Search results

How to write CodeQL rules?

questionFurther information is requestedFurther information is requested

Status: Open.

#20159 In github/codeql;

· Firebasky opened on Aug 4, 2025

False positive "use of implicit PendingIntents" alert

false-positive

Status: Open.

#20153 In github/codeql;

· tmo1 opened on Aug 1, 2025

False positives for py/file-not-closed even when using <code>with</code> statements

false-positive

Python

Status: Open.

#20152 In github/codeql;

· akrherz opened on Aug 1, 2025

Java SSRF Findings

false-positive

questionFurther information is requestedFurther information is requested

Status: Open.

#20144 In github/codeql;

· gautamkct opened on Jul 30, 2025

CWE 134

awaiting-responseThe CodeQL team is awaiting further input or clarification from the original reporter of this issue.The CodeQL team is awaiting further input or clarification from the original reporter of this issue.

false-positive

Status: Open.

#20131 In github/codeql;

· akmittal1182 opened on Jul 28, 2025

For an abstract class in the CodeQL source code, how can I quickly find all the classes that extend this abstract class from the CodeQL library?

questionFurther information is requestedFurther information is requested

Status: Open.

#20125 In github/codeql;

· MagicXiaoBai1 opened on Jul 25, 2025

CWE-918 (SSRF) - Java - False Positive Justification

false-positive

Status: Open.

#20117 In github/codeql;

· gautamkct opened on Jul 23, 2025

CodeQL detected code written in <code>some language</code>, but not any written in GitHub Actions. Confirm that there is some source code for GitHub Actions in the project.

questionFurther information is requestedFurther information is requested

Status: Open.

#20102 In github/codeql;

· jyio-va opened on Jul 21, 2025

UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

questionFurther information is requestedFurther information is requested

Status: Open.

#20098 In github/codeql;

· fguisso opened on Jul 21, 2025

False positive: Full server-side request forgery

false-positive

Status: Open.

#20093 In github/codeql;

· markdboyd opened on Jul 18, 2025

General issue - When using <code>--build-mode=none</code>, Windows builds produce <code>Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'</code>

questionFurther information is requestedFurther information is requested

Status: Open.

#20071 In github/codeql;

· szigetics opened on Jul 17, 2025

False positive: go/zipslip when <code>filepath.IsLocal</code> is already used

false-positive

Status: Open.

#20043 In github/codeql;

· dagood opened on Jul 14, 2025