Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
MaxFork
github_codeql
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
github_codeql
javascript
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on May 13, 2025
Merge pull request #19391 from asgerf/js/typescript-path-resolution
Show description for 169ae19
asgerf
authored
169ae19
View commit details
Copy full SHA for 169ae19
View code at this point
Browse repository at this point
Merge pull request #19445 from asgerf/js/summaries-with-fallback
Show description for aea676d
asgerf
authored
aea676d
View commit details
Copy full SHA for aea676d
View code at this point
Browse repository at this point
Commits on May 2, 2025
Merge pull request #19422 from Napalys/js/shelljs
Show description for d1e769b
Napalys
authored
d1e769b
View commit details
Copy full SHA for d1e769b
View code at this point
Browse repository at this point
Update javascript/ql/lib/semmle/javascript/frameworks/ShellJS.qll
Show description for 871e93d
Napalys
and
asgerf
authored
871e93d
View commit details
Copy full SHA for 871e93d
View code at this point
Browse repository at this point
JS: Explain use of monotonicAggregates
asgerf
committed
1f308ee
View commit details
Copy full SHA for 1f308ee
View code at this point
Browse repository at this point
JS: Add comment about 'path' heuristic
asgerf
committed
5c9218f
View commit details
Copy full SHA for 5c9218f
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for f3e0cfd
asgerf
and
erik-krogh
authored
f3e0cfd
View commit details
Copy full SHA for f3e0cfd
View code at this point
Browse repository at this point
JS: Benign test updates
asgerf
committed
16fc8c3
View commit details
Copy full SHA for 16fc8c3
View code at this point
Browse repository at this point
Merge pull request #19413 from tamasvajk/quality/query-suite-selector
Show description for cb1c373
tamasvajk
authored
cb1c373
View commit details
Copy full SHA for cb1c373
View code at this point
Browse repository at this point
Commits on May 1, 2025
JS: Generate summaries from summaryModel, and only generate steps as a fallback
asgerf
committed
a44bdf3
View commit details
Copy full SHA for a44bdf3
View code at this point
Browse repository at this point
JS: Move some code into ModelsAsData.qll
asgerf
committed
ca5f8b0
View commit details
Copy full SHA for ca5f8b0
View code at this point
Browse repository at this point
Merge pull request #19429 from owen-mc/fix-cwe-tags-missing-leading-zero
Show description for e054948
owen-mc
authored
e054948
View commit details
Copy full SHA for e054948
View code at this point
Browse repository at this point
Add change notes
owen-mc
committed
0863c87
View commit details
Copy full SHA for 0863c87
View code at this point
Browse repository at this point
Address comments
Napalys
committed
68a9dd9
View commit details
Copy full SHA for 68a9dd9
View code at this point
Browse repository at this point
Refactor process.env handling in CleartextLogging and IndirectCommandInjection modules to use ThreatModelSource
Napalys
committed
d4b5ef6
View commit details
Copy full SHA for d4b5ef6
View code at this point
Browse repository at this point
Added test cases for shelljs.env
Napalys
committed
33d8ffa
View commit details
Copy full SHA for 33d8ffa
View code at this point
Browse repository at this point
Added change note
Napalys
committed
602500e
View commit details
Copy full SHA for 602500e
View code at this point
Browse repository at this point
Added model for shelljs.env
Napalys
committed
40d176a
View commit details
Copy full SHA for 40d176a
View code at this point
Browse repository at this point
Commits on Apr 30, 2025
Fix cwe tags to include leading zero
owen-mc
committed
cf614a5
View commit details
Copy full SHA for cf614a5
View code at this point
Browse repository at this point
Added change note
Napalys
committed
9624a41
View commit details
Copy full SHA for 9624a41
View code at this point
Browse repository at this point
Added support for `fastify.all`
Napalys
committed
71f1b82
View commit details
Copy full SHA for 71f1b82
View code at this point
Browse repository at this point
Added test case for `fastify.all`
Napalys
committed
6d61766
View commit details
Copy full SHA for 6d61766
View code at this point
Browse repository at this point
Merge pull request #19412 from asgerf/js/promise-all
Show description for 8ebbfb1
asgerf
authored
8ebbfb1
View commit details
Copy full SHA for 8ebbfb1
View code at this point
Browse repository at this point
Added support for `shelljs.cmd` and `async-shelljs.asyncExec`
Napalys
committed
18cea2d
View commit details
Copy full SHA for 18cea2d
View code at this point
Browse repository at this point
Added support for `shelljs.which`
Napalys
committed
25d04f1
View commit details
Copy full SHA for 25d04f1
View code at this point
Browse repository at this point
Added test cases for `cmd`, `which` and `asyncExec`
Napalys
committed
f6fae7a
View commit details
Copy full SHA for f6fae7a
View code at this point
Browse repository at this point
JS: Change note
asgerf
committed
da5d799
View commit details
Copy full SHA for da5d799
View code at this point
Browse repository at this point
Commits on Apr 29, 2025
Merge pull request #19300 from Napalys/js/fastify
Show description for 6de38b1
Napalys
authored
6de38b1
View commit details
Copy full SHA for 6de38b1
View code at this point
Browse repository at this point
Use code-quality-selectors in JS suite
tamasvajk
committed
d56c522
View commit details
Copy full SHA for d56c522
View code at this point
Browse repository at this point
JS: Update test output now that we import .d.ts files more liberally
asgerf
committed
b0f73f1
View commit details
Copy full SHA for b0f73f1
View code at this point
Browse repository at this point
JS: Add package.json files in tests relying on node_modules
Show description for 70a5ec5
asgerf
committed
70a5ec5
View commit details
Copy full SHA for 70a5ec5
View code at this point
Browse repository at this point
JS: Rename getTargetFile to getImportedFile and remove its deprecated name clash
Show description for 5de2c93
asgerf
committed
5de2c93
View commit details
Copy full SHA for 5de2c93
View code at this point
Browse repository at this point
JS: Update test output
Show description for be5de9c
asgerf
committed
be5de9c
View commit details
Copy full SHA for be5de9c
View code at this point
Browse repository at this point
JS: Make API graphs rely on type-tracking steps in general
asgerf
committed
eae1e1c
View commit details
Copy full SHA for eae1e1c
View code at this point
Browse repository at this point
JS: Add type-tracking step through simple Promise.all() calls
asgerf
committed
e40b93b
View commit details
Copy full SHA for e40b93b
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.