Repository navigation

Issues

New issue

C#: Improve feed reachability logging.
Unread
#22774 opened Oct 7, 2026 · Updated Oct 7, 2026
2
C#: Data flow for property patterns.
Unread
#22757 opened Oct 6, 2026 · Updated Oct 7, 2026
2
SSA: Tolerate multiple variables being read at the same CFG node
Unread
#22744 opened Oct 2, 2026 · Updated Oct 6, 2026
6
C#: Recognize safe output encoding in cs/log-forging
Unread
#22737 opened Oct 2, 2026 · Updated Oct 7, 2026
18
Unified: captured variables
Unread
#22726 opened Oct 1, 2026 · Updated Oct 5, 2026Draft
2
C#: Introduce a TuplePatternExpr class.
Unread
#22648 opened Sep 22, 2026 · Updated Sep 24, 2026Draft
C#: Always strip implicit casts when getting value of expressions.
Unread
#22644 opened Sep 22, 2026 · Updated Sep 22, 2026Draft
Just: introduce common verbs
Unread
#22576 opened Sep 15, 2026 · Updated Sep 29, 2026
31
Shared: Match inline expectations on start line instead of end.
Unread
#22539 opened Sep 10, 2026 · Updated Sep 11, 2026Draft
1
[inline-learn lib] Support --learn for inline expectation tests
Unread
#22228 opened Jul 23, 2026 · Updated Sep 30, 2026
48
Support multi-tag column surgery and tag-generic learning in --learn inline expectations
Unread
#22208 opened Jul 16, 2026 · Updated Sep 29, 2026Draft
14
Support MISSING promotion and SPURIOUS clearing in --learn inline expectations
Unread
#22148 opened Jul 9, 2026 · Updated Sep 29, 2026Draft
Support --learn for inline expectations via learnEdits
Unread
#22140 opened Jul 8, 2026 · Updated Sep 29, 2026Draft
3
Add CWE-295 query for C# (accepting any TLS certificate)
Unread
#22019 with AI opened Jun 19, 2026 · Updated Jul 3, 2026Draft
4
Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389)
Unread
#21964 opened Jun 10, 2026 · Updated Sep 15, 2026
3
C#: Include user defined operator calls in UnaryOperations.
Unread
#21820 opened May 8, 2026 · Updated May 8, 2026Draft
C#: Reduce reliance on CFG nodes in DataFlow::Node.
Unread
#21491 opened Mar 17, 2026 · Updated Mar 18, 2026Draft
C#: Use /p:RestoreIgnoreFailedSources=true for dotnet restore
Unread
#21386 opened Feb 27, 2026 · Updated Mar 2, 2026
2
C#: Only use reachable feeds when private registries are configured
Unread
#21385 opened Feb 27, 2026 · Updated Apr 9, 2026Draft
12
Add 'View DFG' queries
Unread
#21384 opened Feb 27, 2026 · Updated Mar 2, 2026Draft
2
C#: Make a more principled fix in ConstantCondition.
Unread
#21272 opened Feb 5, 2026 · Updated Feb 5, 2026Draft
Shared (static): Always treat subtypes column as true
Unread
#21085 opened Jan 2, 2026 · Updated Jan 16, 2026Draft
1
False positive: "Missing function level access control" where public endpoint name contains "Edit"
github/codeql#21042 · opened on Dec 16, 2025
1
C#: Add osx-arm64 as a possible RID.
Unread
#20998 opened Dec 9, 2025 · Updated Dec 10, 2025Draft
False positive: Dereferenced variable may be null ignore NRT attributes
github/codeql#20828 · opened on Nov 12, 2025
2

Navigation Menu

Repository navigation

Issues

Issues

C#: Improve feed reachability logging.

C#: Data flow for property patterns.

SSA: Tolerate multiple variables being read at the same CFG node

C#: Recognize safe output encoding in cs/log-forging

Unified: captured variables

C#: Introduce a TuplePatternExpr class.

C#: Always strip implicit casts when getting value of expressions.

Just: introduce common verbs

Shared: Match inline expectations on start line instead of end.

[inline-learn lib] Support `--learn` for inline expectation tests

Support multi-tag column surgery and tag-generic learning in `--learn` inline expectations

Support MISSING promotion and SPURIOUS clearing in `--learn` inline expectations

Support `--learn` for inline expectations via `learnEdits`

Add CWE-295 query for C# (accepting any TLS certificate)

Add experimental C# query: SSRF host guard missing IPv6-transition unwrap (CWE-918/CWE-1389)

C#: Include user defined operator calls in UnaryOperations.

C#: Reduce reliance on CFG nodes in DataFlow::Node.

C#: Use `/p:RestoreIgnoreFailedSources=true` for `dotnet restore`

C#: Only use reachable feeds when private registries are configured

Add 'View DFG' queries

C#: Make a more principled fix in ConstantCondition.

Shared (static): Always treat `subtypes` column as true

False positive: "Missing function level access control" where public endpoint name contains "Edit"

C#: Add osx-arm64 as a possible RID.

False positive: Dereferenced variable may be null ignore NRT attributes