CodeQL documentation
CodeQL resources
CodeQL overview
CodeQL guides
Writing CodeQL queries
CodeQL language guides
Reference docs
QL language reference
CodeQL standard-libraries
CodeQL query help
Source files
CodeQL repository
Academic
QL publications
CodeQL query help for C and C++
CodeQL query help for C#
CodeQL query help for GitHub Actions
CodeQL query help for Go
Arbitrary file access during archive extraction (”Zip Slip”)
Arbitrary file write extracting an archive containing symbolic links
Bad redirect check
Bitwise exclusive-or used like exponentiation
Clear-text logging of sensitive information
Command built from user-controlled sources
Comparison of identical values
Constant length comparison
Cookie ‘HttpOnly’ attribute is not set to true
Cookie ‘Secure’ attribute is not set to true
Cross-site scripting via HTML template escaping bypass
Database query built from user-controlled sources
Disabled TLS certificate check
Duplicate ‘if’ branches
Duplicate ‘if’ condition
Duplicate switch case
Email content injection
Expression has no effect
Identical operands
Impossible interface nil check
Incomplete URL scheme check
Incomplete regular expression for hostnames
Inconsistent direction of for loop
Incorrect conversion between integer types
Information exposure through a stack trace
Insecure TLS configuration
Log entries created from user input
Missing JWT signature check
Missing error check
Missing regular expression anchor
Off-by-one comparison against length
Open URL redirect
Potentially unsafe quoting
Redundant call to recover
Redundant check for negative value
Reflected cross-site scripting
Self assignment
Shift out of range
Size computation for allocation may overflow
Slice memory allocation with excessive size value
Suspicious characters in a regular expression
Uncontrolled data used in network request
Uncontrolled data used in path expression
Unreachable statement
Use of a broken or weak cryptographic algorithm
Use of a broken or weak cryptographic hashing algorithm on sensitive data
Use of a weak cryptographic key
Use of constant
state
value in OAuth 2.0 URL
Use of insecure HostKeyCallback implementation
Use of insufficient randomness as the key of a cryptographic algorithm
Useless assignment to field
Useless assignment to local variable
Whitespace contradicts operator precedence
Wrapped error is always nil
Writable file handle closed without error handling
XPath injection
CodeQL query help for Java and Kotlin
CodeQL query help for JavaScript and TypeScript
CodeQL query help for Python
CodeQL query help for Ruby
CodeQL query help for Rust
CodeQL query help for Swift
CodeQL CWE coverage