for 2de4a01
View code at this point
Browse repository at this point
Merge pull request #19391 from asgerf/js/typescript-path-resolution
Show description for 169ae19
asgerf
authored
169ae19
View commit details
Copy full SHA for 169ae19
View code at this point
Browse repository at this point
Merge pull request #19445 from asgerf/js/summaries-with-fallback
Show description for aea676d
asgerf
authored
aea676d
View commit details
Copy full SHA for aea676d
View code at this point
Browse repository at this point
Commits on May 2, 2025
Merge pull request #19422 from Napalys/js/shelljs
Show description for d1e769b
Napalys
authored
d1e769b
View commit details
Copy full SHA for d1e769b
View code at this point
Browse repository at this point
Removed code duplication
Napalys
committed
30694c1
View commit details
Copy full SHA for 30694c1
View code at this point
Browse repository at this point
JS: Avoid duplication with constructor body
asgerf
authored and
Napalys
committed
b8be1bc
View commit details
Copy full SHA for b8be1bc
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll
Show description for 871e93d
Napalys
and
asgerf
authored
871e93d
View commit details
Copy full SHA for 871e93d
View code at this point
Browse repository at this point
JS: Explain use of monotonicAggregates
asgerf
committed
1f308ee
View commit details
Copy full SHA for 1f308ee
View code at this point
Browse repository at this point
JS: Add comment about 'path' heuristic
asgerf
committed
5c9218f
View commit details
Copy full SHA for 5c9218f
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for f3e0cfd
asgerf
and
erik-krogh
authored
f3e0cfd
View commit details
Copy full SHA for f3e0cfd
View code at this point
Browse repository at this point
JS: Benign test updates
asgerf
committed
16fc8c3
View commit details
Copy full SHA for 16fc8c3
View code at this point
Browse repository at this point
Merge pull request #19413 from tamasvajk/quality/query-suite-selector
Show description for cb1c373
tamasvajk
authored
cb1c373
View commit details
Copy full SHA for cb1c373
View code at this point
Browse repository at this point
Commits on May 1, 2025
Refactored merge `StandardClassNode` into `ClassNode`
Napalys
committed
c430a36
View commit details
Copy full SHA for c430a36
View code at this point
Browse repository at this point
JS: Generate summaries from summaryModel, and only generate steps as a fallback
asgerf
committed
a44bdf3
View commit details
Copy full SHA for a44bdf3
View code at this point
Browse repository at this point
JS: Move some code into ModelsAsData.qll
asgerf
committed
ca5f8b0
View commit details
Copy full SHA for ca5f8b0
View code at this point
Browse repository at this point
Merge pull request #19429 from owen-mc/fix-cwe-tags-missing-leading-zero
Show description for e054948
owen-mc
authored
e054948
View commit details
Copy full SHA for e054948
View code at this point
Browse repository at this point
Add change notes
owen-mc
committed
0863c87
View commit details
Copy full SHA for 0863c87
View code at this point
Browse repository at this point
Address comments
Napalys
committed
68a9dd9
View commit details
Copy full SHA for 68a9dd9
View code at this point
Browse repository at this point
Brought back `FunctionStyleClass` marked as `deprecated`
Napalys
committed
c7d764f
View commit details
Copy full SHA for c7d764f
View code at this point
Browse repository at this point
Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource
Napalys
committed
d4b5ef6
View commit details
Copy full SHA for d4b5ef6
View code at this point
Browse repository at this point
Added test cases for shelljs.env
Napalys
committed
33d8ffa
View commit details
Copy full SHA for 33d8ffa
View code at this point
Browse repository at this point
Added change note
Napalys
committed
602500e
View commit details
Copy full SHA for 602500e
View code at this point
Browse repository at this point
Added model for shelljs.env
Napalys
committed
40d176a
View commit details
Copy full SHA for 40d176a
View code at this point
Browse repository at this point
Fix class instance method detection in constructor receiver
Napalys
committed
9bab593
View commit details
Copy full SHA for 9bab593
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.