All pull requests

Pull requests

• Python: Handle dynamic module exports

  documentationexternal-contributionPython
  #22354·theinfosecguy opened Aug 16, 2026Contributor·

  ·
  1

• Python: add SQL injection models for the duckdb package

  documentationexternal-contributionPython
  #22352·jtabsbm opened Aug 15, 2026·4 tasks done·

  ·
  1

• Rust: Add sinks for tracing

  documentationRust
  #22341·geoffw0 opened Aug 13, 2026Contributor·

  ·
  8

• Rust: Add unsafe deserialization query (CWE-502)

  documentationexternal-contributionRust
  #22324·lcmangalagiri opened Aug 12, 2026Contributor·

  ·
  12

• Python: Model ldap3 paged searches

  documentationexternal-contributionPython
  #22303·theinfosecguy opened Aug 9, 2026Contributor·

  ·
  1

• Python: Parse class bases like function arguments

  documentationexternal-contributionPython
  #22301·maxfischer2781 opened Aug 7, 2026·

  ·
  1

  12

• Python: Ignore await and typing ellipsis as non-effectful statements

  documentationexternal-contributionPython
  #22291·maxfischer2781 opened Aug 6, 2026·2 tasks done·

  ·
  2

• Actions: Fix false positives from static matrix values

  Actionsdocumentation
  #22270·JarLob opened Aug 3, 2026Contributor·

  ·
  6

• Actions: Add new models for external actions/workflows

  Actionsdocumentation
  #22263·JarLob opened Jul 31, 2026Contributor·

  ·
  15

• Bump platforms from 1.0.0 to 1.1.0

  bazeldependencies
  #22254·dependabot[bot] opened Jul 30, 2026Bot·

  ·

• QL: Autoformat test files

  QL-for-QL
  #22232·redsun82 opened Jul 24, 2026Contributor·

  ·
  8

• Python: Reduce log injection false positives

  documentationexternal-contributionPython
  #22231·Ali-Razmjoo opened Jul 23, 2026·

  ·
  1

• [inline-learn lib] Support --learn for inline expectation tests

  ActionsC#C++GoJavaJSKotlinno-change-note-requiredPythonQL-for-QLRubyRustSwiftUnified
  #22228·d10c opened Jul 23, 2026Contributor·

  ·
  48

• Actions: Normalize explicit untrusted checkout paths

  Actionsdocumentation
  #22221·1sgtpepper opened Jul 21, 2026·

  ·
  1

  7

• Bump the npm_and_yarn group across 9 directories with 6 updates

  dependenciesjavascriptJS
  #22212·dependabot[bot] opened Jul 18, 2026Bot·

  ·

• Support multi-tag column surgery and tag-generic learning in --learn inline expectations

  C#C++GoJavaJSPythonQL-for-QLRubyRustSwiftUnified
  #22208·d10c opened Jul 16, 2026Contributor·

  ·
  14

• build(deps): bump buildifier_prebuilt from 6.4.0 to 8.5.1.3

  bazeldependencies
  #22203·dependabot[bot] opened Jul 16, 2026Bot·

  ·

• Bump rules_cc from 0.2.20 to 0.2.22

  bazeldependencies
  #22202·dependabot[bot] opened Jul 16, 2026Bot·

  ·

• Bump abseil-cpp from 20260107.1 to 20260526.0

  bazeldependencies
  #22201·dependabot[bot] opened Jul 16, 2026Bot·

  ·

• C++ regex parse tree and RegexTreeViewSig implementation (Phase 1 of ReDoS support)

  C++documentation
  #22200·jketema with CopilotAI opened Jul 15, 2026·

  ·
  19

  

• C++: Add MaD summaries for shared_ptr, unique_ptr, and weak_ptr.

  C++
  #22198·MathiasVP opened Jul 15, 2026Contributor·

  ·

• Support MISSING promotion and SPURIOUS clearing in --learn inline expectations

  C#C++GoJavaJSPythonQL-for-QLRubyRustSwiftUnified
  #22148·d10c opened Jul 9, 2026Contributor·

  ·

• Go: skip extracting ast.ParenExpr nodes

  Go
  #22146·owen-mc opened Jul 9, 2026Contributor·

  ·

• Support --learn for inline expectations via learnEdits

  C#C++GoJavaJSPythonQL-for-QLRubyRustSwiftUnified
  #22140·d10c opened Jul 8, 2026Contributor·

  ·
  3

• Java: Support JDK 27

  documentationJava
  #22138·IdrissRio opened Jul 8, 2026Contributor·

  ·