Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
github
/
codeql
Public
Notifications
You must be signed in to change notification settings
Fork
2.1k
Star
10k
Code
Issues
999
Pull requests
468
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
test
on
main
User selector
All users
Datepicker
All time
Commit history
Commits on Sep 2, 2026
Merge pull request #21387 from github/nicolaswill/micronaut
Show description for ed2b77e
owen-mc
authored
ed2b77e
View commit details
Copy full SHA for ed2b77e
View code at this point
Browse repository at this point
Commits on Aug 14, 2026
Java: Adapt to FlowSummaryImpl changes
hvitved
committed
b1c5b5b
View commit details
Copy full SHA for b1c5b5b
View code at this point
Browse repository at this point
Commits on Aug 13, 2026
Merge pull request #22315 from github/copilot/fix-valueof-call-site-issue
Show description for 9d247d6
hvitved
authored
9d247d6
View commit details
Copy full SHA for 9d247d6
View code at this point
Browse repository at this point
Commits on Aug 11, 2026
Merge pull request #22192 from michaelnebel/shared/modelgengeneric
Show description for 4e31516
michaelnebel
authored
4e31516
View commit details
Copy full SHA for 4e31516
View code at this point
Browse repository at this point
Java: Update test expectations
hvitved
committed
7e3c144
View commit details
Copy full SHA for 7e3c144
View code at this point
Browse repository at this point
Simplify test method signature
Show description for c601c6c
Copilot
and
hvitved
authored
c601c6c
View commit details
Copy full SHA for c601c6c
View code at this point
Browse repository at this point
Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments
Show description for 925d3e2
Copilot
and
hvitved
authored
925d3e2
View commit details
Copy full SHA for 925d3e2
View code at this point
Browse repository at this point
Commits on Aug 10, 2026
Java: test safe R2DBC parameter binding
Show description for 6919c3d
felickz
committed
6919c3d
View commit details
Copy full SHA for 6919c3d
View code at this point
Browse repository at this point
Commits on Aug 4, 2026
Java: add R2DBC SPI SQL injection sinks
Show description for 90b78c9
felickz
committed
90b78c9
View commit details
Copy full SHA for 90b78c9
View code at this point
Browse repository at this point
Java: cover R2DBC fluent execution paths
Show description for e079fdf
felickz
committed
e079fdf
View commit details
Copy full SHA for e079fdf
View code at this point
Browse repository at this point
Java: model R2DBC SQL injection sinks
Show description for 2e4a174
felickz
committed
2e4a174
View commit details
Copy full SHA for 2e4a174
View code at this point
Browse repository at this point
Fix Micronaut inline test expectations
nicolaswill
committed
126c292
View commit details
Copy full SHA for 126c292
View code at this point
Browse repository at this point
Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr
Show description for 9d164d0
nicolaswill
committed
9d164d0
View commit details
Copy full SHA for 9d164d0
View code at this point
Browse repository at this point
Commits on Jul 29, 2026
Correct Micronaut cookie and map coverage
nicolaswill
committed
26b37ad
View commit details
Copy full SHA for 26b37ad
View code at this point
Browse repository at this point
Address Micronaut modeling review feedback
nicolaswill
committed
6ac1a72
View commit details
Copy full SHA for 6ac1a72
View code at this point
Browse repository at this point
Commits on Jul 28, 2026
Update java/ql/test/library-tests/dataflow/taintsources/MicronautConfig.java
Show description for 3bf0c86
mbaluda
and
owen-mc
authored
3bf0c86
View commit details
Copy full SHA for 3bf0c86
View code at this point
Browse repository at this point
Update java/ql/test/library-tests/frameworks/micronaut/MicronautConfigTest.java
Show description for 2512213
mbaluda
and
Copilot
authored
2512213
View commit details
Copy full SHA for 2512213
View code at this point
Browse repository at this point
Commits on Jul 17, 2026
Java: Add java generics test cases.
michaelnebel
committed
f184d28
View commit details
Copy full SHA for f184d28
View code at this point
Browse repository at this point
Commits on Jul 11, 2026
Fix path sanitizer
owen-mc
committed
6057b4b
View commit details
Copy full SHA for 6057b4b
View code at this point
Browse repository at this point
Commits on Jul 8, 2026
Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization
Show description for 134e302
owen-mc
authored
134e302
View commit details
Copy full SHA for 134e302
View code at this point
Browse repository at this point
Commits on Jul 7, 2026
Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink
Show description for 8363d2d
owen-mc
authored
8363d2d
View commit details
Copy full SHA for 8363d2d
View code at this point
Browse repository at this point
Java: Model Spring reactive `WebClient.uri` as a request forgery sink
joshimar
committed
1db3132
View commit details
Copy full SHA for 1db3132
View code at this point
Browse repository at this point
Commits on Jul 3, 2026
Fix @Pattern sanitizer for TaintedPath
owen-mc
committed
76b4f4f
View commit details
Copy full SHA for 76b4f4f
View code at this point
Browse repository at this point
Add failing TaintedPath test for @Pattern sanitizer
owen-mc
committed
077b531
View commit details
Copy full SHA for 077b531
View code at this point
Browse repository at this point
Commits on Jun 30, 2026
Merge branch 'main' into mad-write-through-model
MathiasVP
committed
b7b731b
View commit details
Copy full SHA for b7b731b
View code at this point
Browse repository at this point
Merge pull request #22077 from geoffw0/javainline
Show description for c0871de
geoffw0
authored
c0871de
View commit details
Copy full SHA for c0871de
View code at this point
Browse repository at this point
Commits on Jun 26, 2026
Java: Add missing $ Source annotations.
geoffw0
committed
897d169
View commit details
Copy full SHA for 897d169
View code at this point
Browse repository at this point
Java: Label spurious results.
geoffw0
committed
6f997ae
View commit details
Copy full SHA for 6f997ae
View code at this point
Browse repository at this point
Java: Move $ Source annotations that were incorrectly placed.
geoffw0
committed
300e48e
View commit details
Copy full SHA for 300e48e
View code at this point
Browse repository at this point
Java: Make some $ Source annotations query specific.
geoffw0
committed
f840f61
View commit details
Copy full SHA for f840f61
View code at this point
Browse repository at this point
Java: Fix a library test.
MathiasVP
committed
7861e9e
View commit details
Copy full SHA for 7861e9e
View code at this point
Browse repository at this point
Commits on Jun 23, 2026
Java: Accept test changes.
aschackmull
committed
11725e8
View commit details
Copy full SHA for 11725e8
View code at this point
Browse repository at this point
Commits on Jun 12, 2026
Remove confusing comments
owen-mc
committed
4bc083f
View commit details
Copy full SHA for 4bc083f
View code at this point
Browse repository at this point
Add SPURIOUS and MISSING alerts based on existing comments
owen-mc
committed
89c1d66
View commit details
Copy full SHA for 89c1d66
View code at this point
Browse repository at this point
Commits on Jun 10, 2026
Second pass
owen-mc
committed
3693185
View commit details
Copy full SHA for 3693185
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.