| Skip to content | https://github.com/github/codeql/pull/21928/files#start-of-content |
| https://github.com/ |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21928%2Ffiles |
| GitHubRepository hosting, code review, and collaboration | https://github.com/platform |
| CopilotAI coding agent for tasks, projects, and automated work | https://github.com/features/copilot |
| ActionsCI/CD and automation | https://github.com/features/actions |
| Code QualityQuality analysis, fixes, and enforcement | https://github.com/features/code-quality |
| CodespacesCloud development environments | https://github.com/features/codespaces |
| Code SecurityVulnerability detection and remediation | https://github.com/security/advanced-security/code-security |
| Secret ProtectionSecret scanning and leak prevention | https://github.com/security/advanced-security/secret-protection |
| All Features | https://github.com/features |
| Documentation | https://docs.github.com/en |
| Training | https://learn.github.com/skills |
| Certifications | https://learn.github.com/credentials |
| Build with Copilot | https://github.com/features/ai |
| Customize Copilot | https://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview |
| Integrations | https://github.com/marketplace |
| Trending repos | https://github.com/trending |
| GitHub Sponsors | https://github.com/open-source/sponsors |
| Developer articles | https://github.com/resources/articles |
| ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place. | https://github.blog/changelog/ |
| Enterprises | https://github.com/enterprise |
| Team | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| See all industries | https://github.com/solutions/industry |
| Why GitHub | https://github.com/why-github |
| Customer Stories | https://github.com/customer-stories |
| Business insights | https://github.com/solutions/executive-insights |
| Trust Center | https://github.com/trust-center |
| GitHub Advanced SecurityEnterprise-grade code security | https://github.com/security/advanced-security |
| Copilot for businessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/enterprise/premium-support |
| Documentation | https://docs.github.com/en |
| Resource center | https://github.com/resources |
| Blog | https://github.blog/ |
| Events & webinars | https://github.com/resources/events |
| Community Forum | https://github.com/orgs/community/discussions |
| Customer Stories | https://github.com/customer-stories |
| Integrations | https://github.com/marketplace |
| Customer support | https://help.github.com/ |
| Training | https://learn.github.com/skills |
| GitHub Status | https://www.githubstatus.com/ |
| About | https://github.com/about |
| Partners | https://github.com/partners |
| Changelog | https://github.blog/changelog/ |
| GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub. | https://githubuniverse.com/ |
| Pricing | https://github.com/pricing |
| Sign in | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F21928%2Ffiles |
| Sign up | https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/21928/files |
| Reload | https://github.com/github/codeql/pull/21928/files |
| Reload | https://github.com/github/codeql/pull/21928/files |
| github | https://github.com/github |
| codeql | https://github.com/github/codeql |
| Code | https://github.com/github/codeql |
| Issues1k (1k) | https://github.com/github/codeql/issues |
| Pull requests516 (516) | https://github.com/github/codeql/pulls |
| Discussions | https://github.com/github/codeql/discussions |
| Actions | https://github.com/github/codeql/actions |
| Projects | https://github.com/github/codeql/projects |
| Security and quality | https://github.com/github/codeql/security |
| Insights | https://github.com/github/codeql/pulse |
| Sign up for GitHub
| https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose |
| terms of service | https://docs.github.com/terms |
| privacy statement | https://docs.github.com/privacy |
| Sign in | https://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose |
| dilanbhalla | https://github.com/dilanbhalla |
| github:main | https://github.com/github/codeql/tree/main |
| microsoft:dilan/upgrade-2.25.5 | https://github.com/microsoft/codeql/tree/dilan/upgrade-2.25.5 |
|
Conversation
2
| https://github.com/github/codeql/pull/21928 |
|
Commits
250
| https://github.com/github/codeql/pull/21928/commits |
|
Checks
55
| https://github.com/github/codeql/pull/21928/checks |
|
Findings
| https://github.com/github/codeql/pull/21928/findings |
|
Files changed
| https://github.com/github/codeql/pull/21928/files |
| Please reload this page | https://github.com/github/codeql/pull/21928/files |
|
CLI/Library Upgrade: 2.25.5
| https://github.com/github/codeql/pull/21928/files#top |
|
Show all changes
1532 commits
| https://github.com/github/codeql/pull/21928/files |
|
4378da4
Binary: Add IR for 'dup' instructions.
MathiasVP Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/4378da47c9023c14459c3b26f0daf22a25c77f9f |
|
79817dc
Binary: Extract field references.
MathiasVP Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/79817dc241ea75b025b0a89f7e8fb91193bcd579 |
|
ecf00f9
Binary: Add a FieldAddress instruction to the IR.
MathiasVP Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/ecf00f95b43d347b4cb9139b56759036cd002b3d |
|
03a907e
Binary: Translate 'CilStfld' to IR.
MathiasVP Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/03a907e88a2632f489940d589c27a4930a92f9c9 |
|
85d9007
Binary: Translate 'CilLdfld' to IR.
MathiasVP Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/85d9007241123672de84c26cb648468a8323ff5d |
|
286fc27
Brodes/nested sizeof or operation in sizeof audit fixes (#310)
bdrodes Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/286fc277a1023ff8d2ed8cd299a3f8bd2c2b6b04 |
|
4919660
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/491966079564cdadd62c9ab39f7bbe4d962959ac |
|
9d5a797
Porting over PR adding bad wchar query #226 (#229)
dilanbhalla Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/9d5a797f552ab9972d4761c17c154517f9af9868 |
|
95c7a7c
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Dec 16, 2025
| https://github.com/github/codeql/pull/21928/commits/95c7a7cd91ce26fb9112c19bb52cfb02be6351f0 |
|
6a1f66b
C#: Fix a merge conflict.
MathiasVP Dec 17, 2025
| https://github.com/github/codeql/pull/21928/commits/6a1f66b1375dc1bbc18f26dbacd9497eca3d928e |
|
636d726
C#: Fix another merge conflict.
MathiasVP Dec 17, 2025
| https://github.com/github/codeql/pull/21928/commits/636d726e6ccde397469dd12c4e749ae5a9d63b71 |
|
c9b45fd
Merge pull request #311 from microsoft/fix-merge-conflict-inTaintedPa…
dilanbhalla Dec 17, 2025
| https://github.com/github/codeql/pull/21928/commits/c9b45fd3c4a9ba8cbf3583e7a611dbe7cfc62a00 |
|
10b13f2
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Dec 17, 2025
| https://github.com/github/codeql/pull/21928/commits/10b13f2b5af9269b5cfafaa55ec0e0881dff0f6d |
|
9d04abb
C#: Fix an incorrect merge conflict resolution.
