GitHub · Where software is built

Labels Milestones New issue

False negative: DoubleCheckedLocking.ql cannot detect scenarios with ternary expressions.

#21395

· Carlson-JLQ opened

on Mar 1, 2026

False Positive: DoNotCallFinalize.ql cannot detect 'finalize()' in the function call chain.

#21394

· Carlson-JLQ opened

on Mar 1, 2026

False Negative : CloseSql.ql cannot detect bugs in the Try-Catch block.

#21393

· Carlson-JLQ opened

on Mar 1, 2026

New issue

#21382

· yaasiinmd1 opened

on Feb 27, 2026

CodeQL packages cannot be mirrored to nor proxied by an OCI-compliant registry

#21322

· gpettey-ercot opened

on Feb 12, 2026

A fatal error occurred: python-security-extended.qls is not a .ql file, .qls file, a directory, or a query pack specification.

#21293

· Karthims7 opened

on Feb 6, 2026

Actions: Add warning/finding when using actions/create-github-app-token without permissions

#21264

· hfhbd opened

on Feb 3, 2026

JavaScript DOM XSS via fetch().json() → insertAdjacentHTML not detected by CodeQL

#21257

· dariuszdbr opened

on Feb 3, 2026

CPP: IR weirdness with unexpected result for <code>getUnconvertedResultExpression</code>

#21249

· intrigus-lgtm opened

on Feb 2, 2026

C/C++: extractor gets catastrophic error

#21242

· hello123leo opened

on Feb 2, 2026

CPP: IR inconsistency with global variable and address-of related to constant-folding(?)

#21241

· intrigus-lgtm opened

on Jan 31, 2026

How do we use the NestJS framework classes?

#21233

· gsutherland-trailofbits opened

on Jan 28, 2026