12 Pull requests merged by 6 people

• Rust: Implement type inference for closures and calls to closures

  #20130 merged Jul 30, 2025

• SSA: Update data flow integration and BarrierGuard interface to use GuardValue.

  #20132 merged Jul 30, 2025

• Java: Move extractorInformationSkipKey predicate to library pack

  #20134 merged Jul 29, 2025

• Rust: Type inference for impl trait types with type parameters

  #20119 merged Jul 28, 2025

• Copilot: Remove the formatting instructions, as they're confusing CCR.

  #20128 merged Jul 28, 2025

• Rust: Fix type inference for trait objects for traits with associated types

  #20122 merged Jul 26, 2025

• Rust: Update DotDotCheck to use getCanonicalPath

  #19804 merged Jul 25, 2025

• Rust: Replace QL model for Clone with MaD

  #20124 merged Jul 25, 2025

• Python: Modernise raise-not-implemented query

  #20086 merged Jul 24, 2025

• Kotlin: Add Kotlin 2.2.20 support

  #20114 merged Jul 24, 2025

• Python: Minor documantation updates to several quality queries

  #20052 merged Jul 24, 2025

• Rust: Implement type inference for trait objects/dyn types

  #20084 merged Jul 24, 2025

13 Pull requests opened by 9 people

• Python: Modernize Unexpected Raise In Special Method query

  #20120 opened Jul 24, 2025

• Guards: Improve support for wrapped guards

  #20121 opened Jul 24, 2025

• C++: Fix missing global variable flow

  #20126 opened Jul 25, 2025

• Java: Improve a couple of join-orders

  #20127 opened Jul 25, 2025

• C++: Static variables are initialized to zero or null by compiler

  #20129 opened Jul 27, 2025

• Rust: Support blanket implementations

  #20133 opened Jul 28, 2025

• JS: Modeling of `aws-sdk` clients*

  #20135 opened Jul 28, 2025

• Java: Add test for flexible constructor support

  #20136 opened Jul 29, 2025

• Rust: New Query rust/cleartext-storage-database

  #20137 opened Jul 29, 2025

• C++: Fix missing guard conditions for C++ code

  #20138 opened Jul 29, 2025

• JS: Move cors-misconfiguration query from experimental to Security

  #20139 opened Jul 30, 2025

• Rust: Improve handling of where clauses in type inference and path resolution

  #20140 opened Jul 30, 2025

• Kotlin: Support 2.2.20-beta2

  #20141 opened Jul 30, 2025

2 Issues closed by 2 people

• Spread unidentified

  #19914 closed Jul 26, 2025

• Python: Aiopg.qll misses some SQL injection sinks in aiopg

  #20111 closed Jul 24, 2025

3 Issues opened by 3 people

• CWE 134

  #20131 opened Jul 28, 2025

• For an abstract class in the CodeQL source code, how can I quickly find all the classes that extend this abstract class from the CodeQL library?

  #20125 opened Jul 25, 2025

• CWE-918 (SSRF) - Java - False Positive Justification

  #20117 opened Jul 23, 2025

12 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Java: Add support to Compact Source Files

  #20116 commented on Jul 30, 2025 • 3 new comments

• Java: Add support to `ModuleImportDeclaration`

  #20097 commented on Jul 30, 2025 • 1 new comment

• Code scanning is waiting for results from CodeQL; CodeQL is stuck

  #19671 commented on Jul 23, 2025 • 0 new comments

• CodeQL detected code written in `some language`, but not any written in GitHub Actions. Confirm that there is some source code for GitHub Actions in the project.

  #20102 commented on Jul 24, 2025 • 0 new comments

• [python] The tuple (*) argument of a call cannot step to function parameter for the CommandInjectionCustomizations flow

  #19900 commented on Jul 25, 2025 • 0 new comments

• Better explain how to exclude paths for compiled languages

  #8689 commented on Jul 28, 2025 • 0 new comments

• General issue - When using `--build-mode=none`, Windows builds produce `Extraction error: 'MsvcCompiler' object has no attribute 'clangpp'`

  #20071 commented on Jul 28, 2025 • 0 new comments

• UnvalidatedDynamicMethodCall query does not detect flow inside try/catch

  #20098 commented on Jul 28, 2025 • 0 new comments

• Question: C# analysis without building the code, on Azure DevOps

  #16070 commented on Jul 29, 2025 • 0 new comments

• Idea/Feature request: codeql as MCP Server

  #19150 commented on Jul 29, 2025 • 0 new comments

• Rust: Update SqlxQuery, SqlxExecute to use getCanonicalPath

  #19802 commented on Jul 24, 2025 • 0 new comments

• Python: Modernize 4 queries for missing/multiple calls to init/del methods

  #19932 commented on Jul 24, 2025 • 0 new comments