Skip to content

Actions: github/codeql

Actions

Run QL for QL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
ql-for-ql-build.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
JavaScript: Add setHTMLUnsafe and parseHTMLUnsafe as XSS sinks Run QL for QL #47440: Pull request #21648 opened by sunnyeo
Action required sunnyeo:js/add-setHTMLUnsafe-parseHTMLUnsafe-sinks
sunnyeo:js/add-setHTMLUnsafe-parseHTMLUnsafe-sinks
Action required
Bump google.golang.org/protobuf from 1.30.0 to 1.33.0 in /go/ql/test/query-tests/Security/CWE-347 Run QL for QL #47439: Pull request #21644 opened by dependabot Bot
3m 25s dependabot/go_modules/go/ql/test/query-tests/Security/CWE-347/google.golang.org/protobuf-1.33.0
dependabot/go_modules/go/ql/test/query-tests/Security/CWE-347/google.golang.org/protobuf-1.33.0
3m 25s
Bump golang.org/x/crypto from 0.7.0 to 0.45.0 in /go/ql/test/library-tests/semmle/go/frameworks/Fasthttp Run QL for QL #47438: Pull request #21643 opened by dependabot Bot
3m 24s dependabot/go_modules/go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/golang.org/x/crypto-0.45.0
dependabot/go_modules/go/ql/test/library-tests/semmle/go/frameworks/Fasthttp/golang.org/x/crypto-0.45.0
3m 24s
Actions: Add four experimental queries Run QL for QL #47437: Pull request #21624 synchronize by JamieMagee
3m 28s JamieMagee:jamie/zizmor-inspired-actions-queries
JamieMagee:jamie/zizmor-inspired-actions-queries
3m 28s
Actions: Add four experimental queries Run QL for QL #47436: Pull request #21624 synchronize by JamieMagee
3m 23s JamieMagee:jamie/zizmor-inspired-actions-queries
JamieMagee:jamie/zizmor-inspired-actions-queries
3m 23s
Improve prompt inject for Python Run QL for QL #47435: Pull request #21641 synchronize by josefs
3m 20s josefs/promptInjectionImprovements
josefs/promptInjectionImprovements
3m 20s
Improve prompt inject for Python Run QL for QL #47434: Pull request #21641 opened by josefs
3m 30s josefs/promptInjectionImprovements
josefs/promptInjectionImprovements
3m 30s
Merge pull request #21639 from github/mario-campos/test-go-registries Run QL for QL #47433: Commit fb8b569 pushed by mario-campos
4m 17s main
main
4m 17s
Adjust alert messages CWE-829/ArtifactPoisoning[Critical|Medium] Run QL for QL #47432: Pull request #21640 synchronize by knewbury01
3m 22s knewbury01:knewbury01/adjust-actions-queries-alerts
knewbury01:knewbury01/adjust-actions-queries-alerts
3m 22s
Just: introduce common "verbs" Run QL for QL #47431: Pull request #19978 synchronize by redsun82
3m 30s redsun82/just2
redsun82/just2
3m 30s
Just: introduce common "verbs" Run QL for QL #47430: Pull request #19978 synchronize by redsun82
3m 25s redsun82/just2
redsun82/just2
3m 25s
Adjust alert messages CWE-829/ArtifactPoisoning[Critical|Medium] Run QL for QL #47429: Pull request #21640 opened by knewbury01
3m 22s knewbury01:knewbury01/adjust-actions-queries-alerts
knewbury01:knewbury01/adjust-actions-queries-alerts
3m 22s
Add tests for multiple Git sources and GoProxy servers in registry config parsing Run QL for QL #47428: Pull request #21639 opened by mario-campos
3m 24s mario-campos/test-go-registries
mario-campos/test-go-registries
3m 24s
Rust: Add AlertSuppression.ql for inline suppression comments Run QL for QL #47427: Pull request #21638 synchronize by cnuss
4m 33s cnuss:rust/alert-suppression
cnuss:rust/alert-suppression
4m 33s
Rust: Add AlertSuppression.ql for inline suppression comments Run QL for QL #47426: Pull request #21638 synchronize by cnuss
Action required cnuss:rust/alert-suppression
cnuss:rust/alert-suppression
Action required
Rust: Add AlertSuppression.ql for inline suppression comments Run QL for QL #47425: Pull request #21638 synchronize by cnuss
Action required cnuss:rust/alert-suppression
cnuss:rust/alert-suppression
Action required
Rust: Add AlertSuppression.ql for inline suppression comments Run QL for QL #47424: Pull request #21638 opened by cnuss
Action required cnuss:rust/alert-suppression
cnuss:rust/alert-suppression
Action required
Merge pull request #21583 from github/redsun82/update-kotlin-2.3.20 Run QL for QL #47423: Commit cedacc9 pushed by redsun82
4m 29s main
main
4m 29s
Actions: Correctly check reusable workflow permissions in actions/missing-workflow-permissions Run QL for QL #47422: Pull request #21636 opened by jketema
3m 24s jketema:actions-perm
jketema:actions-perm
3m 24s
Just: introduce common "verbs" Run QL for QL #47421: Pull request #19978 synchronize by redsun82
3m 24s redsun82/just2
redsun82/just2
3m 24s
Add supply chain queries for npm publish token usage and missing provenance Run QL for QL #47420: Pull request #21621 synchronize by david-wiggs
3m 25s david-wiggs:main
david-wiggs:main
3m 25s
Just: introduce common "verbs" Run QL for QL #47419: Pull request #19978 synchronize by redsun82
3m 18s redsun82/just2
redsun82/just2
3m 18s
C++: Upgrade cpp/suspicious-add-sizeof to high precision Run QL for QL #47418: Pull request #21635 opened by geoffw0
3m 19s geoffw0:suspicioussizeof2
geoffw0:suspicioussizeof2
3m 19s
C++: Upgrade cpp/comparison-with-wider-type to high precision Run QL for QL #47417: Pull request #21634 opened by geoffw0
3m 25s geoffw0:compwidertype2
geoffw0:compwidertype2
3m 25s
C++: Upgrade cpp/integer-multiplication-cast-to-long to high precision Run QL for QL #47416: Pull request #21633 opened by geoffw0
3m 20s geoffw0:intmultlong2
geoffw0:intmultlong2
3m 20s
ProTip! You can narrow down the results and go further in time using created:<2026-04-02 or the other filters available.