All pull requests

Pull requests

• Test changed-query workflow

  #406·Chanel (chanel-y) opened Sep 29, 2026·

  ·

• Run unit tests when queries are updated

  #405·Chanel (chanel-y) opened Sep 29, 2026·

  ·

• Actions: Fix FP cases for critical TOCTOU precision

  #404·Chanel (chanel-y) opened Sep 28, 2026·

  ·

• Actions: Fix FP case for if-expression-always-true/high

  #403·Chanel (chanel-y) opened Sep 28, 2026·

  ·

• Add Kubernetes and Compose YAML models

  #402·Chanel (chanel-y) opened Sep 17, 2026·

  ·

• Pin GitHub Actions to full-length commit SHAs

  #395·Dan Fiedler (danfiedler-msft) opened Sep 8, 2026·

  ·

• X++: add extractor and QL library generated from the compiler's own AST

  #392·Giulia Stocco (gfs) opened Aug 17, 2026Collaborator·

  ·
  1

• Mrva powershell pack split

  #389·Chanel (chanel-y) opened Aug 10, 2026·

  ·
  1

• PS: Add import clixml sink to unsafe deserialization query

  #377·Chanel (chanel-y) opened Jul 22, 2026·

  ·

• rust: Add config-derived host barrier for XSS

  #375·Chanel (chanel-y) opened Jul 20, 2026·

  ·

• rust: Add config-derived table name barrier for SQL injection

  #374·Chanel (chanel-y) opened Jul 20, 2026·

  ·

• Powershell Pack Rename

  #369·dilanbhalla opened Jun 17, 2026Collaborator·

  ·
  1

• js/sql-injection: detect mssql query/batch called as standalone functions after destructuring

  #340·chanel-y with CopilotAI opened Mar 25, 2026·

  ·
  

• Revert "fix powershell extractor on Linux"

  #336·Mathias Vorreiter Pedersen (MathiasVP) opened Mar 18, 2026Collaborator·

  ·

• Removing high FP case in IncorrectUsageOfRtlCompareMemory, altering t…

  #328·Ben Rodes (bdrodes) opened Feb 12, 2026·

  ·

• Azure python ssrf sanitizers

  #325·Ben Rodes (bdrodes) opened Feb 2, 2026·

  ·

• Azure python sdk url summary local

  #324·Ben Rodes (bdrodes) opened Feb 2, 2026·

  ·

• Highly experimental false positive reduction tweaks

  #314·Ben Rodes (bdrodes) opened Dec 18, 2025·

  ·

• Azure SDK models for SSRF analysis.

  #289·Ben Rodes (bdrodes) opened Sep 26, 2025·

  ·

• C++: Add 'asParameter' on Definition.

  #280·Mathias Vorreiter Pedersen (MathiasVP) opened Sep 8, 2025Collaborator·

  ·

• PS: Workflow to build the PS extractor

  #274·Mathias Vorreiter Pedersen (MathiasVP) opened Aug 21, 2025Collaborator·

  ·

• csharp ssrf

  #236·Lindsay Simpkins (LWSimpkins) opened May 23, 2025Collaborator·

  ·
  3

• DO NOT MERGE: Perform alias analysis in C/C++ dataflow

  #177·Mathias Vorreiter Pedersen (MathiasVP) opened Mar 12, 2025Collaborator·

  ·

• PS: Fix spelling error

  #150·Mathias Vorreiter Pedersen (MathiasVP) opened Dec 6, 2024Collaborator·

  ·

• Failed Extraction Queries Resubmit

  #148·dilanbhalla opened Dec 3, 2024Collaborator·

  ·