MathiasVP Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/9d04abbce37a9312ed6df2fa9079fcbf88f27141 |
|
fa9f02a
C#: Drive-by fix. The 'GOOD' test was not actually
MathiasVP Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/fa9f02a6f3e7ca3572c0de750015be1d7bb91003 |
|
55a3dae
Minor fix to the query that should not alter prior semantics. Previou…
bdrodes Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/55a3dae3b2fd5260d4034d6473edfab28ab3d37b |
|
676c6b2
Merge pull request #313 from microsoft/brodes/nested_sizeof_or_operat…
MathiasVP Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/676c6b294cf1c601958a80d812dad6b812fdfd5a |
|
f9e1165
Merge branch 'main' into fix-merge-conflict-inTaintedPathQuery-2
MathiasVP Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/f9e116583137398275235502d5e0848a00ece359 |
|
47a0d22
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/47a0d22f17ee8384839ae34485d4ee4acbd89d44 |
|
626127b
Merge pull request #312 from microsoft/fix-merge-conflict-inTaintedPa…
dilanbhalla Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/626127b9c5cff353f26db805bfae41796ece92d4 |
|
15325a7
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/15325a762c348f1620c54c78f233cfc103284277 |
|
aba87c5
Massaging cpp leap year AP1
ropwareJB Dec 18, 2025
| https://github.com/github/codeql/pull/21928/commits/aba87c5124c706a4953fff7795cfc58b0a62c565 |
|
e63e19b
Break out query into subcomponents, comments
ropwareJB Dec 23, 2025
| https://github.com/github/codeql/pull/21928/commits/e63e19b67eb434a168e43bc250dd0d322dba9c4a |
|
7b5163c
init precise version
ropwareJB Dec 23, 2025
| https://github.com/github/codeql/pull/21928/commits/7b5163c80898e057361b6fbbde0c10b1921ad1a1 |
|
7649370
Test case qlref
ropwareJB Dec 23, 2025
| https://github.com/github/codeql/pull/21928/commits/7649370e5510f579ba24b05907d32fc3a8116cf9 |
|
c7a6543
Use Bens version + Autoformat
ropwareJB Dec 26, 2025
| https://github.com/github/codeql/pull/21928/commits/c7a6543ed1b8d40d1de3e3ecc30cb601fd202359 |
|
f6f63cb
Refactoring common class between dataflow
ropwareJB Dec 26, 2025
| https://github.com/github/codeql/pull/21928/commits/f6f63cbd54d67e00383380f247fb0f86a2150618 |
|
50e182e
Hashcons definition of exprEq_propertyPermissive
ropwareJB Dec 26, 2025
| https://github.com/github/codeql/pull/21928/commits/50e182ee5800ecc31492d1ca72aab74bdbb67073 |
|
ca9f66c
Misc. updates. Removed the ignorable function mechanic, and switched …
bdrodes Dec 29, 2025
| https://github.com/github/codeql/pull/21928/commits/ca9f66c9f13b8967d1c734918d3cbefc5e0140cf |
|
ec2e5f7
Code Commenting
ropwareJB Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/ec2e5f786d98837eaa82d262a18b0e1a1916747a |
|
fb72602
Autoformat
ropwareJB Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/fb7260270d03db88dbc87fe605c64ca44b3b8129 |
|
c94edcf
Add failing test case
ropwareJB Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/c94edcf4bee92b38d65fb5d2f93b5fa5ff000cb8 |
|
6d7bd97
Check for leap day
ropwareJB Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/6d7bd97e94520e78898d4e641f98121a50c8c7a0 |
|
662119a
Adding a test for setting a year field through a return arg. Misc. tw…
bdrodes Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/662119a52ff0f4b6a403edec8694e2d832e9e24f |
|
1169f9e
Assignment through out arg is causing too many FPs.
bdrodes Dec 30, 2025
| https://github.com/github/codeql/pull/21928/commits/1169f9e641c59253cfa32c1a452bd6db759a52f4 |
|
800abae
Fix mislabeled test case
ropwareJB Dec 31, 2025
| https://github.com/github/codeql/pull/21928/commits/800abae831c2a336a8f970eceb364890ac07de53 |
|
d743fbf
Add initial Java bytecode extractor and QL support
gfs Jan 5, 2026
| https://github.com/github/codeql/pull/21928/commits/d743fbfdb6b7bd67aa2606b4bb6e5c54cc5a2659 |
|
1c3a107
Handle null names in JVM extractor
gfs Jan 5, 2026
| https://github.com/github/codeql/pull/21928/commits/1c3a107d59454900cb21d545e8a14639b9f0c2c4 |
|
d5a8da2
Refactor JVM extractor indexing and opcode handling
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/d5a8da276e3448ffff74df5f257d32ee44bdfa5f |
|
31dd0e8
Add JVM IR translation support and test model
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/31dd0e8092512b7e807cb4bda684c2be5ca685c8 |
|
f66db26
Refactor JVM instruction hierarchy and translation
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/f66db262d6ef44b22d2d43f9254977c94d00184e |
|
83e1236
Extract and expose JVM method access flags
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/83e123634b296300244ae66ebd90f3be803d28cb |
|
13f79e6
Extract and expose CIL method access flags
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/13f79e6eec0931ffddded3f7dfcf25eac8cc2807 |
|
d80ab2d
Update dependencies in qlpack.yml files
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/d80ab2d3dd12807e7c3183ae4991b589c5ffd9c6 |
|
5e83ca4
Improve detection of transitive vulnerable calls
gfs Jan 6, 2026
| https://github.com/github/codeql/pull/21928/commits/5e83ca42fa7ef51ade555e35ec77187fdb5957af |
|
7256e95
Add JVM stack state extraction and QL accessors
gfs Jan 9, 2026
| https://github.com/github/codeql/pull/21928/commits/7256e955a45ef09b73eade75516907320855659f |
|
60e0fcd
Merge tag 'codeql-cli/latest' into auto/sync-main-pr
Jan 9, 2026
| https://github.com/github/codeql/pull/21928/commits/60e0fcd196a695b709df1a4e9e07617fe8bd7bde |
|
c2f683b
Refactor stack element access to use getInputStackVariable
gfs Jan 9, 2026
| https://github.com/github/codeql/pull/21928/commits/c2f683b15b8a23fb35442a7e7e819baf506b4b18 |
|
02fd414
Optimize vulnerable call detection and summarization
gfs Jan 9, 2026
| https://github.com/github/codeql/pull/21928/commits/02fd4148b6d603250d60626bb0b161b72d92716f |
|
5dedaee
Cleanup state
gfs Jan 9, 2026
| https://github.com/github/codeql/pull/21928/commits/5dedaee1ff16ddaa545f61f0fd268970eaee7119 |
|
ec3b350
Misc. tweaks addressing FPs and cases observed during auditing.
bdrodes Jan 12, 2026
| https://github.com/github/codeql/pull/21928/commits/ec3b350dc84a9dc5d2bab0041d5a2d885bbdb96e |
|
9b7f986
Fixed FP issue with ignorable constants, now no longer relying on the…
bdrodes Jan 12, 2026
| https://github.com/github/codeql/pull/21928/commits/9b7f98622e7f140080d2d534fadcdb5b54f73051 |
|
9b04b42
A leap year check sink can be a ExprCheckLeapYear component.
