github/codeql

Are the Actions model files in ext/manual and ext/generated actively used and maintained?

question

#21570

· XinyuZhangXvX opened

on Mar 24, 2026

Crash due to unknown string encoding

question

#21569

· edmcman opened

on Mar 24, 2026

False positive: Incorrect CodeQL model for step-security/harden-runner action

false-positive

#21568

· XinyuZhangXvX opened

on Mar 24, 2026

Azure DevOps Ubuntu 24.04 DB Creation for C#

question

#21562

· Tingle01 opened

on Mar 24, 2026

perf: dont build classes which aren't used

question

#21559

· k4lizen opened

on Mar 23, 2026

False Negative: Unsafe hostname verification is under-modeled in anonymous classes, lambdas, and API variants.

#21556

· Carlson-JLQ opened

on Mar 23, 2026

False Negative: IterableIterator.ql misses `iterator() == this` implementations once the guard logic is hidden behind helpers or trivial control flow.

#21551

· Carlson-JLQ opened

on Mar 23, 2026

False Positive: IterableIterator.ql reports classes whose `hasNext()` still reliably disables iteration.

#21550

· Carlson-JLQ opened

on Mar 23, 2026

False Negative: ImproperWebViewCertificateValidation.ql misses unconditional `handler.proceed()` calls once they are hidden behind aliases or tiny wrappers.

#21549

· Carlson-JLQ opened

on Mar 23, 2026

False Negative: ImplicitPendingIntents.ql misses mutable implicit PendingIntents once they are stored, enriched, or sent through slightly noisier code paths.

#21548

· Carlson-JLQ opened

on Mar 23, 2026

False Negative: EqualsArray.ql misses array identity comparisons once the array is widened to `Object` or routed through helper APIs.

#21547

· Carlson-JLQ opened

on Mar 23, 2026

False Negative: DoubleCheckedLockingWithInitRace.ql misses initialization races once the double-checked pattern is split across helpers or early returns.

#21546

· Carlson-JLQ opened

on Mar 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Are the Actions model files in ext/manual and ext/generated actively used and maintained?

Crash due to unknown string encoding

False positive: Incorrect CodeQL model for step-security/harden-runner action

Azure DevOps Ubuntu 24.04 DB Creation for C#

perf: dont build classes which aren't used

False Negative: Unsafe hostname verification is under-modeled in anonymous classes, lambdas, and API variants.

False Negative: IterableIterator.ql misses `iterator() == this` implementations once the guard logic is hidden behind helpers or trivial control flow.

False Positive: IterableIterator.ql reports classes whose `hasNext()` still reliably disables iteration.

False Negative: ImproperWebViewCertificateValidation.ql misses unconditional `handler.proceed()` calls once they are hidden behind aliases or tiny wrappers.

False Negative: ImplicitPendingIntents.ql misses mutable implicit PendingIntents once they are stored, enriched, or sent through slightly noisier code paths.

False Negative: EqualsArray.ql misses array identity comparisons once the array is widened to `Object` or routed through helper APIs.

False Negative: DoubleCheckedLockingWithInitRace.ql misses initialization races once the double-checked pattern is split across helpers or early returns.

Issues

Search results