Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects, and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
RE-EXPOC
codeql
Repository navigation
Code
Pull requests
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
java
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Mar 26, 2021
Merge pull request #5372 from smowton/smowton/feature/commons-lang-models-to-csv
Show description for 506c95d
aschackmull
authored
506c95d
View commit details
Copy full SHA for 506c95d
View code at this point
Browse repository at this point
Commits on Mar 25, 2021
Stop using wildcard Argument
Show description for eaa2d4d
smowton
committed
eaa2d4d
View commit details
Copy full SHA for eaa2d4d
View code at this point
Browse repository at this point
Constructor models: use Argument[-1] for the result, not ReturnValue
smowton
committed
2f34588
View commit details
Copy full SHA for 2f34588
View code at this point
Browse repository at this point
Merge pull request #4920 from luchua-bc/java/hash-without-salt
Show description for 28fb0ed
aschackmull
authored
28fb0ed
View commit details
Copy full SHA for 28fb0ed
View code at this point
Browse repository at this point
Convert StrBuilder models to CSV
smowton
committed
a5220bf
View commit details
Copy full SHA for a5220bf
View code at this point
Browse repository at this point
Convert StringUtils models to CSV
smowton
committed
25a0e09
View commit details
Copy full SHA for 25a0e09
View code at this point
Browse repository at this point
Translate ArrayUtils models to CSV
smowton
committed
1beac06
View commit details
Copy full SHA for 1beac06
View code at this point
Browse repository at this point
Add tests for and slightly expand models of Commons Lang's ArrayUtils class
smowton
committed
7fb5bd0
View commit details
Copy full SHA for 7fb5bd0
View code at this point
Browse repository at this point
Update java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql
aschackmull
authored
344c2d3
View commit details
Copy full SHA for 344c2d3
View code at this point
Browse repository at this point
Java: Add metadata to several more experimental queries.
aschackmull
committed
75afa01
View commit details
Copy full SHA for 75afa01
View code at this point
Browse repository at this point
Merge branch 'java/fix-experimental-query-metadata' into java/cleanup
aschackmull
committed
d53c334
View commit details
Copy full SHA for d53c334
View code at this point
Browse repository at this point
Java: Add severity and precision metadata to experimental queries.
aschackmull
committed
28ff3f4
View commit details
Copy full SHA for 28ff3f4
View code at this point
Browse repository at this point
Java: Add change note for code duplication library removal.
aschackmull
committed
5b905cf
View commit details
Copy full SHA for 5b905cf
View code at this point
Browse repository at this point
Java: Add change note for filter query removal.
aschackmull
committed
1564aee
View commit details
Copy full SHA for 1564aee
View code at this point
Browse repository at this point
Java: Remove code duplication library.
aschackmull
committed
c82b5eb
View commit details
Copy full SHA for c82b5eb
View code at this point
Browse repository at this point
Java: Remove precision tag from metric queries.
aschackmull
committed
4b7440d
View commit details
Copy full SHA for 4b7440d
View code at this point
Browse repository at this point
Java: Delete filter queries.
aschackmull
committed
70824b3
View commit details
Copy full SHA for 70824b3
View code at this point
Browse repository at this point
Commits on Mar 24, 2021
Merge pull request #5371 from aschackmull/java/framework-coverage
Show description for 72ae902
yo-h
authored
72ae902
View commit details
Copy full SHA for 72ae902
View code at this point
Browse repository at this point
Merge pull request #5512 from aschackmull/java/csv-argument-ranges
Show description for d3485ca
aschackmull
authored
d3485ca
View commit details
Copy full SHA for d3485ca
View code at this point
Browse repository at this point
Apply suggestions from code review
Show description for 4955f95
aschackmull
and
smowton
authored
4955f95
View commit details
Copy full SHA for 4955f95
View code at this point
Browse repository at this point
Merge pull request #5099 from porcupineyhairs/javaLogInjection
Show description for 63831cc
aschackmull
authored
63831cc
View commit details
Copy full SHA for 63831cc
View code at this point
Browse repository at this point
Merge pull request #5260 from artem-smotrakov/spring-http-invoker
Show description for a1ccbcd
aschackmull
authored
a1ccbcd
View commit details
Copy full SHA for a1ccbcd
View code at this point
Browse repository at this point
Java: Support argument and parameter ranges.
aschackmull
committed
41168e2
View commit details
Copy full SHA for 41168e2
View code at this point
Browse repository at this point
Java: Merge packages that likely belong to the same framework.
aschackmull
committed
234f62f
View commit details
Copy full SHA for 234f62f
View code at this point
Browse repository at this point
Commits on Mar 23, 2021
Partial revert: only introduce inferred taint edges from callsite-crossing value edges if an original taint edge targets the *start* of the value edge.
Show description for fa90655
smowton
committed
fa90655
View commit details
Copy full SHA for fa90655
View code at this point
Browse repository at this point
Merge pull request #5008 from torque59/cwe-346
Show description for 27408fe
aschackmull
authored
27408fe
View commit details
Copy full SHA for 27408fe
View code at this point
Browse repository at this point
Merge pull request #5164 from luchua-bc/java/insecure-ldap-endpoint
Show description for 9a56601
aschackmull
authored
9a56601
View commit details
Copy full SHA for 9a56601
View code at this point
Browse repository at this point
Merge pull request #4994 from haby0/main
Show description for 1e6b539
aschackmull
authored
1e6b539
View commit details
Copy full SHA for 1e6b539
View code at this point
Browse repository at this point
Commits on Mar 22, 2021
Merge pull request #5411 from aschackmull/java/dataflow-lambda-dispatch
Show description for b495e1e
yo-h
authored
b495e1e
View commit details
Copy full SHA for b495e1e
View code at this point
Browse repository at this point
Merge pull request #5474 from Marcono1234/marcono1234/string-building-type
Show description for f681d58
aschackmull
authored
f681d58
View commit details
Copy full SHA for f681d58
View code at this point
Browse repository at this point
Merge remote-tracking branch 'upstream/main' into main
haby0
committed
fe046ec
View commit details
Copy full SHA for fe046ec
View code at this point
Browse repository at this point
Commits on Mar 21, 2021
Java: Add StringBuildingType
Marcono1234
committed
cd059eb
View commit details
Copy full SHA for cd059eb
View code at this point
Browse repository at this point
Java: Add value predicates for float and double literals; improve tests
Marcono1234
committed
fa98443
View commit details
Copy full SHA for fa98443
View code at this point
Browse repository at this point
Commits on Mar 19, 2021
Merge pull request #5311 from hvitved/dataflow/lambda
Show description for 09a49e4
hvitved
authored
09a49e4
View commit details
Copy full SHA for 09a49e4
View code at this point
Browse repository at this point
Commits on Mar 18, 2021
remove sanitiserGuards
Porcuiney Hairs
committed
a88c368
View commit details
Copy full SHA for a88c368
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.