bdrodes Jan 12, 2026
| https://github.com/github/codeql/pull/21928/commits/9b04b42ae3611e33a851e4e728668cdce341c664 |
|
0926f3d
Use single TRAP file for JVM extraction
gfs Jan 12, 2026
| https://github.com/github/codeql/pull/21928/commits/0926f3da628b2361dcf4c3f9a92bf6e93e7ca192 |
|
bc98a0f
Revert JVM stack state precomputation
gfs Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/bc98a0fe5faf8cda49ed223d6bf7df50caff980d |
|
b9ccfee
Revert VulnerableCalls pragma[nomagic] optimizations
gfs Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/b9ccfee42457cf45235934808ebb4b73c73dbcc4 |
|
43109f5
Refactor call graph predicates for vulnerable method detection
gfs Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/43109f57b70bc43a1fe2c5d9403e49378bb96df8 |
|
0fd33da
Revert "Refactor call graph predicates for vulnerable method detection"
gfs Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/0fd33da84bfe61f01b09130446651500956fa9b6 |
|
2f1a850
Check if there is a guard checking for a month that isnt a february v…
ropwareJB Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/2f1a850ffaa781c5d7f1d37c0cdad61c267a37e7 |
|
b013012
Misc. updates. Specifically including how constant values are used to…
bdrodes Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/b0130121ce29a7391d6286a9e9f406b8e8e7ec17 |
|
ce802bd
More ignorable functions, and adding 0 as an ignorable constant.
bdrodes Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/ce802bdd19d3e6db473e0833af616d342fd6660e |
|
ba28175
Binary: Small cleanup by moving some x86 stuff into another file like…
MathiasVP Jan 13, 2026
| https://github.com/github/codeql/pull/21928/commits/ba28175e6dfcae678a207e97725665ae15f2a542 |
|
3282718
Add TIME_FIELDS struct and test case
ropwareJB Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/328271838e8d6f78d17cecf466272e2b4e7f70c4 |
|
938b42a
Removed unused predicates
ropwareJB Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/938b42aca03a4015ebbb7b65754b89c016590908 |
|
4aaad23
"Precise" query overwrites previous version
ropwareJB Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/4aaad2381522c57b1002658012c43a72fc0514d1 |
|
4bdb2e2
unit tests for weak hash
chanel-y Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/4bdb2e2691af2f1727e001ead3aa4d731bee7dc3 |
|
021cdeb
initial query, updated .expected file
chanel-y Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/021cdeb197521bc8a628ea2d41c075b9b049929c |
|
8756089
Removing hashcons usages from LeapYear.qll, inefficient and I'm not s…
bdrodes Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/87560891605dcdf2631a7f230957b93bb7800a56 |
|
2e7dba2
Comment cleanup
bdrodes Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/2e7dba2a1750699215b0496d3305352e93685356 |
|
9446a6b
Updating query alert message.
bdrodes Jan 15, 2026
| https://github.com/github/codeql/pull/21928/commits/9446a6b8e555a8a5663deb8c19a114ce1404a0f0 |
|
aebaa87
Merge pull request #309 from microsoft/auto/sync-main-pr
dilanbhalla Jan 16, 2026
| https://github.com/github/codeql/pull/21928/commits/aebaa87fd9a4e2ef547a68c573a0c6008188ed14 |
|
bc76018
Misc. false positive and false negative updates. as a response to rev…
bdrodes Jan 16, 2026
| https://github.com/github/codeql/pull/21928/commits/bc76018c40fdffa911b545fb32312551700bfbdd |
|
63639ea
More FP tweaks.
bdrodes Jan 20, 2026
| https://github.com/github/codeql/pull/21928/commits/63639eaf647983d42b4550a2a6467dd97347a784 |
|
e55ee18
Updating test for UncheckedReturnValueForTImeFunctions. That query ne…
bdrodes Jan 20, 2026
| https://github.com/github/codeql/pull/21928/commits/e55ee18f8799ac21b07fbcaac285e106c17cf95b |
|
c909338
Merge branch 'main' into ql-for-x86-and-cil
gfs Jan 20, 2026
| https://github.com/github/codeql/pull/21928/commits/c90933858f09dae20241200aacf6a6cc501919f0 |
|
f507239
New additions to the set of TimeConversionFunctions.
bdrodes Jan 20, 2026
| https://github.com/github/codeql/pull/21928/commits/f507239e243ea53e10e3ed69fc8d38435ab93297 |
|
2f64978
Binary/JVM: Add warning for implicit 'this' and slightly modify a pre…
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/2f649780a3619699cf3a1d4e46f074d5ff9e193a |
|
2dec095
Binary/JVM: Autoformat.
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/2dec0958926cc338112e118047a21a699c649b18 |
|
2aa84f4
PS: Fix bug in 'getConstructedTypeExpr' and add a helper predicate to…
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/2aa84f4b1f7bfb82af6403c741b19446c3055b70 |
|
b3e1f57
PS: Add intermediate api graph nodes for 'New-Object' calls similar t…
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/b3e1f57ec8b4d6162848b34e0f6ef6ca89c6794e |
|
0b06fcd
PS: Add instance edges for New-Object in API graphs.
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/0b06fcdedb86d3477611816b147ab7af640712bf |
|
8c883e9
PS: Add instance edges for static constructor-like functions.
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/8c883e9a8b901b13fcee99c3d9bd0eca81e9b6aa |
|
634f7b0
PS: Allow non-read member access from 'memberEdge'.
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/634f7b03da4200fd48c9ce8f2e630e0f8e6f62c8 |
|
6c7715b
PS: Accept test changes.
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/6c7715b14bead64f55e92df8081677f28208bcee |
|
e485d98
Created a new leap year check guard condition. Found that the prior d…
bdrodes Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/e485d98105a9f38eb5c900c7f3db67d70878c914 |
|
74f46a9
Merge pull request #316 from microsoft/ql-for-x86-and-cil
MathiasVP Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/74f46a94d900dd501e0dbd4f77999b84a7b59384 |
|
f299fef
Merge branch 'main' into api-graphs-improvements-for-chanel
chanel-y Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/f299fef26ae02bbde3ba495a929f01faa0fef4b9 |
|
657686b
Merge pull request #317 from microsoft/api-graphs-improvements-for-ch…
chanel-y Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/657686bbce14668afbf7959661b9d7b4862911f8 |
|
8e7ff2d
Removing most dependencies from UncheckedLeapYearAfterYearMOdificatio…
bdrodes Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/8e7ff2d102c8b8ec774367fb215c83599b0a41b5 |
|
0469eac
additional weak hash cases, initial queries for cipher mode and KDF alg
chanel-y Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/0469eac7a18c2e3fd8bf845ef348089f6f541912 |
|
2a0945c
Merge remote-tracking branch 'origin/main' into powershell-crypto
chanel-y Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/2a0945cbc9ef4d53e6fd1473772c38c19fcafc9d |
|
6c103a9
Time conversion results that are checked in a ternary operator condit…
bdrodes Jan 21, 2026
| https://github.com/github/codeql/pull/21928/commits/6c103a98450fa7e7dbd7fc290c8683817d338571 |
|
1aec7fc
PS: Fix example.
