Skip to content

Actions: github/codeql

Actions

Run QL for QL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
ql-for-ql-build.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Python: Add self-validating CFG tests Run QL for QL #47670: Pull request #21724 opened by tausbn
3m 18s tausbn/python-add-self-validating-cfg-tests
tausbn/python-add-self-validating-cfg-tests
3m 18s
Actions: Add experimental queries for AI output validation CWE 1426 Run QL for QL #47669: Pull request #21678 synchronize by data-douser
2m 53s data-douser:codeql-actions-scs/cwe-1426
data-douser:codeql-actions-scs/cwe-1426
2m 53s
Actions: Add experimental queries for AI output validation CWE 1426 Run QL for QL #47668: Pull request #21678 synchronize by data-douser
3m 32s data-douser:codeql-actions-scs/cwe-1426
data-douser:codeql-actions-scs/cwe-1426
3m 32s
Improve actions/ql/src/Security/CWE-829/UntrustedCheckoutX queries Run QL for QL #47667: Pull request #21715 synchronize by knewbury01
3m 27s knewbury01:knewbury01/adjust-actions-queries-untrusted-checkout
knewbury01:knewbury01/adjust-actions-queries-untrusted-checkout
3m 27s
Swift: Expose the generic arguments of BuiltinFixedArrays Run QL for QL #47666: Pull request #21723 opened by jketema
3m 17s jketema:swift-fixed-array
jketema:swift-fixed-array
3m 17s
Rust: Upgrade to rust-analyzer 0.328 Run QL for QL #47665: Pull request #21714 synchronize by tausbn
3m 56s tausbn/rust-upgrade-to-rust-analyzer-0.0.328
tausbn/rust-upgrade-to-rust-analyzer-0.0.328
3m 56s
Rust: Refine implHasAmbiguousSiblingAt Run QL for QL #47664: Pull request #21703 synchronize by hvitved
2m 52s hvitved:rust/type-inference-sibling
hvitved:rust/type-inference-sibling
2m 52s
Actions: Add experimental prompt injection queries for CWE 1427 Run QL for QL #47663: Pull request #21675 synchronize by mbaluda
3m 17s data-douser:codeql-actions-scs/cwe-1427
data-douser:codeql-actions-scs/cwe-1427
3m 17s
Document models-as-data barriers and barrier guards and add change notes Run QL for QL #47662: Pull request #21523 synchronize by owen-mc
3m 27s owen-mc:docs/mad/barriers
owen-mc:docs/mad/barriers
3m 27s
Rust: Upgrade to rust-analyzer 0.328 Run QL for QL #47661: Pull request #21714 synchronize by tausbn
3m 36s tausbn/rust-upgrade-to-rust-analyzer-0.0.328
tausbn/rust-upgrade-to-rust-analyzer-0.0.328
3m 36s
Document models-as-data barriers and barrier guards and add change notes Run QL for QL #47660: Pull request #21523 synchronize by owen-mc
3m 21s owen-mc:docs/mad/barriers
owen-mc:docs/mad/barriers
3m 21s
Go: Remove global function step from local flow Run QL for QL #47659: Pull request #21721 synchronize by owen-mc
3m 22s owen-mc:go/remove-global-function-jump-step-from-local-flow
owen-mc:go/remove-global-function-jump-step-from-local-flow
3m 22s
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Run QL for QL #47658: Pull request #21720 synchronize by Copilot AI
3m 23s copilot/fix-shutil-unpack-archive-detection
copilot/fix-shutil-unpack-archive-detection
3m 23s
Go: Remove global function step from local flow Run QL for QL #47657: Pull request #21721 synchronize by owen-mc
3m 24s owen-mc:go/remove-global-function-jump-step-from-local-flow
owen-mc:go/remove-global-function-jump-step-from-local-flow
3m 24s
Go: Remove global function step from local flow Run QL for QL #47656: Pull request #21721 opened by owen-mc
3m 22s owen-mc:go/remove-global-function-jump-step-from-local-flow
owen-mc:go/remove-global-function-jump-step-from-local-flow
3m 22s
Python: support os.path.basename as a sanitizer in py/path-injection Run QL for QL #47655: Pull request #21719 synchronize by Copilot AI
3m 23s copilot/fix-path-injection-sanitizer
copilot/fix-path-injection-sanitizer
3m 23s
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Run QL for QL #47654: Pull request #21720 synchronize by Copilot AI
3m 21s copilot/fix-shutil-unpack-archive-detection
copilot/fix-shutil-unpack-archive-detection
3m 21s
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Run QL for QL #47653: Pull request #21720 synchronize by Copilot AI
Action required copilot/fix-shutil-unpack-archive-detection
copilot/fix-shutil-unpack-archive-detection
Action required
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Run QL for QL #47652: Pull request #21720 synchronize by Copilot AI
Action required copilot/fix-shutil-unpack-archive-detection
copilot/fix-shutil-unpack-archive-detection
Action required
Python: support os.path.basename as a sanitizer in py/path-injection Run QL for QL #47651: Pull request #21719 synchronize by Copilot AI
2m 56s copilot/fix-path-injection-sanitizer
copilot/fix-path-injection-sanitizer
2m 56s
py/tarslip: detect shutil.unpack_archive and subprocess tar extraction Run QL for QL #47650: Pull request #21720 opened by Copilot AI
3m 32s copilot/fix-shutil-unpack-archive-detection
copilot/fix-shutil-unpack-archive-detection
3m 32s
Python: support os.path.basename as a sanitizer in py/path-injection Run QL for QL #47649: Pull request #21719 opened by Copilot AI
2m 53s copilot/fix-path-injection-sanitizer
copilot/fix-path-injection-sanitizer
2m 53s
Merge pull request #21698 from hvitved/rust/type-inference-index-expr Run QL for QL #47648: Commit ee34e33 pushed by hvitved
4m 23s main
main
4m 23s
Java: Add XXE sink model for Woodstox WstxInputFactory Run QL for QL #47647: Pull request #21718 opened by chmodxxx
3m 27s chmodxxx:java/woodstox-xxe
chmodxxx:java/woodstox-xxe
3m 27s
Bump rules_nodejs from 6.7.3 to 6.7.4 Run QL for QL #47646: Pull request #21717 opened by dependabot bot
2m 49s dependabot/bazel/rules_nodejs-6.7.4
dependabot/bazel/rules_nodejs-6.7.4
2m 49s