Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10.1k
Code
Issues
998
Pull requests
470
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
cpp
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 29, 2026
Merge pull request #22300 from jketema/jketema/ecma-regex
Show description for 4e39cc1
jketema
authored
4e39cc1
View commit details
Copy full SHA for 4e39cc1
View code at this point
Browse repository at this point
Commits on Sep 28, 2026
Merge pull request #22562 from trail-of-forks/comdb2-sql-injection-models
Show description for 4048b13
geoffw0
authored
4048b13
View commit details
Copy full SHA for 4048b13
View code at this point
Browse repository at this point
Commits on Sep 24, 2026
test(cpp): remove invalid balxml encoder taint assertion
Show description for 2c14c74
kumarak
committed
2c14c74
View commit details
Copy full SHA for 2c14c74
View code at this point
Browse repository at this point
fix(cpp): regenerate bal codec flow expectations
Show description for e29add6
kumarak
and
geoffw0
committed
e29add6
View commit details
Copy full SHA for e29add6
View code at this point
Browse repository at this point
C++: Model BDE bal codec taint flow
Show description for 5286eae
kumarak
and
geoffw0
committed
5286eae
View commit details
Copy full SHA for 5286eae
View code at this point
Browse repository at this point
fix(cpp): update bslx reset signature expectations
kumarak
committed
c14358a
View commit details
Copy full SHA for c14358a
View code at this point
Browse repository at this point
fix(cpp): address remaining bslx review feedback
kumarak
committed
b704ed4
View commit details
Copy full SHA for b704ed4
View code at this point
Browse repository at this point
cpp: model BDE bslx in-stream deserialization taint flow
Show description for 1021241
kumarak
committed
1021241
View commit details
Copy full SHA for 1021241
View code at this point
Browse repository at this point
Commits on Sep 18, 2026
Merge pull request #22438 from Tito0015/feature/cpp-mmio-unsanitized-memcpy
Show description for cdcde47
geoffw0
authored
cdcde47
View commit details
Copy full SHA for cdcde47
View code at this point
Browse repository at this point
Commits on Sep 17, 2026
cpp: address review nits on qhelp references and test header
Tito0015
committed
e41e090
View commit details
Copy full SHA for e41e090
View code at this point
Browse repository at this point
cpp: remove non-ASCII character in test file
Tito0015
committed
ff2416b
View commit details
Copy full SHA for ff2416b
View code at this point
Browse repository at this point
cpp: fix alert location and update integration test expectations
Tito0015
committed
5d6e2d4
View commit details
Copy full SHA for 5d6e2d4
View code at this point
Browse repository at this point
cpp: Drop experimental query id prefix and change note
Tito0015
committed
56c5f3a
View commit details
Copy full SHA for 56c5f3a
View code at this point
Browse repository at this point
cpp: Move mmio-unsanitized-memcpy to experimental
Show description for 30544e8
Tito0015
committed
30544e8
View commit details
Copy full SHA for 30544e8
View code at this point
Browse repository at this point
cpp: Add change note for mmio-unsanitized-memcpy query
Tito0015
committed
e20ec33
View commit details
Copy full SHA for e20ec33
View code at this point
Browse repository at this point
cpp: Add 'cpp/mmio-unsanitized-memcpy' query
Tito0015
committed
b681bc4
View commit details
Copy full SHA for b681bc4
View code at this point
Browse repository at this point
Post-release preparation for codeql-cli-2.27.1
github-actions[bot]
committed
168d999
View commit details
Copy full SHA for 168d999
View code at this point
Browse repository at this point
Release preparation for version 2.27.1
github-actions[bot]
committed
903466f
View commit details
Copy full SHA for 903466f
View code at this point
Browse repository at this point
Commits on Sep 16, 2026
C++: Remove inline expectation comment from included file
hvitved
committed
7c8d3af
View commit details
Copy full SHA for 7c8d3af
View code at this point
Browse repository at this point
Inline expectations: Ignore results in files outside the source dir
hvitved
committed
0aba99b
View commit details
Copy full SHA for 0aba99b
View code at this point
Browse repository at this point
Merge pull request #22532 from MathiasVP/flow-through-forwards-using-callbacks-3
Show description for f920aef
MathiasVP
authored
f920aef
View commit details
Copy full SHA for f920aef
View code at this point
Browse repository at this point
Merge branch 'main' into flow-through-forwards-using-callbacks-3
MathiasVP
committed
18affcd
View commit details
Copy full SHA for 18affcd
View code at this point
Browse repository at this point
C++: Add a high-level description of the forwarding model.
MathiasVP
committed
dee5142
View commit details
Copy full SHA for dee5142
View code at this point
Browse repository at this point
C++: Accept test changes.
MathiasVP
committed
f00b553
View commit details
Copy full SHA for f00b553
View code at this point
Browse repository at this point
C++: Handle forwarding without a constructor.
MathiasVP
committed
f52d18c
View commit details
Copy full SHA for f52d18c
View code at this point
Browse repository at this point
C++: Add a testcase with forwarding without a constructor.
MathiasVP
committed
d9331e9
View commit details
Copy full SHA for d9331e9
View code at this point
Browse repository at this point
C++: Add a testcase that uses type parameters in the function name for forwarding.
MathiasVP
committed
8149caa
View commit details
Copy full SHA for 8149caa
View code at this point
Browse repository at this point
C++: Expand QLDoc.
MathiasVP
committed
f381119
View commit details
Copy full SHA for f381119
View code at this point
Browse repository at this point
C++: Add a testcase that uses a hardcoded constructed type.
MathiasVP
committed
dcda06a
View commit details
Copy full SHA for dcda06a
View code at this point
Browse repository at this point
Commits on Sep 15, 2026
C++: Accept test changes.
MathiasVP
committed
fd9c8ca
View commit details
Copy full SHA for fd9c8ca
View code at this point
Browse repository at this point
C++: Handle 'isPRValueFieldAccessWithImplicitLoad' in more places.
MathiasVP
committed
19a9095
View commit details
Copy full SHA for 19a9095
View code at this point
Browse repository at this point
C++: Add a test with invalid IR.
MathiasVP
committed
c00a114
View commit details
Copy full SHA for c00a114
View code at this point
Browse repository at this point
Commits on Sep 14, 2026
C++: Model Comdb2 SQL execution sinks
kumarak
committed
75d9457
View commit details
Copy full SHA for 75d9457
View code at this point
Browse repository at this point
Merge pull request #22336 from theinfosecguy/cpp-ambiguous-assignment-condition
Show description for 4a19c87
geoffw0
authored
4a19c87
View commit details
Copy full SHA for 4a19c87
View code at this point
Browse repository at this point
Commits on Sep 11, 2026
test(cpp): fix protobuf model CI failures
Show description for d293e87
kumarak
committed
d293e87
View commit details
Copy full SHA for d293e87
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.