MathiasVP Jan 22, 2026
| https://github.com/github/codeql/pull/21928/commits/1aec7fcf0b0e190307d1a9c0b1452c33ff940a26 |
|
6c56bbf
Merge pull request #318 from microsoft/fix-example-in-sql-injection
MathiasVP Jan 22, 2026
| https://github.com/github/codeql/pull/21928/commits/6c56bbfd91789e3f38a8cbe6708a234f38bdaabe |
|
d36a4df
Misc. FP fixes.
bdrodes Jan 23, 2026
| https://github.com/github/codeql/pull/21928/commits/d36a4dfc02bf10182ecf852594c2fb0eb0d09217 |
|
f8a2f5c
More FP tweaks.
bdrodes Jan 23, 2026
| https://github.com/github/codeql/pull/21928/commits/f8a2f5c73c9fc8a5691dc86ffe31d62fb839e0c0 |
|
acdbb8d
Adding FP checks for assignment of a constant safe date regardless of…
bdrodes Jan 23, 2026
| https://github.com/github/codeql/pull/21928/commits/acdbb8d7f629913e66fe80312e7e802eda1576ec |
|
5818330
Merge tag 'codeql-cli/latest' into auto/sync-main-pr
Jan 26, 2026
| https://github.com/github/codeql/pull/21928/commits/5818330687c13f01c1b38d93a7a44d1052a976de |
|
c4a73dd
Merge pull request #320 from microsoft/auto/sync-main-pr
dilanbhalla Jan 26, 2026
| https://github.com/github/codeql/pull/21928/commits/c4a73ddfec1c771b188056d327f25a0f568344d7 |
|
983fbc1
Port github/codeql#21202 to our fork (#319)
MathiasVP Jan 27, 2026
| https://github.com/github/codeql/pull/21928/commits/983fbc170859db7c8b426eca74e673621d510a3e |
|
0c0b2f2
added unit tests for cipher mode, obsolete kdf alg, weak symmetric alg
chanel-y Jan 27, 2026
| https://github.com/github/codeql/pull/21928/commits/0c0b2f2d6866ab98df7b4c5c8a1b9e7e72273d2b |
|
6648a6f
added qhelps, initial queries for cipher mode, symmetric, obsolete KD…
chanel-y Jan 27, 2026
| https://github.com/github/codeql/pull/21928/commits/6648a6fcf489c4cbbb6829f8b0df5c47fab9c734 |
|
1dc5ebf
C++: Port github/codeql#21212 to our fork (#321)
MathiasVP Jan 28, 2026
| https://github.com/github/codeql/pull/21928/commits/1dc5ebf55fb65890e7326fc9790cad9e0ead1ae2 |
|
4dcb6f1
Additional test cases and comments
bdrodes Jan 28, 2026
| https://github.com/github/codeql/pull/21928/commits/4dcb6f163a7988d251bf22ac5fb118079b1433f2 |
|
8f1d8d4
Merge branch 'main' into jb1/ap1-maturity
bdrodes Jan 28, 2026
| https://github.com/github/codeql/pull/21928/commits/8f1d8d474069aa9065ba21d5e7700171a4d35713 |
|
65d9a9d
Now using asDefinition to detect assignment to a year field. Misc cle…
bdrodes Jan 28, 2026
| https://github.com/github/codeql/pull/21928/commits/65d9a9dfa0b5917f02cd0f1b3d95bef1a3e05c06 |
|
2e613ac
Fixed expected results due to a line shift.
bdrodes Jan 28, 2026
| https://github.com/github/codeql/pull/21928/commits/2e613aca153974d2b78e10175e6e174fe9944709 |
|
a8d5357
Added an additional test case and fixed a false positive. Also noted …
bdrodes Jan 29, 2026
| https://github.com/github/codeql/pull/21928/commits/a8d5357026c362aba4f319e856261032fe7846be |
|
7604938
Added more heuristic ignorable functions.
bdrodes Jan 29, 2026
| https://github.com/github/codeql/pull/21928/commits/7604938960c0d7af72d9dd783748ce83c11b39ec |
|
27edb07
Adding new div 4 check and false positive test cases
bdrodes Jan 29, 2026
| https://github.com/github/codeql/pull/21928/commits/27edb0743bde3cd967692a22b62f1ca76fe97dae |
|
93c7e5d
Comment fix.
bdrodes Jan 29, 2026
| https://github.com/github/codeql/pull/21928/commits/93c7e5d5ad294feddffcaca32bd3e4a13f316c4f |
|
4ca54e9
moved crypto classes/methods to folder under lib
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/4ca54e9abdffa3ba553797cd1df1729e7ea1a0ec |
|
af5c15e
updated qhelps
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/af5c15e8c49d40eb0dd59aafbcaa341f5fdcf77f |
|
0949e96
query format
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/0949e96d6467f11c6c888befbb11fe805faadbdd |
|
2081c6f
addiitonal minor fixes
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/2081c6fc887c2822cfd7e323f4166d6991e8c6c0 |
|
b0d9776
added query tests
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/b0d9776299f092adc56837e7ee03965c3067eb5a |
|
738a697
added query, qhelp
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/738a6971254bd7f851d8fcb46e2c34f3b5180a87 |
|
86dfe52
Adding a fix and test case for a new false positive, also added a fal…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/86dfe52105dd705cc04e976a563db31147743106 |
|
7ff7006
Adding more false positive cases, and fixing prior test cases to be m…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/7ff70069aaf9a3147e9ba1ba7e0620b02dbaf9a0 |
|
3ba543e
More heuristics for culling non-gregorian year calculations.
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/3ba543ec301f41685597668f9ca0ad1666efcfc6 |
|
e2d3d15
Minor comment/description clean up, and added a test case and support…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/e2d3d1587c85ec1e2ec6b8f68a97fffd33ba5861 |
|
df3fcfc
Changing the name of a predicate to be more precise.
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/df3fcfc075febb99beafe9bdaa19f313302fd1aa |
|
ae2d156
update qhelp phrasing
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/ae2d156e382df30043b46730c208693977c9d8dc |
|
bf5e0ee
Apply suggestion from @MathiasVP
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/bf5e0ee6184ef32aaeedf6dfcc0805b8d86fe308 |
|
67b0bf1
updated shared crypto classes to be abstract, simplified logic for is…
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/67b0bf124219f7837abb58237c83ae815d7cf292 |
|
9c2525e
Apply suggestions from code review ty mathias <3
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/9c2525ea684946c255ef7af37399ec95f32b496a |
|
936a5c2
fixed test regression
chanel-y Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/936a5c2cf806eeb51293385314cf1c92f24d2641 |
|
2924f2b
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/2924f2b0758dcf2c9a2bf9b6a27d61e7c95ab1b2 |
|
afb058c
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/afb058c9b116126b8eab42102cbc029b39b90f5e |
|
56e9c1f
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Jan 30, 2026
| https://github.com/github/codeql/pull/21928/commits/56e9c1fba39a1f91c3eca84f6a69a6b51dde6028 |
|
606dfa7
minor refactor for readability
ropwareJB Feb 2, 2026
| https://github.com/github/codeql/pull/21928/commits/606dfa72b95059c2142ed1ccf87a74c867677df3 |
|
c7553d5
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Feb 2, 2026
| https://github.com/github/codeql/pull/21928/commits/c7553d515d93c791bc759b88752f9a7c90804c45 |
|
b1dff11
Add dry_run input to CodeQL pack publish workflow
dilanbhalla Feb 2, 2026
| https://github.com/github/codeql/pull/21928/commits/b1dff114f42239428705c1ebd21644764ec0f808 |
|
4c29fb8
Merge pull request #326 from microsoft/dilan/microsoft-pack-dryrun
dilanbhalla Feb 2, 2026
| https://github.com/github/codeql/pull/21928/commits/4c29fb884ea177629b312e6d2e077ffc1fd33ae1 |
|
1f63bee
Added a FP test case and corrected the leap year logic to no longer f…
bdrodes Feb 3, 2026
| https://github.com/github/codeql/pull/21928/commits/1f63bee6746693423a09b5c93ae885a9ed660bc9 |
|
c88b877
Merge branch 'jb1/ap1-maturity' of https://github.com/microsoft/codeq…
bdrodes Feb 3, 2026
| https://github.com/github/codeql/pull/21928/commits/c88b877f818ef1deb63738e775afc533ba3a9aa9 |
|
93eb345
Misc comments and added test cases.
