All pull requests

Pull requests

• Move shared C# assembly-info scripts to misc/bazel/csharp

  #22564·redsun82 opened Sep 15, 2026Contributor·

  ·
  3

• cpp: Model BDE Base64 and hex pointer-buffer conversions

  C++documentationexternal-contribution
  #22563·kumarak opened Sep 14, 2026Contributor·

  ·
  5

• Publish patched rules_dotnet as 0.21.5-codeql.2

  #22550·redsun82 opened Sep 11, 2026Contributor·

  ·
  3

• Pin GitHub Actions to commit SHAs

  QL-for-QL
  #22545·github-security-bot opened Sep 10, 2026·

  ·
  2

• Shared: Match inline expectations on start line instead of end.

  C#C++GoJavaJSPythonQL-for-QLRubyRust
  #22539·aschackmull opened Sep 10, 2026Contributor·

  ·
  1

• cpp: Model BlazingMQ bmqa message and property taint flow

  C++documentationexternal-contribution
  #22538·kumarak opened Sep 9, 2026Contributor·

  ·
  5

• [WIP] Address review feedback on PR #22534

  documentationGo
  #22535·owen-mc with CopilotAI opened Sep 9, 2026·9 tasks done·

  ·
  

• Bump the npm_and_yarn group across 8 directories with 5 updates

  dependenciesjavascriptJS
  #22529·dependabot[bot] opened Sep 9, 2026Bot·

  ·

• Python: cache shared SSA liveness across staged consumers (DCA)

  documentationPython
  #22465·yoff opened Aug 30, 2026Contributor·

  ·

• Kotlin: cover 2.4.20 language features

  documentationJavaKotlin
  #22462·andersfugmann opened Aug 28, 2026Contributor·

  ·

• Rust: Enable LTO for the extractor

  Rust
  #22461·paldepind opened Aug 28, 2026Contributor·

  ·
  5

• Go: When go.mod version is above maxGoVersion request go.mod version

  depends on internal PRGo
  #22458·jketema opened Aug 28, 2026Contributor·

  ·
  2

• cpp: add insecure randomness query with RNG security models

  C++documentation
  #22437·kumarak opened Aug 27, 2026Contributor·

  ·
  9

• Python: Model shell -c command arguments

  documentationexternal-contributionPython
  #22434·theinfosecguy opened Aug 26, 2026Contributor·

  ·
  1

• Dataflow/prune to shortestpath2

  DataFlow Library
  #22428·aschackmull opened Aug 26, 2026Contributor·

  ·

• Dataflow: test

  DataFlow Library
  #22427·aschackmull opened Aug 26, 2026Contributor·

  ·

• Python: combined shared CFG/SSA DCA validation

  documentationPython
  #22424·yoff opened Aug 25, 2026Contributor·

  ·

• Rust: Guard library diagnostics

  documentationRubyRustUnified
  #22422·paldepind opened Aug 25, 2026Contributor·

  ·
  19

• Python: cache exposed shared SSA adjacency relations

  documentationPython
  #22421·yoff opened Aug 25, 2026Contributor·

  ·

• Python: bind captured type-tracking jumps from source

  documentationPython
  #22407·yoff opened Aug 21, 2026Contributor·

  ·

• Experiment: restore captured-jump selectivity with shared SSA

  documentationPython
  #22402·yoff opened Aug 21, 2026Contributor·

  ·

• Python: preserve sensitive configuration key precision

  documentationPython
  #22396·yoff opened Aug 20, 2026Contributor·

  ·

• Python: test closure instance cross-talk

  documentationPython
  #22395·yoff opened Aug 20, 2026Contributor·

  ·

• Go: Use shared guards library

  documentationGoJava
  #22365·owen-mc opened Aug 17, 2026Contributor·

  ·
  10

• Java: Add Spring MVC URL redirect sinks

  documentationexternal-contributionJava
  #22362·theinfosecguy opened Aug 17, 2026Contributor·

  ·
  1