Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
502
(502)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
python
ql
lib
semmle
python
security
on
codeql-cli-2.17.4
User selector
All users
Datepicker
All time
Commit history
Commits on May 21, 2024
Merge pull request #16446 from joefarebrother/shared-sensitive-heuristics
Show description for 01a6c5e
joefarebrother
authored
01a6c5e
View commit details
Copy full SHA for 01a6c5e
View code at this point
Browse repository at this point
Commits on May 9, 2024
Fix typos in sensitive data regex
joefarebrother
committed
9aff22c
View commit details
Copy full SHA for 9aff22c
View code at this point
Browse repository at this point
Commits on May 8, 2024
Add private category to sensitive data heuristics
joefarebrother
committed
5f4bc41
View commit details
Copy full SHA for 5f4bc41
View code at this point
Browse repository at this point
Commits on Apr 24, 2024
Add concept tests + fix typo
joefarebrother
committed
2b935e5
View commit details
Copy full SHA for 2b935e5
View code at this point
Browse repository at this point
Fix deprecation
joefarebrother
committed
ec4c820
View commit details
Copy full SHA for ec4c820
View code at this point
Browse repository at this point
Implement sinks for wsgiref + allow lists in bulk header updates + local flow
joefarebrother
committed
eeef062
View commit details
Copy full SHA for eeef062
View code at this point
Browse repository at this point
Added a sanitizer for replacing newlines.
joefarebrother
committed
fa28d94
View commit details
Copy full SHA for fa28d94
View code at this point
Browse repository at this point
Implemented sinks for bulk header updates, and added corresponding tests.
joefarebrother
committed
a88ad62
View commit details
Copy full SHA for a88ad62
View code at this point
Browse repository at this point
Add to header write concept a specification of whether the name or value arg allows newlines.
Show description for 68d9091
joefarebrother
committed
68d9091
View commit details
Copy full SHA for 68d9091
View code at this point
Browse repository at this point
Split into customizations file
joefarebrother
committed
25ffcb2
View commit details
Copy full SHA for 25ffcb2
View code at this point
Browse repository at this point
Move headers injection query and concept from experimental to main
joefarebrother
committed
6021d92
View commit details
Copy full SHA for 6021d92
View code at this point
Browse repository at this point
Merge pull request #16306 from github/nickrolfe/js-sensitive
Show description for af72c08
nickrolfe
authored
af72c08
View commit details
Copy full SHA for af72c08
View code at this point
Browse repository at this point
Commits on Apr 23, 2024
JS: do fewer regexp matches in SensitiveActions
nickrolfe
committed
003d208
View commit details
Copy full SHA for 003d208
View code at this point
Browse repository at this point
Commits on Apr 22, 2024
Python: Change `Str` to `StringLiteral`
Show description for d51fcd4
tausbn
committed
d51fcd4
View commit details
Copy full SHA for d51fcd4
View code at this point
Browse repository at this point
Python: Autoformat everything
Show description for b484aee
tausbn
committed
b484aee
View commit details
Copy full SHA for b484aee
View code at this point
Browse repository at this point
Python: Change all remaining occurrences of `StrConst`
Show description for 1c68c98
tausbn
committed
1c68c98
View commit details
Copy full SHA for 1c68c98
View code at this point
Browse repository at this point
Commits on Jan 30, 2024
exclude certification from maybeCertificate() regexes
ockers
committed
eb5e012
View commit details
Copy full SHA for eb5e012
View code at this point
Browse repository at this point
Commits on Jan 23, 2024
Merge pull request #15393 from erik-krogh/deps-jan-2024
Show description for f1d6f56
erik-krogh
authored
f1d6f56
View commit details
Copy full SHA for f1d6f56
View code at this point
Browse repository at this point
Commits on Jan 22, 2024
Apply suggestions from code review
Show description for 17e3a45
2 people
authored and
Max Schaefer
committed
17e3a45
View commit details
Copy full SHA for 17e3a45
View code at this point
Browse repository at this point
Python: Add support for more URL redirect sanitisers.
Show description for 9817845
Max Schaefer
committed
9817845
View commit details
Copy full SHA for 9817845
View code at this point
Browse repository at this point
delete outdated deprecations
erik-krogh
committed
8be7ead
View commit details
Copy full SHA for 8be7ead
View code at this point
Browse repository at this point
Commits on Dec 18, 2023
Merge pull request #14848 from hvitved/python/shared-type-tracking
Show description for e0c027f
yoff
authored
e0c027f
View commit details
Copy full SHA for e0c027f
View code at this point
Browse repository at this point
Commits on Dec 14, 2023
Python: Remove references to FlowStateString.
aschackmull
committed
8ef4821
View commit details
Copy full SHA for 8ef4821
View code at this point
Browse repository at this point
Python: Adopt shared type tracking library
hvitved
committed
3b1146b
View commit details
Copy full SHA for 3b1146b
View code at this point
Browse repository at this point
Commits on Dec 8, 2023
Python: slightly improve tarslip logic
yoff
committed
2539e2e
View commit details
Copy full SHA for 2539e2e
View code at this point
Browse repository at this point
Commits on Dec 4, 2023
Merge branch 'main' of https://github.com/github/codeql into python/remove-ssa-nodes-from-dataflow-graph
yoff
committed
e091ae8
View commit details
Copy full SHA for e091ae8
View code at this point
Browse repository at this point
Commits on Nov 28, 2023
Python: Remove unused `unsafeFilter` predicates
tausbn
committed
6e27918
View commit details
Copy full SHA for 6e27918
View code at this point
Browse repository at this point
Python: Update `hasUnsafeFilter` to use API graph
Show description for 91643ad
tausbn
and
RasmusWL
authored
91643ad
View commit details
Copy full SHA for 91643ad
View code at this point
Browse repository at this point
Commits on Nov 27, 2023
Python: Add support for extraction filters
Show description for 95e9284
tausbn
committed
95e9284
View commit details
Copy full SHA for 95e9284
View code at this point
Browse repository at this point
Commits on Nov 20, 2023
Python: filter more sinks in stdlib
Show description for 421d4f3
yoff
committed
421d4f3
View commit details
Copy full SHA for 421d4f3
View code at this point
Browse repository at this point
Python: remove EssaNodes
Show description for 11c71fd
yoff
committed
11c71fd
View commit details
Copy full SHA for 11c71fd
View code at this point
Browse repository at this point
Commits on Nov 7, 2023
Update dead link.
geoffw0
committed
e8a466a
View commit details
Copy full SHA for e8a466a
View code at this point
Browse repository at this point
Commits on Oct 9, 2023
Python: delete various outdated deprecations
erik-krogh
committed
194f918
View commit details
Copy full SHA for 194f918
View code at this point
Browse repository at this point
delete old deprecated aliases of various regex libraries
erik-krogh
committed
0d992a3
View commit details
Copy full SHA for 0d992a3
View code at this point
Browse repository at this point
Commits on Oct 7, 2023
delete the deprecated `isBarrierGuard` predicate from the shared dataflow library, and its uses
erik-krogh
committed
4bc4e08
View commit details
Copy full SHA for 4bc4e08
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.