bdrodes Feb 3, 2026
| https://github.com/github/codeql/pull/21928/commits/93eb3452e08dbd305a9e3613bd213de508e56868 |
|
fcab399
Add dry run option for CodeQL pack publish
dilanbhalla Feb 3, 2026
| https://github.com/github/codeql/pull/21928/commits/fcab39910b3cdb74547f050996ae7f21faffe481 |
|
8aff770
Merge pull request #327 from microsoft/dilan/microsoft-pack-dryrun-bug
dilanbhalla Feb 3, 2026
| https://github.com/github/codeql/pull/21928/commits/8aff770804453fc1831f5f1f8b65910c6457f919 |
|
557e86b
System to Variant time and Variant to System Time auto correct leap y…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/557e86b7969edfae5963362958576ca8171488f3 |
|
9205924
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/9205924430fd61bfd8daab2fe04b630a144a23e3 |
|
aab59f6
Update cpp/ql/src/Likely Bugs/Leap Year/LeapYear.qll
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/aab59f659f18bfd947a967bb6100c0f002600e15 |
|
45bff11
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/45bff1121203d6f6c4ee6495f71a77d4f950b9f0 |
|
321c2fa
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/321c2fa8e8bf2c8053af5466bd30a7c443826f2a |
|
31b9606
Update cpp/ql/src/Likely Bugs/Leap Year/UncheckedLeapYearAfterYearMod…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/31b96067d8ab46568af03748ee9f589fff3f14bc |
|
09f852e
PR suggestion fixes.
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/09f852e33c3c072d00c232b41f13ac13fa3c6c0e |
|
77da7fd
Merge branch 'jb1/ap1-maturity' of https://github.com/microsoft/codeq…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/77da7fdb8cdd82ff89bd083be38e1f3797ea2686 |
|
8d59b4c
Bug introduced in merge, missing "and"
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/8d59b4c6bc522754a5578176983eb64e03d06934 |
|
a209bd6
Correcting UnchedReturnValueForTimeFunctions to take into accoutn isA…
bdrodes Feb 6, 2026
| https://github.com/github/codeql/pull/21928/commits/a209bd68a482aaa5d5cad4fef428af6bce213ea0 |
|
e64bf9b
Merge branch 'main' into powershell-crypto
MathiasVP Feb 9, 2026
| https://github.com/github/codeql/pull/21928/commits/e64bf9b4fcbc84d53e1ec31bdf7c60dbfe09baf1 |
|
25df927
Merge pull request #322 from microsoft/powershell-crypto
MathiasVP Feb 10, 2026
| https://github.com/github/codeql/pull/21928/commits/25df927c8dec7a96b94e3f93df0636ad9e4bac25 |
|
c05e8a0
PS: Add script to generate PowerShell typemodels from a C# database.
MathiasVP Feb 17, 2026
| https://github.com/github/codeql/pull/21928/commits/c05e8a04bcdd62d9afc91f3afcc6ca5c407780d7 |
|
255aa39
C#: Generate type models for dotnet/sqlclient.
MathiasVP Feb 17, 2026
| https://github.com/github/codeql/pull/21928/commits/255aa3901172e2100b011755bd6c0ba7f9bef141 |
|
800f6dd
PS: Add a test demonstraing missing arguments for object creations.
MathiasVP Feb 18, 2026
| https://github.com/github/codeql/pull/21928/commits/800f6ddcf499cc195f8008f50cb70c44471a0efa |
|
2eb8b1a
PS: Fix two cases where a class was overriding the relevantChild pred…
MathiasVP Feb 18, 2026
| https://github.com/github/codeql/pull/21928/commits/2eb8b1a4b8ac27db74de2e9b9eab9b8ff0710f47 |
|
2b4ac31
PS: Accept test changes.
MathiasVP Feb 18, 2026
| https://github.com/github/codeql/pull/21928/commits/2b4ac31ecdc742c8dab3df52097566fe06fc5437 |
|
065ff29
manual merge
ropwareJB Feb 23, 2026
| https://github.com/github/codeql/pull/21928/commits/065ff294997f448a65ffc435bb28c248e62d6a84 |
|
80deee8
PS: Fixup PowerShell after https://github.com/github/codeql/pull/21051.
MathiasVP Feb 23, 2026
| https://github.com/github/codeql/pull/21928/commits/80deee81f8e83db3a2a43adc4737fc26a5426130 |
|
fbbb13a
Merge pull request #330 from microsoft/chanel-fixes
chanel-y Feb 23, 2026
| https://github.com/github/codeql/pull/21928/commits/fbbb13a74df53347255adf5d00fb5380a086e0f4 |
|
9cf0c79
Merge pull request #331 from microsoft/jb1/merge-upstream-latest
dilanbhalla Feb 23, 2026
| https://github.com/github/codeql/pull/21928/commits/9cf0c795726677d20562998bccd5c8697fe50fa1 |
|
d30c56f
C++: Provide barrier node API without the unit column when instantiat…
MathiasVP Feb 24, 2026
| https://github.com/github/codeql/pull/21928/commits/d30c56faf988daee3ff9821a3616fd1dba98b682 |
|
99b32b6
C++: Add change note.
