Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.2k
Code
Issues
1k
Pull requests
478
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
cpp
ql
test
on
codeql-cli/latest
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 16, 2026
C++: Remove inline expectation comment from included file
hvitved
committed
7c8d3af
View commit details
Copy full SHA for 7c8d3af
View code at this point
Browse repository at this point
Merge pull request #22532 from MathiasVP/flow-through-forwards-using-callbacks-3
Show description for f920aef
MathiasVP
authored
f920aef
View commit details
Copy full SHA for f920aef
View code at this point
Browse repository at this point
Merge branch 'main' into flow-through-forwards-using-callbacks-3
MathiasVP
committed
18affcd
View commit details
Copy full SHA for 18affcd
View code at this point
Browse repository at this point
C++: Accept test changes.
MathiasVP
committed
f00b553
View commit details
Copy full SHA for f00b553
View code at this point
Browse repository at this point
C++: Add a testcase with forwarding without a constructor.
MathiasVP
committed
d9331e9
View commit details
Copy full SHA for d9331e9
View code at this point
Browse repository at this point
C++: Add a testcase that uses type parameters in the function name for forwarding.
MathiasVP
committed
8149caa
View commit details
Copy full SHA for 8149caa
View code at this point
Browse repository at this point
C++: Add a testcase that uses a hardcoded constructed type.
MathiasVP
committed
dcda06a
View commit details
Copy full SHA for dcda06a
View code at this point
Browse repository at this point
Commits on Sep 15, 2026
C++: Accept test changes.
MathiasVP
committed
fd9c8ca
View commit details
Copy full SHA for fd9c8ca
View code at this point
Browse repository at this point
C++: Add a test with invalid IR.
MathiasVP
committed
c00a114
View commit details
Copy full SHA for c00a114
View code at this point
Browse repository at this point
Commits on Sep 14, 2026
Merge pull request #22336 from theinfosecguy/cpp-ambiguous-assignment-condition
Show description for 4a19c87
geoffw0
authored
4a19c87
View commit details
Copy full SHA for 4a19c87
View code at this point
Browse repository at this point
Commits on Sep 11, 2026
test(cpp): fix protobuf model CI failures
Show description for d293e87
kumarak
committed
d293e87
View commit details
Copy full SHA for d293e87
View code at this point
Browse repository at this point
Commits on Sep 9, 2026
test(cpp): add sink-based protobuf model tests and trim comments
Show description for d603cdd
kumarak
committed
d603cdd
View commit details
Copy full SHA for d603cdd
View code at this point
Browse repository at this point
fix(cpp): correct protobuf string parse models and expand test coverage
kumarak
committed
d84a302
View commit details
Copy full SHA for d84a302
View code at this point
Browse repository at this point
cpp: model Protocol Buffers parse/serialize taint flow
Show description for 9c85aab
kumarak
committed
9c85aab
View commit details
Copy full SHA for 9c85aab
View code at this point
Browse repository at this point
C++: Fix FP by ensuring that the targeted constructor has at least as many parameters as the number of forwarded arguments.
MathiasVP
committed
246c486
View commit details
Copy full SHA for 246c486
View code at this point
Browse repository at this point
C++: Add false positive from lack of overload handling.
MathiasVP
committed
cca9f3f
View commit details
Copy full SHA for cca9f3f
View code at this point
Browse repository at this point
C++: Accept test changes.
MathiasVP
committed
4f2fc96
View commit details
Copy full SHA for 4f2fc96
View code at this point
Browse repository at this point
C++: Add tests with missing flow.
Show description for 1b41bae
MathiasVP
committed
1b41bae
View commit details
Copy full SHA for 1b41bae
View code at this point
Browse repository at this point
Commits on Sep 8, 2026
C++: Also add taint from the service argument.
MathiasVP
committed
ae6fb33
View commit details
Copy full SHA for ae6fb33
View code at this point
Browse repository at this point
C++: Accept test changes.
MathiasVP
committed
79d7ef2
View commit details
Copy full SHA for 79d7ef2
View code at this point
Browse repository at this point
C++: Add tests with missing flow.
MathiasVP
committed
75837fc
View commit details
Copy full SHA for 75837fc
View code at this point
Browse repository at this point
Commits on Sep 4, 2026
C++: Fix test I broke by accident
jketema
committed
b42f997
View commit details
Copy full SHA for b42f997
View code at this point
Browse repository at this point
Merge pull request #22455 from trail-of-forks/kumarak/cpp-bdlbb-blob-models
Show description for 4c14393
jketema
authored
4c14393
View commit details
Copy full SHA for 4c14393
View code at this point
Browse repository at this point
Commits on Sep 3, 2026
fix(cpp): model bdlbb::BlobBuffer::buffer and trim model comments
Show description for 9559357
kumarak
committed
9559357
View commit details
Copy full SHA for 9559357
View code at this point
Browse repository at this point
Commits on Sep 1, 2026
FlowSummaryImpl: Model more source/sink steps as jump steps
hvitved
committed
6608984
View commit details
Copy full SHA for 6608984
View code at this point
Browse repository at this point
Commits on Aug 31, 2026
Merge pull request #22449 from trail-of-forks/kumarak/cpp-libpq-sql-sinks
Show description for ce0e2ad
jketema
authored
ce0e2ad
View commit details
Copy full SHA for ce0e2ad
View code at this point
Browse repository at this point
C++: Improve test stability when models are added
Show description for 13ecf2e
jketema
committed
13ecf2e
View commit details
Copy full SHA for 13ecf2e
View code at this point
Browse repository at this point
Commits on Aug 30, 2026
cpp: model BDE bdlbb::Blob byte-buffer taint flow
Show description for 8701ce9
kumarak
committed
8701ce9
View commit details
Copy full SHA for 8701ce9
View code at this point
Browse repository at this point
cpp: address review feedback on libpq SQL-injection sinks
Show description for 4796ff4
kumarak
committed
4796ff4
View commit details
Copy full SHA for 4796ff4
View code at this point
Browse repository at this point
Commits on Aug 28, 2026
Potential fix for pull request finding
Show description for 2fe9ff3
MathiasVP
and
Copilot
authored
2fe9ff3
View commit details
Copy full SHA for 2fe9ff3
View code at this point
Browse repository at this point
C++: Exclude compiler generated variables from a case in 'cpp/leap-year/unsafe-array-for-days-of-the-year'.
MathiasVP
committed
fcfdf81
View commit details
Copy full SHA for fcfdf81
View code at this point
Browse repository at this point
C++: Add a crazy false positive from a Microsoft internal issue.
MathiasVP
committed
f0de9c3
View commit details
Copy full SHA for f0de9c3
View code at this point
Browse repository at this point
Commits on Aug 27, 2026
cpp: model libpq query functions as SQL-injection sinks
Show description for 4623819
kumarak
committed
4623819
View commit details
Copy full SHA for 4623819
View code at this point
Browse repository at this point
Commits on Aug 25, 2026
Merge branch 'main' into cpp-ambiguous-assignment-condition
geoffw0
authored
7917e14
View commit details
Copy full SHA for 7917e14
View code at this point
Browse repository at this point
Commits on Aug 24, 2026
Merge branch 'main' into cpp-access-paths-for-sources-and-sinks-3
MathiasVP
committed
86f7ccf
View commit details
Copy full SHA for 86f7ccf
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.