MathiasVP Feb 24, 2026
| https://github.com/github/codeql/pull/21928/commits/99b32b6caa090824ed93ef3b58ce22c7f31d94d5 |
|
5f91a9d
C++: Make a test slightly more verbose to catch this issue in the fut…
MathiasVP Feb 24, 2026
| https://github.com/github/codeql/pull/21928/commits/5f91a9de90599b638f2db74d96ab5b44028386d9 |
|
d1d2417
Merge pull request #332 from microsoft/unbreak-changes-2
ropwareJB Feb 24, 2026
| https://github.com/github/codeql/pull/21928/commits/d1d24174e10a68b94a43beaa20139396ffa94d73 |
|
a3421d0
Merge branch 'main' into jb1/ap1-maturity
ropwareJB Mar 11, 2026
| https://github.com/github/codeql/pull/21928/commits/a3421d01be4375bc4dc2f6468e542904cb4930f3 |
|
f37ac50
Merge pull request #315 from microsoft/jb1/ap1-maturity
ropwareJB Mar 11, 2026
| https://github.com/github/codeql/pull/21928/commits/f37ac5042374bafef5632bebb44d19085d2b9bf4 |
|
097e96c
Manual merge of codeql-cli/latest
ropwareJB Mar 11, 2026
| https://github.com/github/codeql/pull/21928/commits/097e96c588b569ff3bf8089f6df87f8e5dbb0212 |
|
b4f81e7
Merge pull request #333 from microsoft/jb1/update-submodule
dilanbhalla Mar 11, 2026
| https://github.com/github/codeql/pull/21928/commits/b4f81e745d2411e95d9e70cde165c1786e4859c2 |
|
f0cf910
fix powershell extractor on Linux
LWSimpkins Mar 16, 2026
| https://github.com/github/codeql/pull/21928/commits/f0cf910dba8cae60662a05307f14290ac8a8094f |
|
2d1a722
Merge branch 'main' into lwsimpkins/powershell-extractor-linux
LWSimpkins Mar 16, 2026
| https://github.com/github/codeql/pull/21928/commits/2d1a7224e68c44841cd26c8f5750f25b82b94815 |
|
fca47c2
Revert upstream commits synced past codeql-cli/v2.24.3
Mar 18, 2026
| https://github.com/github/codeql/pull/21928/commits/fca47c24c5f2572c539313036cf1efc3f57e0e71 |
|
51ea591
Merge pull request #334 from microsoft/lwsimpkins/powershell-extracto…
MathiasVP Mar 18, 2026
| https://github.com/github/codeql/pull/21928/commits/51ea591170af18df4bdc3c07cff6aea024a09ae8 |
|
9eb5b93
Merge branch 'main' into fix/revert-sync-past-v2.24.3
dilanbhalla Mar 19, 2026
| https://github.com/github/codeql/pull/21928/commits/9eb5b9315269e27e9f596475673369b47d6abe53 |
|
a02bf27
Merge pull request #335 from microsoft/fix/revert-sync-past-v2.24.3
dilanbhalla Mar 20, 2026
| https://github.com/github/codeql/pull/21928/commits/a02bf2706c0ec73c9767b2104f5b4e08517ac425 |
|
769aacc
Merge codeql-cli/latest into auto/sync-main-pr
chanel-y Mar 20, 2026
| https://github.com/github/codeql/pull/21928/commits/769aacc7def08c2faaec5d323ddd30a890cdb992 |
|
c830ac7
Restore codeql/dataflowstack dependency in Java and C# qlpacks
Mar 24, 2026
| https://github.com/github/codeql/pull/21928/commits/c830ac7b8e313a8558b560d6e949668f650dd01e |
|
58c515b
Restore cpp dbscheme overlay types from v2.25.0 release
Mar 24, 2026
| https://github.com/github/codeql/pull/21928/commits/58c515b3bb805293719e5bb955bc8cfd9870fda5 |
|
ed72ad5
fix expr.qll and dbscheme merge issue
Mar 24, 2026
| https://github.com/github/codeql/pull/21928/commits/ed72ad51b6bd27455e7d64111c15815783427d5c |
|
ba3f298
Revert "Revert upstream commits synced past codeql-cli/v2.24.3"
Mar 24, 2026
| https://github.com/github/codeql/pull/21928/commits/ba3f2980d40a88e1f1b72095506795ec2a666e5b |
|
4f8cfb3
Merge pull request #337 from microsoft/auto/sync-main-pr
dilanbhalla Mar 24, 2026
| https://github.com/github/codeql/pull/21928/commits/4f8cfb35f74c0492dcf0f411000cd8413e7e2867 |
|
a3f6a98
Add Get-FileHash weak hash algorithm detection to powershell/weak-has…
Copilot Mar 25, 2026
| https://github.com/github/codeql/pull/21928/commits/a3f6a98809ff08aa94dca467ae7665c6996379dd |
|
32ea6a8
Merge pull request #338 from microsoft/copilot/update-powershell-weak…
chanel-y Mar 26, 2026
| https://github.com/github/codeql/pull/21928/commits/32ea6a8925b1fbd3b045896cdf2b7f4d7c296424 |
|
782b38a
C++: Switch to doublyBoundedFastTC when computing virtual dispatch ed…
MathiasVP Mar 26, 2026
| https://github.com/github/codeql/pull/21928/commits/782b38ab6bf32cb676155fab4c6845f0f22e2f80 |
|
da64e54
Merge pull request #341 from microsoft/ms-restrict-pair-cand
LWSimpkins Mar 26, 2026
| https://github.com/github/codeql/pull/21928/commits/da64e54ff611e2781004ceff50a7901e98c3a580 |
|
5758c7b
Merge tag 'codeql-cli/latest' into auto/sync-main-pr
Mar 27, 2026
| https://github.com/github/codeql/pull/21928/commits/5758c7be5287630700a0d2bdbbc5a6156ae050a3 |
|
2534dcf
Merge pull request #342 from microsoft/auto/sync-main-pr
dilanbhalla Apr 1, 2026
| https://github.com/github/codeql/pull/21928/commits/2534dcfa4a7faf847c217ff2913d6a7a6461eae0 |
|
fe2b23f
Shared: Also expose dataflow stage 1's forward flow predicate.
MathiasVP Apr 2, 2026
| https://github.com/github/codeql/pull/21928/commits/fe2b23f9c51b237b03864fb269ca4e29b9344530 |
|
708283c
Shared: Respond to review comments.
MathiasVP Apr 7, 2026
| https://github.com/github/codeql/pull/21928/commits/708283c917b70809164ac788deaa708650138c75 |
|
cccecc4
Merge pull request #343 from microsoft/ms-expose-fwd-stage-1
MathiasVP Apr 7, 2026
| https://github.com/github/codeql/pull/21928/commits/cccecc49e44c40e991756e86f6e4a0c7b89a7ac3 |
|
5abc596
Add weak HMAC algorithm detection query for PowerShell
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/5abc596162e5f1fa6fbb7c1386df0da36d7f74a1 |
|
cabf6d0
Add weak asymmetric key size detection query for PowerShell
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/cabf6d056a84c3d35501cfbdc3f11ca16944b274 |
|
125468d
Add deprecated TLS/SSL version detection query for PowerShell
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/125468deb3b1a598c297a19242bfd390fae00b8f |
|
07dfa9b
Add JWT none algorithm detection query for PowerShell
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/07dfa9b58c5477cdaaa01a7b82d0f4a66f9230d9 |
|
dfd2553
Weak RSA key size query, docs, test
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/dfd2553aab00faf23f9d07a9763fa8e060866200 |
|
2e342de
remove example from qhelp
chanel-y Apr 9, 2026
| https://github.com/github/codeql/pull/21928/commits/2e342de706b075dfe4d23224b09e1df12628e4a7 |
|
9bafbaf
Merge pull request #344 from microsoft/users/chanely/weak-asymmetric-key
MathiasVP Apr 10, 2026
| https://github.com/github/codeql/pull/21928/commits/9bafbafe4cbc89e0e3d563fb5ebca1b06b13eeea |
|
1f0f8e5
changed to just detect the .net usage, updated tests, added qhelp
chanel-y Apr 13, 2026
| https://github.com/github/codeql/pull/21928/commits/1f0f8e5a31c07e85600d119d2aabd9ce698ebf69 |
|
424ba6a
refactor classes to go into existing cryptography modules, added qhelp
chanel-y Apr 13, 2026
| https://github.com/github/codeql/pull/21928/commits/424ba6a30b0c1f8d8b18d745e22e87bc9b25a561 |
|
decbe38
make abstract class, remove microsoft from id, add qhelp
chanel-y Apr 13, 2026
| https://github.com/github/codeql/pull/21928/commits/decbe387db9a1c2b0443eec5bef08dd5d8af47a8 |
|
bd5be06
added additional unsafe deserializers to powershell query
chanel-y Apr 13, 2026
| https://github.com/github/codeql/pull/21928/commits/bd5be0657f99c016592ef99eb1e5b16316bd8122 |
|
f8fa93d
remove the tls query from this branch
chanel-y Apr 14, 2026
| https://github.com/github/codeql/pull/21928/commits/f8fa93d753413ca5ffd8b1d5bb33be17a6138e6e |
|
6da1c01
PS: Add false positive with GUID.
MathiasVP Apr 15, 2026
| https://github.com/github/codeql/pull/21928/commits/6da1c01058c0ab699c6249d0b7ddb155003d502b |
|
6465ecd
PS: Add GUIDs as a simple sanitizer, and accept test changes.
MathiasVP Apr 15, 2026
| https://github.com/github/codeql/pull/21928/commits/6465ecddba61ca11e41aa4c2f1b09bd253c0bb44 |
|
49336e3
added initial unsafe typenamehandling queries
chanel-y Apr 15, 2026
| https://github.com/github/codeql/pull/21928/commits/49336e311f11047712582c7ca57775b70938782d |
|
ac52680
Merge pull request #350 from microsoft/guid-sanitizer-ps
MathiasVP Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/ac52680dee9f6c961d22e30c6d5f6b7cdd7ec96c |
|
d824fd9
Merge branch 'main' into users/chanely/deprecated-tls
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/d824fd9567ba68dc55d16ce292487f6589078223 |
|
20f33c9
Merge branch 'main' into users/chanely/jwt-none-algorithm
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/20f33c919eab5670c2bcb3a2b5e460bdb633c509 |
|
9a9e8ad
Merge pull request #347 from microsoft/users/chanely/deprecated-tls
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/9a9e8ad24bb444d90b71ae55d61741ca589da648 |
|
1c8fe05
mathias PR feedback, quwery id update
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/1c8fe05048904074b9b2b8772c9978785e467918 |
|
d3c338e
Merge branch 'main' into users/chanely/jwt-none-algorithm
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/d3c338ecfe982fc11e911b73bfb601014c679552 |
|
54da53b
Merge pull request #345 from microsoft/users/chanely/jwt-none-algorithm
chanel-y Apr 16, 2026
| https://github.com/github/codeql/pull/21928/commits/54da53b60e1aaade32d73965d65279d40586d98c |
|
65fd69e
added queries + unit tests
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/65fd69e21712ef16f33b0240b978e884124bce23 |
|
f63c714
added InlineExpectationsTest query
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/f63c7147691aa2cafbd5eaab6f1744583bce5b12 |
|
b3626db
updated all powershell tests to use inline expectatoins
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/b3626dbdd7458541784963a45d4ce29cfff8a4ce |
|
ce35618
fixed tests, comments were put on wrong line ty copilot
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/ce35618f9a3d97ef4545961b4d07e165ae3eed81 |
|
a2d5377
reorganize without-binder query to use the existing typenamehandling …
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/a2d5377d06a36cd9110ce0e371315acf5bdf0562 |
|
378e74a
making TypeNameHandlingQuery.qll file readable
chanel-y Apr 17, 2026
| https://github.com/github/codeql/pull/21928/commits/378e74aaeef9397cf7e44d9e167f06bb0fc77dc5 |
|
1788a53
Merge branch 'main' into typenamehandling-queries
ropwareJB Apr 20, 2026
| https://github.com/github/codeql/pull/21928/commits/1788a53d0efe7e02869ff762db185066be014152 |
|
702deb4
Merge pull request #352 from microsoft/typenamehandling-queries
ropwareJB Apr 20, 2026
| https://github.com/github/codeql/pull/21928/commits/702deb44a7aefb3868c1ca6e028f4d577c8da169 |
|
341fba0
Merge tag 'codeql-cli/latest' into auto/sync-main-pr
MathiasVP Apr 21, 2026
| https://github.com/github/codeql/pull/21928/commits/341fba05af87b857d7517893f236ae58b3f2829b |
|
313a9c8
Merge branch 'main' into users/chanely/weak-hmac
MathiasVP Apr 22, 2026
| https://github.com/github/codeql/pull/21928/commits/313a9c88b6c6354636899cf879b99a94fec99d4a |
|
2f075f0
Merge branch 'main' into domain-squatting-powershell
MathiasVP Apr 22, 2026
| https://github.com/github/codeql/pull/21928/commits/2f075f0fe3f06136e2a4bc8222bd2ed64bd53dfc |
|
c76571c
Merge pull request #348 from microsoft/users/chanely/weak-hmac
MathiasVP Apr 22, 2026
| https://github.com/github/codeql/pull/21928/commits/c76571c056448ca173d81e2310031df9e58b46f9 |
|
f25e2f3
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Apr 22, 2026
| https://github.com/github/codeql/pull/21928/commits/f25e2f3f6900369d4affccd143f3fa0378884755 |
|
41736a4
Merge branch 'main' into additional-unsafe-deserializers
MathiasVP Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/41736a4f4f8017639d4652622cce0ac4e6dcbc03 |
|
0ff3ae8
Merge pull request #349 from microsoft/additional-unsafe-deserializers
MathiasVP Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/0ff3ae889eddf20b15a187300c939a5d52195cca |
|
e5284ea
Merge branch 'main' of https://github.com/microsoft/codeql into auto/…
Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/e5284ea309e04a3c51088c6cbf48c0a499d413e3 |
|
cf72f5c
Merge pull request #353 from microsoft/auto/sync-main-pr
dilanbhalla Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/cf72f5c172e05f79ac675f5851328e0aa4515151 |
|
e90b4be
Merge branch 'main' into domain-squatting-powershell
chanel-y Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/e90b4be8d2dd6f63b236d6586bce1196672775e3 |
|
beed435
Merge pull request #323 from microsoft/domain-squatting-powershell
MathiasVP Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/beed4354f3036d1f77181b0631e35e678bb901d1 |
|
ccd89e2
re-added deprecated TLS query
chanel-y Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/ccd89e2e1be88ef59cbe2e84a94b20aca6cca51e |
|
4239e8e
Merge pull request #354 from microsoft/deprecated-tls2
chanel-y Apr 24, 2026
| https://github.com/github/codeql/pull/21928/commits/4239e8e63d1089a6b47a9d392e903e4a7eda0add |
|
967a210
PS: Fix two bad joins.
MathiasVP Apr 27, 2026
| https://github.com/github/codeql/pull/21928/commits/967a210f0bbf41f5bfbcccc217b0fb24a32267ce |
|
d77eb9c
Merge branch 'main' into fix-joins-in-powershell
MathiasVP Apr 27, 2026
| https://github.com/github/codeql/pull/21928/commits/d77eb9c7d323945eaa2bfe7d1f33424b9c3bfb60 |
|
b6567f9
Merge pull request #355 from microsoft/fix-joins-in-powershell
MathiasVP Apr 27, 2026
| https://github.com/github/codeql/pull/21928/commits/b6567f9acfc759d77232a4e6c95495918fc47b2f |
|
d39e54a
Merge branch 'main' into powershell-inline-expectationstests
MathiasVP Apr 28, 2026
| https://github.com/github/codeql/pull/21928/commits/d39e54a76551ddda69ae54613bee1a3631916ed1 |
|
e702680
Merge pull request #351 from microsoft/powershell-inline-expectations…
MathiasVP Apr 28, 2026
| https://github.com/github/codeql/pull/21928/commits/e702680f0a6f668f187f6c01ce2f342f035d827f |
|
3f39c88
PS: Optimize 'ChildMapping' using forward/reverse pruning.
MathiasVP May 5, 2026
| https://github.com/github/codeql/pull/21928/commits/3f39c88a32a7d30cbb9a97187f14af06729a921c |
|
d52f413
Merge pull request #356 from microsoft/powershell-reverse-child-recur…
MathiasVP May 5, 2026
| https://github.com/github/codeql/pull/21928/commits/d52f413223c290c210cd41238d3fb9b8d524b960 |
|
c99b4de
explicitly add iac to workspace
ropwareJB Oct 20, 2025
| https://github.com/github/codeql/pull/21928/commits/c99b4de97dc19cb1b5aeb643b2c190e00aa226a4 |
|
0bb42f7
Rename ConditionKind to BinaryConditionKind to resolve name conflict …
gfs May 15, 2026
| https://github.com/github/codeql/pull/21928/commits/0bb42f7ae96ad8e00219cd87fcc8a638689dfa7f |
|
555456a
Merge pull request #357 from microsoft/gfs/RenameBinaryPackConditionKind
gfs May 15, 2026
| https://github.com/github/codeql/pull/21928/commits/555456a44daa707a1e087828497899374beb7c78 |
|
dea11e1
Merge branch 'main' into jb1/iac-qlpack
ropwareJB May 15, 2026
| https://github.com/github/codeql/pull/21928/commits/dea11e143ae605cea9784bbe98aa561392faba10 |
|
3f4d327
Merge pull request #359 from microsoft/jb1/iac-qlpack
ropwareJB May 15, 2026
| https://github.com/github/codeql/pull/21928/commits/3f4d32781c5807b90ca10bf20d6237080d373af8 |
|
a3cc253
Add parameter type signatures for IL and JVM methods (#358)
gfs May 15, 2026
| https://github.com/github/codeql/pull/21928/commits/a3cc25321681266bd371c33c9652356fccfbc4c6 |
|
6e238a7
Update ApprovedCipherMode query and tests
chanel-y May 20, 2026
| https://github.com/github/codeql/pull/21928/commits/6e238a761342afd4773446b958c98f7c4b5bb4da |
|
a5e5379
predicate -> abstract class, updated inline expectations
chanel-y May 21, 2026
| https://github.com/github/codeql/pull/21928/commits/a5e53797b31cc67428227912a244710701e61414 |
|
b18703e
update to use .getValue()
chanel-y May 26, 2026
| https://github.com/github/codeql/pull/21928/commits/b18703e2a890240decbabfcd2081346329a20d86 |
|
8635eaf
Merge pull request #361 from microsoft/approved-cipher-mode-changes
chanel-y May 27, 2026
| https://github.com/github/codeql/pull/21928/commits/8635eaf7a3e9b8c3cb527a45d2d42dca063fb9c5 |
|
c1ca997
merge upstream 2.25.5
Jun 1, 2026
| https://github.com/github/codeql/pull/21928/commits/c1ca9971585301667200ae6daa4818d18efa6909 |
|
Clear filters
| https://github.com/github/codeql/pull/21928/files |
| Please reload this page | https://github.com/github/codeql/pull/21928/files |
| Please reload this page | https://github.com/github/codeql/pull/21928/files |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L2 |
| .gitattributes | https://github.com/github/codeql/pull/21928/files#diff-618cd5b83d62060ba3d027e314a21ceaf75d36067ff820db126642944145393e |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.gitattributes |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/pull/21928/files#diff-618cd5b83d62060ba3d027e314a21ceaf75d36067ff820db126642944145393e |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L60 |
| .github/workflows/microsoft-codeql-pack-publish.yml | https://github.com/github/codeql/pull/21928/files#diff-f297e534d732ad4b1f3f3fb13eb1281e73635b237120b57303144f2b4b19f593 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/microsoft-codeql-pack-publish.yml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L60 |
| .github/workflows/powershell-pr-check.yml | https://github.com/github/codeql/pull/21928/files#diff-3de7089c3cfa033a5a1aeec21cace8927c27e6338bd999ddf06224ebf5c33b24 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/powershell-pr-check.yml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L60 |
| .github/workflows/sync-main-tags.yml | https://github.com/github/codeql/pull/21928/files#diff-0edd713634c6f6e8fc0d936ca28ff35549c266683ebab0cf05b066c7682fbe41 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/sync-main-tags.yml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L60 |
| .github/workflows/sync-main.yml | https://github.com/github/codeql/pull/21928/files#diff-56e8bcbe2912c5d0b0a2423a007aabc54ebf4bacf3b611f45ee47d6ff462ffbe |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.github/workflows/sync-main.yml |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L2 |
| .gitmodules | https://github.com/github/codeql/pull/21928/files#diff-fe7afb5c9c916e521401d3fcfb4277d5071798c3baf83baf11d6071742823584 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/.gitmodules |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L56 |
| README.md | https://github.com/github/codeql/pull/21928/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/README.md |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/pull/21928/files#diff-b335630551682c19a781afebcf4d07bf978fb1f8ac04c6bf87428ed5106870f5 |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L56 |
| SECURITY.md | https://github.com/github/codeql/pull/21928/files#diff-f6ed156e4bf5c791680662464b94ea5d753f219ee816b385f67870e2c0d7d4c7 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/SECURITY.md |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
|
| https://github.com/github/codeql/blob/main/CODEOWNERS#L2 |
| binary/.gitignore | https://github.com/github/codeql/pull/21928/files#diff-8bf682e50148a5a67367a761dbe3257f2d685cff76a90285bab8f1d24856ff56 |
|
View file
| https://github.com/microsoft/codeql/blob/c1ca9971585301667200ae6daa4818d18efa6909/binary/.gitignore |
|
Open in desktop
| https://desktop.github.com |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/21928/{{ revealButtonHref }} |
| Please reload this page | https://github.com/github/codeql/pull/21928/files |
| Please reload this page | https://github.com/github/codeql/pull/21928/files |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |