CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
This report presents the forensic synthetic code analysis of github/codeql, a CodeQL project with 9,824 GitHub stars. SynthScan v2.0 examined 972,134 lines of code across 20660 source files, recording 2773 pattern matches distributed across 25 syntactic categories. The overall adjusted score of 4.2 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 2773 distinct pattern matches across 25 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/test/test_qlgen.py | 9 | CODE | |
| LOW | misc/codegen/test/test_trapgen.py | 5 | CODE | |
| LOW | misc/codegen/test/test_cppgen.py | 5 | CODE | |
| LOW | misc/codegen/test/test_ql.py | 5 | CODE | |
| LOW | misc/codegen/test/test_dbschemelaoder.py | 6 | CODE | |
| LOW | misc/codegen/test/test_dbscheme.py | 5 | CODE | |
| LOW | misc/codegen/test/test_schemaloader.py | 6 | CODE | |
| LOW | misc/codegen/test/test_render.py | 5 | CODE | |
| LOW | misc/codegen/test/test_dbschemegen.py | 6 | CODE | |
| LOW | misc/codegen/lib/ql.py | 18 | CODE | |
| LOW | misc/codegen/lib/dbscheme.py | 5 | CODE | |
| LOW | misc/codegen/lib/schema.py | 7 | CODE | |
| LOW | misc/codegen/lib/schema.py | 7 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/__init__.py | 1 | CODE | |
| LOW | misc/codegen/generators/rusttestgen.py | 3 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 31 | CODE | |
| LOW | misc/codegen/generators/rustgen.py | 5 | CODE | |
| LOW | misc/codegen/generators/dbschemegen.py | 23 | CODE | |
| LOW | misc/codegen/loaders/schemaloader.py | 13 | CODE | |
| LOW | misc/scripts/patch_query_history.py | 14 | CODE | |
| LOW | misc/scripts/stageoverlap.py | 4 | CODE | |
| LOW | misc/scripts/models-as-data/convert_extensions.py | 5 | CODE | |
| LOW | misc/scripts/models-as-data/convert_extensions.py | 7 | CODE | |
| LOW | go/gen.py | 15 | CODE | |
| LOW | go/ql/integration-tests/root-internal-tests/test.py | 1 | CODE | |
| LOW | go/ql/integration-tests/traced-extraction/test.py | 1 | CODE | |
| LOW | go/ql/integration-tests/query-suite/test.py | 3 | CODE | |
| LOW | …nostics/build-constraints-exclude-all-go-files/test.py | 2 | CODE | |
| LOW | go/ql/integration-tests/test-extraction/test.py | 1 | CODE | |
| LOW | …ols/recorded-call-graph-metrics/src/cg_trace/tracer.py | 7 | CODE | |
| LOW | python/extractor/setup.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/imp.py | 10 | CODE | |
| LOW | python/extractor/buildtools/index.py | 14 | CODE | |
| LOW | …integration-test/python-2-deprecation/repo_dir/test.py | 3 | CODE | |
| LOW | …integration-test/python-2-deprecation/repo_dir/test.py | 5 | CODE | |
| LOW | …ration-test/disable-library-extraction/repo_dir/foo.py | 1 | CODE | |
| LOW | …actor/cli-integration-test/ignore-venv/repo_dir/foo.py | 1 | CODE | |
| LOW | …hon/extractor/tokenizer_generator/gen_state_machine.py | 25 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 5 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 6 | CODE | |
| LOW | python/extractor/lark/lark.py | 1 | CODE | |
| LOW | python/extractor/lark/__init__.py | 1 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 2 | CODE | |
| LOW | python/extractor/lark/__init__.py | 3 | CODE | |
| LOW | python/extractor/lark/__init__.py | 3 | CODE | |
| LOW | python/extractor/lark/__init__.py | 4 | CODE | |
| LOW | python/extractor/lark/__init__.py | 4 | CODE | |
| 692 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | python/extractor/lark/load_grammar.py | 459 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 461 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 475 | # ================= | COMMENT |
| MEDIUM | python/extractor/lark/load_grammar.py | 477 | # ================= | COMMENT |
| MEDIUM | …ry-tests/Security/CWE-326-WeakCryptoKey/weak_crypto.py | 79 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 1 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 3 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 24 | # ============================================================================== | COMMENT |
| MEDIUM | …l/library-tests/CallGraph/code/callable_as_argument.py | 26 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | …ental/library-tests/CallGraph/code/funky_regression.py | 18 | # ============================================================================== | COMMENT |
| MEDIUM⚡ | …ental/library-tests/CallGraph/code/funky_regression.py | 20 | # ============================================================================== | COMMENT |
| MEDIUM | …erimental/library-tests/CallGraph/code/nested_class.py | 19 | # ============================================================================== | COMMENT |
| MEDIUM | …erimental/library-tests/CallGraph/code/nested_class.py | 45 | # ============================================================================== | COMMENT |
| MEDIUM | …tal/library-tests/CallGraph/code/class_construction.py | 67 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …ental/library-tests/CallGraph/code/runtime_decision.py | 29 | # ============================================================================== | COMMENT |
| MEDIUM | …imental/library-tests/CallGraph/code/class_subclass.py | 80 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …imental/library-tests/CallGraph/code/class_subclass.py | 82 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 4 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 6 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 53 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …est/library-tests/dataflow/callgraph_crosstalk/test.py | 55 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 91 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 93 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 125 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …/ql/test/library-tests/dataflow/sensitive-data/test.py | 127 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 81 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 83 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 110 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 124 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 126 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 156 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 158 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …on/ql/test/library-tests/dataflow/typetracking/test.py | 175 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …on/ql/test/library-tests/dataflow/typetracking/test.py | 177 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 199 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …on/ql/test/library-tests/dataflow/typetracking/test.py | 201 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 70 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 72 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 81 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 83 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 142 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | …library-tests/dataflow/typetracking/attribute_tests.py | 144 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …library-tests/dataflow/typetracking/attribute_tests.py | 182 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | …library-tests/dataflow/typetracking/attribute_tests.py | 184 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 181 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 183 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 207 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 209 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 552 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 554 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 556 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 558 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 605 | # -------------------------------------- | COMMENT |
| MEDIUM⚡ | python/ql/test/library-tests/dataflow/fieldflow/test.py | 607 | # -------------------------------------- | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 40 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 42 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 240 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 242 | # ------------------------------------------------------------------------------ | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 323 | # -------------------------------------- | COMMENT |
| MEDIUM | python/ql/test/library-tests/dataflow/fieldflow/test.py | 325 | # -------------------------------------- | COMMENT |
| 150 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/requirements_lock.txt | 1 | # | COMMENT |
| LOW | misc/bazel/internal/zipmerge/zipmerge.cpp | 21 | #include <stdbool.h> | COMMENT |
| LOW | misc/bazel/3rdparty/patch_defs.py | 1 | import sys | COMMENT |
| LOW | misc/scripts/create-change-note.py | 1 | #!/usr/bin/env python3 | COMMENT |
| LOW | go/extractor/extractor.go | 221 | COMMENT | |
| LOW | go/extractor/extractor.go | 301 | COMMENT | |
| LOW | go/extractor/util/semver.go | 41 | func (ver semVer) String() string { | COMMENT |
| LOW | go/extractor/project/project.go | 461 | for _, component := range components { | COMMENT |
| LOW | go/extractor/autobuilder/build-environment.go | 221 | // We never return a version of Go that is outside of the supported range. | COMMENT |
| LOW | go/ql/test/query-tests/Security/CWE-798/jwt.go | 1 | package main | COMMENT |
| LOW | go/ql/test/query-tests/Security/CWE-643/tst.go | 1 | package main | COMMENT |
| LOW | go/ql/test/experimental/CWE-942/CorsMisconfiguration.go | 181 | // // OK-ish: the input origin header is validated against a whitelist. | COMMENT |
| LOW | …l/test/experimental/CWE-522-DecompressionBombs/test.go | 1 | package main | COMMENT |
| LOW | go/ql/test/library-tests/semmle/go/Types/cyclic.go | 21 | // type w struct { | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 1 | //go:generate swagger generate spec -o swagger.json | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 61 | // | COMMENT |
| LOW | …works/Revel/examples/booking/app/controllers/hotels.go | 81 | // - text/html | COMMENT |
| LOW | …/semmle/go/frameworks/Twirp/rpc/notes/service.twirp.go | 801 | } | COMMENT |
| LOW | …/semmle/go/frameworks/Twirp/rpc/notes/service.twirp.go | 821 | // service. Those accessors are a low-level API for building reflection tools. | COMMENT |
| LOW | go/ql/integration-tests/dep-sample/work/Gopkg.toml | 1 | # Gopkg.toml example | COMMENT |
| LOW | …tion-tests/diagnostics/no-go-files-found/work/test.txt | 1 | // The "Go files were found but not processed" diagnostic should not be emitted because there are no go files | COMMENT |
| LOW | go/ql/lib/ext/mime.multipart.model.yml | 1 | extensions: | COMMENT |
| LOW | …l-graph-metrics/src/cg_trace/bytecode_reconstructor.py | 201 | obj_expr = expr_that_added_elem_to_stack(instructions, index - 1, 0) | COMMENT |
| LOW | python/extractor/tsg-python/tsp/bindings/rust/lib.rs | 1 | // -*- coding: utf-8 -*- | COMMENT |
| LOW | python/extractor/tsg-python/tsp/bindings/rust/lib.rs | 21 | //! let parsed = parser.parse(code, None); | COMMENT |
| LOW | …thon/extractor/tsg-python/tsp/src/tree_sitter/parser.h | 1 | #ifndef TREE_SITTER_PARSER_H_ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 1 | #ifndef TREE_SITTER_ARRAY_H_ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 141 | (other)->contents = _array_swap_tmp; \ | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 161 | /// of a given struct field (specified with a leading dot) to determine the order. | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/array.h | 321 | #pragma warning(pop) | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/alloc.h | 21 | #define ts_malloc ts_current_malloc | COMMENT |
| LOW | python/extractor/tsg-python/tsp/src/tree_sitter/alloc.h | 41 | #ifndef ts_realloc | COMMENT |
| LOW | python/extractor/buildtools/index.py | 221 | # `site-packages` as a subfolder. | COMMENT |
| LOW | python/extractor/buildtools/index.py | 341 | options += exclude_venvs_options() | COMMENT |
| LOW | python/extractor/buildtools/index.py | 361 | COMMENT | |
| LOW | python/extractor/lark/lark.py | 221 | def parse(self, text): | COMMENT |
| LOW | python/extractor/lark/parsers/xearley.py | 1 | "This module implements an experimental Earley Parser with a dynamic lexer" | COMMENT |
| LOW | python/extractor/lark/parsers/earley.py | 1 | "This module implements an Earley Parser" | COMMENT |
| LOW | python/extractor/lark/tools/standalone.py | 1 | # This file used to contain the Lark standalone tool. | COMMENT |
| LOW | python/extractor/tests/test_parser.py | 61 | pyfile = os.path.join(self.test_folder, filename) | COMMENT |
| LOW | python/extractor/tests/tokenizer/utf8.py | 1 | # Some abitrary prefix with no space beforecoding: utf-8 -*- | COMMENT |
| LOW | python/extractor/tests/parser/just_comments.py | 1 | # This is a comment | COMMENT |
| LOW | python/extractor/semmle/python/passes/labeller.py | 81 | if isinstance(outer.scope, ast.Class): | COMMENT |
| LOW | python/extractor/semmle/python/parser/tokenizer.py | 261 | #8 = CharacterClass 8 ['#'] | COMMENT |
| LOW | python/extractor/semmle/python/parser/tokenizer.py | 281 | #28 = CharacterClass 28 ['>'] | COMMENT |
| LOW | python/extractor/blib2to3/Grammar.txt | 21 | COMMENT | |
| LOW | python/extractor/blib2to3/Grammar.txt | 41 | [',' ['**' tname [',']]] | '**' tname [',']) | COMMENT |
| LOW | python/extractor/blib2to3/Grammar.txt | 201 | # This was an issue because the parser would not follow the correct derivation | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 21 | #class CommentedOut: | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 41 | # '''Doc string | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 61 | # """ | COMMENT |
| LOW | …ql/test/query-tests/Lexical/commented_out_code/test.py | 81 | # call() | COMMENT |
| LOW | …s/Security/CWE-113-HeaderInjection/Tests1/http_test.py | 21 | # httpd = HTTPServer(("127.0.0.1", 8080), VulnerableHandler) | COMMENT |
| LOW | …on/ql/test/query-tests/Security/CWE-730-ReDoS/redos.py | 1 | import re | COMMENT |
| LOW | …l/test/query-tests/Security/CWE-730-ReDoS/KnownCVEs.py | 41 | COMMENT | |
| LOW | …y-tests/Security/CWE-089-SqlInjection/sql_injection.py | 21 | cursor.execute("SELECT * FROM users WHERE username = '%s'" % username) # $ Alert | COMMENT |
| LOW | …/CWE-918-ServerSideRequestForgery/full_partial_test.py | 21 | # NOT OK -- user has full control | COMMENT |
| LOW | …l/query-tests/Security/CWE-079/smtplib_bad_subparts.py | 41 | # if __name__ == "__main__": | COMMENT |
| LOW | …ql/test/library-tests/dataflow/coverage-py2/classes.py | 1 | # Python 2 specific tests, like the one in coverage/classes.py | COMMENT |
| LOW | …ql/test/library-tests/dataflow/coverage-py3/classes.py | 1 | # Python 3 specific tests, like the one in coverage/classes.py | COMMENT |
| 523 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/pytest/lib/query_suites.py | 17 | def check_queries_not_included(codeql, cwd, expected_files, semmle_code_dir): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 90 | def generate_children_implementations(generate): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 99 | def _filter_generated_classes(ret, output_test_files=False): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 199 | def test_one_empty_internal_class(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 278 | def test_internal_not_in_import_list(generate_import_list): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 685 | def test_repeated_unordered_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 725 | def test_repeated_optional_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 794 | def test_single_class_property(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 884 | def test_root_element_cannot_have_children(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 952 | def test_format_no_codeql_in_path(opts, generate, render_manager, run_mock): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 989 | def test_modified_stub_skipped(qlgen_opts, generate, render_manager): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1020 | def test_test_source_present_with_dir(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1031 | def test_test_total_properties(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1061 | def test_test_partial_properties(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1099 | def test_test_properties_deduplicated(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1128 | def test_test_properties_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1158 | def test_test_base_class_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1178 | def test_test_final_class_skipped(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1199 | def test_test_class_hierarchy_collapse(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1226 | def test_test_class_hierarchy_uncollapse(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1255 | def test_test_class_hierarchy_uncollapse_at_final(opts, generate_tests): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1293 | def test_property_description(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1327 | def test_property_doc_override(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1356 | def test_repeated_property_doc_override(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1402 | def test_property_doc_abbreviations(generate_classes, abbr, expected): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1433 | def test_property_doc_abbreviations_ignored_if_within_word( | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1466 | def test_repeated_property_doc_override_with_format(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1515 | def test_repeated_property_doc_override_with_multiple_formats(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1560 | def test_property_doc_override_with_format(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1592 | def test_property_on_class_with_default_doc_name(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1623 | def test_stub_on_class_with_synth_from_class(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1662 | def test_stub_on_class_with_synth_on_arguments(generate_classes): | CODE |
| LOW | misc/codegen/test/test_qlgen.py | 1811 | def test_property_with_custom_db_table_name(generate_classes): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 68 | def test_trap_has_first_field_marked(): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 80 | def test_tag_has_first_base_marked(): | CODE |
| LOW | misc/codegen/test/test_cpp.py | 95 | def test_class_has_first_base_marked(): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 72 | def test_one_empty_table_rejected(generate_traps): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 118 | def test_one_table_with_two_binding_first_is_id(generate_traps): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 150 | def test_one_table_special_types(generate_traps, column, field): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 164 | def test_one_table_overridden_unsigned_field(generate_traps, name): | CODE |
| LOW | misc/codegen/test/test_trapgen.py | 174 | def test_one_table_overridden_underscore_named_field(generate_traps): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 109 | def test_class_field_with_null(generate, input): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 139 | def test_class_with_predicate(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 168 | def test_class_with_overridden_unsigned_field(generate, name): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 185 | def test_class_with_overridden_underscore_field(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 203 | def test_class_with_keyword_field(generate, name): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 261 | def test_synth_classes_ignored(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 287 | def test_synth_properties_ignored(generate): | CODE |
| LOW | misc/codegen/test/test_cppgen.py | 316 | def test_properties_with_custom_db_table_names(generate): | CODE |
| LOW | misc/codegen/test/test_ql.py | 8 | def test_property_has_first_table_param_marked(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 26 | def test_property_indefinite_article(name, expected_getter): | CODE |
| LOW | misc/codegen/test/test_ql.py | 32 | def test_property_unordered_getter(name, expected_getter): | CODE |
| LOW | misc/codegen/test/test_ql.py | 45 | def test_property_is_repeated(plural, expected): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 89 | def test_property_no_plural_no_indefinite_getter(): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 99 | def test_property_predicate_getter(): | CODE |
| LOW⚡ | misc/codegen/test/test_ql.py | 104 | def test_class_processes_bases(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 116 | def test_class_has_first_property_marked(): | CODE |
| LOW | misc/codegen/test/test_ql.py | 160 | def test_synth_accessor_has_first_constructor_param_marked(): | CODE |
| LOW | misc/codegen/test/test_dbschemelaoder.py | 24 | def test_load_one_empty_table(load): | CODE |
| LOW | misc/codegen/test/test_dbschemelaoder.py | 35 | def test_load_table_with_keyset(load): | CODE |
| 503 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | python/extractor/semmle/graph.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | a simple directed graph class (not necessarily a dag). nodes must be hashable | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | add an edge (x -> y) to the graph. return true if x, y was previously in graph | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all nodes, in the form (node, note) pairs. do not modify the graph while using this iterator | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all edges, in the form of (pred, succ, note) triple. do not modify the graph while using this ite | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator for all nodes with no predecessors. do not modify the graph while using this iterator | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | a digraph that supports the concept of definitions and variables. used to compute dominance and ssa form. for more expla | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | ensures that 'what' has been computed (computing if needed). | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns an iterable of node pairs: node, idom(node) | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the dominance frontier: df[n] = df_local[n] union over c in children df_up[c] | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the phi nodes for this graph. a minimal set of phi-nodes are computed; no phi-nodes are added unless the variabl | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute the ssa variables, definitions, uses and phi-inputs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | ensure that there is no more than one ssa variable for each (variable, node) pair. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns all the ssa definition as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns the definition node of var. returns none if there is no definition. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | returns all the ssa uses as an iterator of (node, variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return all ssa phi inputs as an iterator of (variable, input-variable) pairs. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute all flow nodes that are the first node in a basic block. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | return an iterator over all node in basic block 'bb. | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute which variables have been defined. a variable is defined at node n, if there is a path to n which passes through | STRING |
| HIGH | python/extractor/semmle/graph.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| HIGH | python/ql/test/query-tests/analysis/pointsto/test.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| HIGH | …n/ql/test/library-tests/ControlFlow/successors/test.py | 0 | compute liveness of all variables in this flow-graph. return a mapping of basic blocks to the set of variables that are | STRING |
| 19 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ibrary-tests/frameworks/django-v2-v3/FileField_test.py | 23 | upload_2 = django.db.models.fields.files.FileField(upload_to=custom_path_function_2) | CODE |
| CRITICAL | …ts/frameworks/django-orm/testapp/orm_security_tests.py | 84 | from django.core.exceptions import ValidationError | CODE |
| CRITICAL | …s/v_1_8_0/getJvmModuleNameForDeserializedDescriptor.kt | 7 | return org.jetbrains.kotlin.load.kotlin.getJvmModuleNameForDeserializedDescriptor(descriptor) | CODE |
| CRITICAL | …mmle/tests/TempDirLocalInformationDisclosure/Test.java | 97 | File tempDir = com.google.common.io.Files.createTempDir(); // $ Alert | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 29 | new io.netty.handler.codec.http.DefaultCookie("name", name); | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 33 | new io.netty.handler.codec.http.DefaultCookie("password", password); | CODE |
| CRITICAL⚡ | …CleartextStorageCookie/CleartextStorageCookieTest.java | 37 | new io.netty.handler.codec.http.cookie.DefaultCookie("password", encrypt(password)); | CODE |
| CRITICAL | …uery-tests/security/CWE-330/InsecureRandomCookies.java | 25 | new io.netty.handler.codec.http.DefaultCookie("name", Integer.toString(c)); // $ Alert | CODE |
| CRITICAL | …uery-tests/security/CWE-330/InsecureRandomCookies.java | 28 | new io.netty.handler.codec.http.cookie.DefaultCookie("name", Integer.toString(c)); // $ Alert | CODE |
| CRITICAL | …s/security/CWE-798/semmle/tests/HardcodedShiroKey.java | 26 | cookieRememberMeManager.setCipherKey(org.apache.shiro.codec.Base64.decode("6ZmI6I2j5Y+R5aSn5ZOlAA==")); // $ Har | CODE |
| CRITICAL | java/ql/lib/CHANGELOG.md | 1200 | * Added flow summary for `org.springframework.data.repository.CrudRepository.save()`. | COMMENT |
| CRITICAL | java/ql/lib/change-notes/released/0.4.0.md | 33 | * Added flow summary for `org.springframework.data.repository.CrudRepository.save()`. | COMMENT |
| CRITICAL | …tal/Security/CWE/CWE-078/JSchOSInjectionSanitized.java | 6 | if (!com.google.common.net.InetAddresses.isInetAddress(untrusted)) { | CODE |
| CRITICAL | …l/src/Security/CWE/CWE-200/TempDirUsageVulnerable.java | 12 | File tempDir = com.google.common.io.Files.createTempDir(); // BAD: CVE-2020-8908: Directory has permissions `drw | CODE |
| CRITICAL | …builder/Semmle.Autobuild.CSharp/StandaloneBuildRule.cs | 15 | : BuildScript.Create(_ => Semmle.Extraction.CSharp.Standalone.Program.Main([])); | CODE |
| CRITICAL | …rosoft/aspnetcore/blazor/Components_MyInput_razor.g.cs | 80 | __builder.AddAttribute(2, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateBi | CODE |
| CRITICAL | …rosoft/aspnetcore/blazor/Components_MyInput_razor.g.cs | 82 | Param1 = __value; return global::Microsoft.AspNetCore.Components.CompilerServices.RuntimeHelpers.InvokeA | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 215 | __builder.AddComponentParameter(42, nameof(global::Microsoft.AspNetCore.Components.Forms.InputText.ValueChan | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 255 | __builder.AddAttribute(57, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateB | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 295 | __builder.AddAttribute(71, "onchange", global::Microsoft.AspNetCore.Components.EventCallback.Factory.CreateB | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 402 | __builder.AddComponentParameter(99, nameof(global::BlazorTest.Components.MyInput.Param1Changed), global::Mic | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 448 | __builder.AddComponentParameter(113, nameof(global::BlazorTest.Components.MyInput.Param1Changed), global::Mi | CODE |
| CRITICAL | …aspnetcore/blazor/Components_Pages_TestPage_razor.g.cs | 488 | __builder.AddComponentParameter(122, nameof(global::Microsoft.AspNetCore.Components.Forms.InputText.ValueCha | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 219 | testlib.typevar.a.b.c.mySink(source()); // OK - does not match sub path | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 225 | testlib.typevar.left.x.right.mySink(source()); // NOT OK | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 226 | testlib.typevar.left.left.x.right.right.mySink(source()); // NOT OK | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 227 | testlib.typevar.left.x.right.right.mySink(source()); // OK - mismatched left and right | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 228 | testlib.typevar.left.left.x.right.mySink(source()); // OK - mismatched left and right | CODE |
| CRITICAL⚡ | …vascript/ql/test/library-tests/frameworks/data/test.js | 233 | testlib.typevar.left.x.right.getThis().getThis().mySink(source()); // NOT OK | CODE |
| CRITICAL | …/ql/test/library-tests/dataflow/summaries/summaries.rb | 37 | Bar.new.next.next.next.next.method(tainted) # $ hasValueFlow=tainted | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | misc/scripts/generate-code-scanning-query-list.py | 132 | except Exception as e: | CODE |
| MEDIUM⚡ | misc/scripts/generate-code-scanning-query-list.py | 133 | print("Error: couldn't invoke 'git'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW⚡ | misc/scripts/generate-code-scanning-query-list.py | 139 | except Exception as e: | CODE |
| MEDIUM⚡ | misc/scripts/generate-code-scanning-query-list.py | 140 | print("Error: couldn't invoke CodeQL CLI 'codeql'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW | misc/scripts/generate-code-scanning-query-list.py | 173 | except Exception as e: | CODE |
| LOW | misc/scripts/models-as-data/bulk_generate_mad.py | 141 | except Exception as e: | CODE |
| LOW | misc/scripts/library-coverage/generate-report.py | 87 | except Exception as e: | CODE |
| MEDIUM | misc/scripts/library-coverage/generate-report.py | 88 | print("Error: couldn't invoke CodeQL CLI 'codeql'. Is it on the path? Aborting.", file=sys.stderr) | CODE |
| LOW | misc/scripts/library-coverage/comment-pr.py | 63 | except Exception as e: | CODE |
| LOW | misc/scripts/library-coverage/comment-pr.py | 90 | except Exception: | CODE |
| LOW | …ols/recorded-call-graph-metrics/src/cg_trace/tracer.py | 267 | except Exception: | CODE |
| LOW | python/extractor/python_tracer.py | 29 | except Exception: | CODE |
| MEDIUM | python/extractor/python_tracer.py | 18 | def load_library(): | CODE |
| LOW | python/extractor/buildtools/version.py | 51 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 116 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 144 | except Exception: | CODE |
| LOW | python/extractor/buildtools/version.py | 205 | except Exception: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 68 | except Exception as ex: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 73 | except Exception: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 97 | except Exception as ex1: | CODE |
| LOW | python/extractor/buildtools/auto_install.py | 100 | except Exception as ex2: | CODE |
| MEDIUM | python/extractor/buildtools/auto_install.py | 65 | def try_install_with_deps(req, venv): | CODE |
| MEDIUM | python/extractor/buildtools/install.py | 69 | print('Error trying to run get_venv_lib (this is Python {})'.format(sys.version[:5])) | CODE |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 168 | except Exception as ex: | CODE |
| LOW | python/extractor/tests/test_tokenizer.py | 45 | except Exception as ex: | CODE |
| LOW | python/extractor/tests/tokenizer/basic.py | 32 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/worker.py | 218 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/worker.py | 274 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 316 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 320 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 326 | except Exception as ex: | CODE |
| LOW⚡ | python/extractor/semmle/worker.py | 335 | except Exception as ex: | CODE |
| MEDIUM | python/extractor/semmle/worker.py | 165 | def receive(self, block=False): | CODE |
| MEDIUM | python/extractor/semmle/worker.py | 234 | def _drain_queue(queue): | CODE |
| LOW | python/extractor/semmle/logging.py | 111 | except Exception: | CODE |
| LOW | python/extractor/semmle/logging.py | 136 | except Exception: | CODE |
| LOW | python/extractor/semmle/logging.py | 200 | except Exception: | CODE |
| LOW | python/extractor/semmle/util.py | 378 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/cache.py | 44 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 58 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 71 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 83 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 99 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 105 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 112 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 118 | except Exception: | CODE |
| LOW⚡ | python/extractor/semmle/cache.py | 123 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 146 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 166 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/cache.py | 171 | except Exception: | CODE |
| LOW | python/extractor/semmle/cache.py | 183 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/cache.py | 187 | except Exception: | CODE |
| MEDIUM | python/extractor/semmle/cache.py | 80 | def _list_files(self): | CODE |
| MEDIUM | python/extractor/semmle/cache.py | 109 | def clear(self): | CODE |
| LOW | python/extractor/semmle/profiling.py | 53 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/populator.py | 98 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/python/finder.py | 241 | except Exception: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 89 | except Exception as ex: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 126 | except Exception: | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 198 | except Exception as ex: | CODE |
| 109 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/codegen.py | 21 | CODE | |
| LOW | misc/codegen/test/test_qlgen.py | 99 | CODE | |
| LOW | misc/codegen/lib/schemadefs.py | 321 | CODE | |
| LOW | misc/codegen/lib/schemadefs.py | 336 | CODE | |
| LOW | misc/codegen/lib/render.py | 157 | CODE | |
| LOW | misc/codegen/lib/render.py | 173 | CODE | |
| LOW | misc/codegen/lib/render.py | 211 | CODE | |
| LOW | misc/codegen/generators/trapgen.py | 71 | CODE | |
| LOW | misc/codegen/generators/rusttestgen.py | 53 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 480 | CODE | |
| LOW | misc/codegen/generators/qlgen.py | 134 | CODE | |
| LOW | misc/codegen/generators/dbschemegen.py | 46 | CODE | |
| LOW | misc/bazel/internal/install.py | 66 | CODE | |
| LOW | misc/scripts/calculate_mrva_totals.py | 63 | CODE | |
| LOW | misc/scripts/accept-expected-changes-from-ci.py | 93 | CODE | |
| LOW | misc/scripts/accept-expected-changes-from-ci.py | 229 | CODE | |
| LOW | misc/scripts/library-coverage/generate-report.py | 33 | CODE | |
| LOW | …l-graph-metrics/src/cg_trace/bytecode_reconstructor.py | 185 | CODE | |
| LOW | …s/recorded-call-graph-metrics/src/cg_trace/exporter.py | 7 | CODE | |
| LOW | python/extractor/imp.py | 225 | CODE | |
| LOW | python/extractor/buildtools/version.py | 155 | CODE | |
| LOW | python/extractor/buildtools/semmle/requirements.py | 108 | CODE | |
| LOW | python/extractor/buildtools/semmle/requirements.py | 123 | CODE | |
| LOW | python/extractor/tokenizer_generator/machine.py | 123 | CODE | |
| LOW | python/extractor/tokenizer_generator/machine.py | 307 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 138 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 24 | CODE | |
| LOW | …on/extractor/tokenizer_generator/tokenizer_template.py | 87 | CODE | |
| LOW | …hon/extractor/tokenizer_generator/gen_state_machine.py | 93 | CODE | |
| LOW | python/extractor/lark/parser_frontends.py | 160 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 336 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 525 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 183 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 290 | CODE | |
| LOW | python/extractor/lark/load_grammar.py | 589 | CODE | |
| LOW | python/extractor/lark/visitors.py | 22 | CODE | |
| LOW | python/extractor/lark/lark.py | 103 | CODE | |
| LOW | python/extractor/lark/utils.py | 59 | CODE | |
| LOW | python/extractor/lark/lexer.py | 124 | CODE | |
| LOW | python/extractor/lark/lexer.py | 74 | CODE | |
| LOW | python/extractor/lark/exceptions.py | 26 | CODE | |
| LOW | python/extractor/lark/reconstruct.py | 26 | CODE | |
| LOW | python/extractor/lark/parse_tree_builder.py | 27 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_parser.py | 32 | CODE | |
| LOW | python/extractor/lark/parsers/cyk.py | 136 | CODE | |
| LOW | python/extractor/lark/parsers/xearley.py | 51 | CODE | |
| LOW | python/extractor/lark/parsers/xearley.py | 84 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_analysis.py | 57 | CODE | |
| LOW | python/extractor/lark/parsers/lalr_analysis.py | 61 | CODE | |
| LOW | python/extractor/lark/parsers/grammar_analysis.py | 47 | CODE | |
| LOW | python/extractor/lark/parsers/earley.py | 98 | CODE | |
| LOW | python/extractor/lark/tools/nearley.py | 105 | CODE | |
| LOW | python/extractor/tests/test_parser.py | 99 | CODE | |
| LOW | python/extractor/semmle/query_gen.py | 116 | CODE | |
| LOW | python/extractor/semmle/worker.py | 261 | CODE | |
| LOW | python/extractor/semmle/worker.py | 165 | CODE | |
| LOW | python/extractor/semmle/worker.py | 201 | CODE | |
| LOW | python/extractor/semmle/logging.py | 151 | CODE | |
| LOW | python/extractor/semmle/logging.py | 189 | CODE | |
| LOW | python/extractor/semmle/util.py | 367 | CODE | |
| 85 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | misc/codegen/test/test_schemaloader.py | 792 | assert data.null_class is data.classes[data.null] | CODE |
| HIGH | misc/codegen/lib/schema.py | 167 | return self.classes[self.null] if self.null else None | CODE |
| HIGH | misc/codegen/generators/dbschemegen.py | 164 | Union(dbtype(t, data.null), [dbtype(t), dbtype(data.null)]) | CODE |
| HIGH | misc/codegen/loaders/schemaloader.py | 187 | f"Null class {null} already defined, second null class {name} not allowed" | CODE |
| HIGH | misc/codegen/loaders/schemaloader.py | 198 | null=null, | CODE |
| HIGH | misc/bazel/internal/git_lfs_probe.py | 221 | git lfs fetch && git lfs checkout | CODE |
| HIGH | misc/bazel/internal/git_lfs_probe.py | 223 | git lfs fetch && git lfs checkout""", file=sys.stderr) | CODE |
| HIGH | python/extractor/semmle/python/passes/exports.py | 103 | in the __all__ list or, if __all__ is undefined, is defined at top-level | STRING |
| HIGH | python/extractor/semmle/python/passes/flow.py | 1890 | '''If SSA_Var node is undefined, then FlowGraph inserts a None - | STRING |
| HIGH | python/extractor/blib2to3/pgen2/parse.py | 147 | self.push(t, self.grammar.dfas[t], newstate, context) | CODE |
| HIGH | …Security/CWE-078-CommandInjection/command_injection.py | 69 | using the filename `not-there || echo pwned`. | STRING |
| HIGH | …/query-tests/Variables/undefined/UninitializedLocal.py | 183 | if not var or other: #other looks like it might be undefined, but it is defined. | CODE |
| HIGH | python/ql/test/library-tests/PointsTo/absent/absent.py | 26 | @deco(undefined) | CODE |
| HIGH⚡ | …on/ql/test/library-tests/ControlFlow/splitting/test.py | 243 | if not var or other.attr: #other looks like it might be undefined, but it is defined. | CODE |
| HIGH | rust/schema/annotations.py | 518 | x && y; | STRING |
| HIGH | …rc/utils/flowtestcasegenerator/GenerateFlowTestCase.py | 166 | testJava.write("\t%s obj%d = null;\n" % (outerName, i)) | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | misc/scripts/create-change-note.py | 145 | # Create the change note file | COMMENT |
| MEDIUM | misc/scripts/shared-code-metrics.py | 111 | # Create a list of assets | COMMENT |
| MEDIUM | misc/scripts/shared-code-metrics.py | 185 | # Create a big index of all files and their line counts. | COMMENT |
| MEDIUM | misc/scripts/models-as-data/convert_extensions.py | 95 | # Create a file for each namespace and save models. | COMMENT |
| MEDIUM | misc/scripts/models-as-data/generate_mad.py | 238 | # Create a file for each namespace and save models. | COMMENT |
| MEDIUM | python/extractor/imp.py | 1 | """This module provides the components needed to build your own __import__ | STRING |
| MEDIUM | …tion-test/writing-diagnostics/repo_dir/syntaxerror1.py | 1 | # This file contains a deliberate syntax error | COMMENT |
| MEDIUM | …hon/extractor/tokenizer_generator/gen_state_machine.py | 194 | print("# This file is AUTO-GENERATED. DO NOT MODIFY") | STRING |
| MEDIUM | python/extractor/lark/parsers/lalr_parser.py | 1 | """This module implements a LALR(1) Parser | STRING |
| MEDIUM | python/extractor/lark/parsers/cyk.py | 1 | """This module implements a CYK parser.""" | STRING |
| MEDIUM | python/extractor/semmle/python/extractor.py | 71 | #Create an AST equivalent to an empty file, so that the other passes produce consistent output. | COMMENT |
| MEDIUM | python/extractor/semmle/python/passes/objects.py | 323 | #Create an object for 'exec', as parser no longer treats it as statement. | COMMENT |
| MEDIUM | python/extractor/semmle/python/parser/tokenizer.py | 1 | # This file is AUTO-GENERATED. DO NOT MODIFY | COMMENT |
| MEDIUM | …l/query-tests/Security/CWE-079/smtplib_bad_subparts.py | 18 | # Create the plain-text and HTML version of your message | COMMENT |
| MEDIUM | …query-tests/Security/CWE-079/smtplib_bad_via_attach.py | 21 | # Create the plain-text and HTML version of your message | COMMENT |
| MEDIUM | python/ql/test/experimental/attrs/test.py | 1 | # This file is a simple test of which nodes are included with AttrRead/AttrWrite. | COMMENT |
| MEDIUM | …rary-tests/PointsTo/new/code/v_pointsto_regressions.py | 1 | # This file contains snippets from snapshots that displayed interesting results for `ImpliesDataflow.ql`. | COMMENT |
| MEDIUM | python/ql/test/library-tests/regexparser/locations.py | 3 | # This file contains tests for the regexp parser's location tracking. | COMMENT |
| MEDIUM | …eworks/serverless/aws_lambda/function/extra_lambdas.py | 9 | # This function is not mentioned in template.yml | COMMENT |
| MEDIUM | …t/library-tests/frameworks/django-v2-v3/taint_forms.py | 45 | # This method is supposed to clean the `foo` field in context of this form. | COMMENT |
| MEDIUM | …thon/ql/lib/semmle/python/frameworks/Asyncpg.model.yml | 27 | # Creating an internal `~Connection` type that contains both `Connection` and `ConnectionPool`. | COMMENT |
| MEDIUM | config/sync-files.py | 150 | # This function is invoked directly by a CI script, which passes a different error-handling | COMMENT |
| MEDIUM | …tegration-tests/update-ferstl-depgraph-dependencies.sh | 138 | # Create a minimal stub project with no dependencies. Using an empty project | COMMENT |
| MEDIUM | docs/codeql/query-help/conf.py | 5 | # This file is execfile()d with the current directory set to its | COMMENT |
| MEDIUM | docs/codeql/ql-training/conf.py | 5 | # This file is execfile()d with the current directory set to its | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | go/ql/test/query-tests/Security/CWE-640/main.go | 168 | var email = "test@test.com" | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 12 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 15 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 23 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 26 | doReturn(0).when(employeeRecordMock).get("John Doe"); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 35 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 38 | when(employeeRecordMock.get("John Doe")).thenReturn(sampleEmployee); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 39 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 48 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 51 | doReturn(0).when(employeeRecordMock).get("John Doe"); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | …/query-tests/ExcessivePublicMethodMocking/TestORM.java | 52 | doReturn(0).when(employeeRecordMock).update(sampleEmployee, "Jane Doe"); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 146 | compliantStrings.add("lorem ipsum dolor "+"sit amet"); // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 147 | compliantStrings.add("lorem ipsum dolor " + "sit amet"); // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 148 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 148 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 150 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 150 | compliantStrings.add("lorem ipsum dolor sit amet, consectetur adipiscing elit, " + // COMPLIANT | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 155 | lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW⚡ | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 155 | lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 172 | nonCompliantStrings.add("loremipsum dolor sit amet,consectetur adipiscing elit, " + // NON_COMPLIANT | STRING |
| LOW | …licitControlAndWhitespaceCharsInLiterals/CharTest.java | 175 | loremipsum dolor sit amet,consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et d | CODE |
| LOW | …t/library-tests/dataflow/taint/StringBuilderTests.java | 55 | sb.append("from preferences select locale where user='placeholder'"); | CODE |
| LOW | … Practice/Undesirable Calls/CallsToStringToString.java | 2 | String name = "John Doe"; | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 27 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 30 | when(employeeRecordMock.get("John Doe")).thenReturn(sampleEmployee); // Mocked EmployeeRecord.get | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 31 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 37 | Employee sampleEmployee = new Employee("John Doe"); | CODE |
| LOW⚡ | … Best Practice/Testing/ExcessivePublicMethodMocking.md | 40 | when(employeeRecordMock.update(sampleEmployee, "Jane Doe")).thenReturn(0); // Mocked EmployeeRecord.update | CODE |
| LOW | …ations of Best Practice/DontUseConstructorArgIndex.xml | 4 | <constructor-arg index="0" value="John Doe"/> | CODE |
| LOW | …ations of Best Practice/DontUseConstructorArgIndex.xml | 12 | <constructor-arg type="java.lang.String" value="Jane Doe"/> | CODE |
| LOW | …rc/Likely Bugs/Cloning/MissingCallToSuperCloneBad.java | 23 | WrongEmployee e = new WrongEmployee("John Doe"); | CODE |
| LOW | …c/Likely Bugs/Cloning/MissingCallToSuperCloneGood.java | 26 | Employee e2 = new Employee("Jane Doe"); | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 23 | slug: ["placeholder"] | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 24 | ref: ["placeholder"] | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 29 | - slug: "placeholder" | CODE |
| LOW⚡ | .github/workflows/mad_regenerate-models.yml | 30 | ref: "placeholder" | CODE |
| LOW | …/Security Features/CWE-798/TestHardcodedCredentials.cs | 28 | email: "foo@bar.com", | CODE |
| LOW | …/Security Features/CWE-798/TestHardcodedCredentials.cs | 45 | email: "foo@bar.com", | CODE |
| LOW | …ests/Security Features/CWE-798/HardcodedCredentials.cs | 34 | email: "foo@bar.com", | CODE |
| LOW | javascript/extractor/tests/ui5/input/test.view.json | 7 | "placeholder": "Enter Payload", | CODE |
| LOW | …tests/Security/CWE-918/axiosInterceptors.serverSide.js | 21 | axios.get("placeholder"); | CODE |
| LOW | …/test/library-tests/StringConcatenation/html-concat.js | 10 | <i>Lorem ipsum!</i>`; | CODE |
| LOW | …ry-tests/frameworks/active_resource/active_resource.rb | 9 | alice.address = "123 Main Street" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/extractor/semmle/traverser.py | 18 | __all__ = [ 'Traverser' ] | CODE |
| LOW | python/extractor/semmle/profiling.py | 7 | __all__ = [ 'get_profiler' ] | CODE |
| LOW | python/extractor/semmle/python/AstMeta.py | 9 | __all__ = [ 'order' ] | CODE |
| LOW | python/extractor/semmle/python/extractor.py | 20 | __all__ = [ 'Extractor', 'CachingExtractor' ] | CODE |
| LOW | python/extractor/semmle/python/imports.py | 15 | __all__ = [ 'CachingModuleImporter', 'ModuleImporter', 'importer_from_options' ] | CODE |
| LOW | python/extractor/semmle/python/modules.py | 15 | __all__ = [ 'PythonSourceModule' ] | CODE |
| LOW | python/extractor/semmle/python/passes/ast_pass.py | 8 | __all__ = [ 'ASTPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/labeller.py | 8 | __all__ = [ 'Labeller' ] | CODE |
| LOW | python/extractor/semmle/python/passes/flow.py | 17 | __all__ = [ 'FlowPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/lexical.py | 9 | __all__ = [ 'LexicalPass' ] | CODE |
| LOW | python/extractor/semmle/python/passes/pruner.py | 22 | __all__ = [ 'do_pruning' ] | CODE |
| LOW | python/extractor/semmle/python/passes/objects.py | 28 | __all__ = [ 'ObjectPass' ] | CODE |
| LOW | python/extractor/blib2to3/pgen2/driver.py | 16 | __all__ = ["load_grammar"] | CODE |
| LOW | python/extractor/blib2to3/pgen2/tokenize.py | 38 | __all__ = [x for x in dir(token) if x[0] != '_'] + ["tokenize", | CODE |
| LOW | python/ql/test/query-tests/Imports/general/module.py | 4 | __all__ = [] | CODE |
| LOW | …l/test/query-tests/Variables/general/variables_test.py | 2 | __all__ = [ 'is_used_var1' ] | CODE |
| LOW | python/ql/test/query-tests/Variables/unused/test.py | 92 | __all__ = [ 'hello' ] | CODE |
| LOW | …ql/test/query-tests/Variables/unused/variables_test.py | 2 | __all__ = [ 'is_used_var1' ] | CODE |
| LOW | …hon/ql/test/query-tests/Variables/undefined/exports.py | 1 | __all__ = ["foo", "bar", "baz", "quux", "blat", "frob", "nosuch", "i_got_it_elsewhere"] | CODE |
| LOW | …n/ql/test/query-tests/Variables/undefined/ud_helper.py | 12 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …t/query-tests/Variables/undefined/decorated_exports.py | 3 | __all__ = ["foo", "bar", "baz", "not_defined"] | CODE |
| LOW | …thon/ql/test/query-tests/Variables/undefined/tokens.py | 8 | __all__ = [ "TOKEN_0" ] | CODE |
| LOW | …query-tests/Variables/undefined/unknown_import_star.py | 1 | __all__ = ["foo"] | CODE |
| LOW | …l/test/query-tests/Functions/general/functions_test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …/query-tests/Functions/return_values/functions_test.py | 4 | __all__ = [ '' ] | CODE |
| LOW⚡ | python/ql/test/experimental/import-resolution/trace.py | 52 | __all__ = ["enter", "exit", "check", "status"] | CODE |
| LOW | …test/experimental/import-resolution/has_defined_all.py | 7 | __all__ = ["all_defined_foo"] | CODE |
| LOW | …experimental/import-resolution/has_defined_all_copy.py | 9 | __all__ = ["all_defined_foo_copy"] | CODE |
| LOW | …ibrary-tests/PointsTo/new/code/test_package/module1.py | 1 | __all__ = [ 'p', 'q', 'r' ] | CODE |
| LOW | …ibrary-tests/PointsTo/new/code/test_package/module2.py | 1 | __all__ = [ 'r', 's'] | CODE |
| LOW | …n/ql/test/library-tests/modules/__all__/all_dynamic.py | 6 | __all__ = ["foo"] | CODE |
| LOW | …thon/ql/test/library-tests/modules/__all__/all_list.py | 6 | __all__ = ["foo", "bar"] | CODE |
| LOW | python/ql/test/modelling/MyPackage/ModuleWithAll.py | 1 | __all__ = ['Foo'] | CODE |
| LOW | python/ql/test/extractor-tests/exports/module1.py | 1 | __all__ = [ 'a', 'b', 'c', 'd' ] | CODE |
| LOW | …test/3/query-tests/Variables/undefined/enum_convert.py | 8 | __all__ = [ "Maybe", "Maybe_not" ] | CODE |
| LOW | …/ql/test/3/query-tests/Variables/undefined/imp_star.py | 3 | __all__ = [ "a", "b" ] | CODE |
| LOW | …t/3/query-tests/Variables/undefined/UndefinedExport.py | 3 | __all__ = [ "x", "y", "z", "module", "w" ] | CODE |
| LOW | …t/3/query-tests/Variables/undefined/mutated_globals.py | 3 | __all__ = [ "a", "b" ] | CODE |
| LOW | …/3/query-tests/Variables/undefined/package/__init__.py | 1 | __all__ = [ "module", "not_exists" ] | CODE |
| LOW | python/ql/test/3/library-tests/types/functions/test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module4.py | 1 | __all__ = [ 'p', 'q', 'r'] | CODE |
| LOW | …-tests/modules/package_members/test_package/module1.py | 1 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module2.py | 1 | __all__ = [ 'x', 'y', 'z'] | CODE |
| LOW | …t/2/query-tests/Variables/undefined/UndefinedExport.py | 3 | __all__ = [ "x", "y", "z", "module" ] | CODE |
| LOW | …/2/query-tests/Variables/undefined/package/__init__.py | 1 | __all__ = [ "module", "not_exists" ] | CODE |
| LOW | …l/test/2/library-tests/PointsTo/imports/package/foo.py | 5 | __all__ = ['foo'] | CODE |
| LOW | python/ql/test/2/library-tests/types/functions/test.py | 4 | __all__ = [ '' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module4.py | 1 | __all__ = [ 'p', 'q', 'r'] | CODE |
| LOW | …-tests/modules/package_members/test_package/module1.py | 1 | __all__ = [ 'a', 'b', 'c' ] | CODE |
| LOW | …-tests/modules/package_members/test_package/module2.py | 1 | __all__ = [ 'x', 'y', 'z'] | CODE |
| LOW | python/ql/src/Imports/UnintentionalImport.py | 3 | __all__ = ['tax1', 'tax2'] #defines the names to import when '*' is used | CODE |
| LOW | python/ql/src/Variables/UndefinedExport.py | 1 | __all__ = ['spamm', 'troll', 'paywall'] | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | go/ql/test/library-tests/semmle/go/Types/promoted.go | 5 | // IMPORTANT: Make sure that *pkg1.SEmbedP is not referenced. | COMMENT |
| LOW | python/extractor/extending-the-parser.md | 3 | ## Step 1: Add an extractor test | COMMENT |
| LOW | python/extractor/extending-the-parser.md | 38 | ## Step 2: Extend the `tree-sitter-python` grammar | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 72 | ## Step 3: Extend `python.tsg` | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 78 | ## Step 4: Extend the set of known AST nodes | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 84 | ## Step 5: Rebuild the autogenerated AST and database scheme | COMMENT |
| LOW⚡ | python/extractor/extending-the-parser.md | 88 | ## Step 6: Add dbscheme upgrade and downgrade scripts | COMMENT |
| LOW | …st/2/query-tests/Expressions/TruncatedDivision_test.py | 3 | # NOTE: The following test case will only work under Python 2. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 133 | // Step 1: Perform classical ECDH key agreement to derive a shared secret. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 136 | // Step 2: Combine the ECDH secret and the post-quantum secret using a | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 144 | // Step 3: Encrypt the data using AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 129 | // Step 1: Encrypt plaintext with AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 132 | // Step 2: Encrypt the AES-GCM ciphertext with ChaCha20-Poly1305. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 136 | // Step 3: Decrypt the outer layer (ChaCha20-Poly1305). | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 139 | // Step 4: Decrypt the inner layer (AES-GCM). | COMMENT |
| LOW | …tests/Security/CWE/CWE-428/UnsafeCreateProcessCall.cpp | 187 | // NOTE: This function will not be flagged as having a bug by this rule. | COMMENT |
| LOW | …tests/Security/CWE/CWE-428/UnsafeCreateProcessCall.cpp | 222 | // NOTE: This function will not be flagged as having a bug by this rule. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/ql/test/query-tests/Classes/useless/test.py | 9 | def do_something(self): | CODE |
| LOW | python/ql/test/query-tests/Classes/useless/test.py | 21 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 33 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 39 | def do_something(self): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 47 | def do_something(self, x): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 56 | def do_something(self, x): | CODE |
| LOW⚡ | python/ql/test/query-tests/Classes/useless/test.py | 64 | def do_something(self): | CODE |
| LOW | …-tests/Resources/FileNotAlwaysClosed/resources_test.py | 298 | def do_something(self): | CODE |
| LOW | …l/test/query-tests/Variables/general/variables_test.py | 84 | def test_function(the_fixture): | CODE |
| LOW | python/ql/test/library-tests/dataflow/calls/test.py | 14 | def my_method(self, arg): | CODE |
| LOW | python/ql/test/library-tests/ApiGraphs/py3/deftest2.py | 7 | def my_method(self): # $ def=moduleImport("flask").getMember("views").getMember("View").getASubclass().getMember("my | CODE |
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 94 | def helper(): | CODE |
| LOW | …-tests/frameworks/stdlib/wsgiref_simple_server_test.py | 35 | def my_method(self, _env, start_response): # $ requestHandler | CODE |
| LOW | …brary-tests/ControlFlow/evaluation-order/test_async.py | 26 | async def helper(): | CODE |
| LOW | …test/extractor-tests/comment-on-decorator-line/test.py | 5 | def my_function(): | CODE |
| LOW | python/ql/test/3/library-tests/types/functions/test.py | 118 | def do_something(): | CODE |
| LOW | python/ql/test/2/library-tests/types/functions/test.py | 118 | def do_something(): | CODE |
| LOW | …ql/test/query-tests/Security/CWE-079/DomBasedXss/d3.js | 7 | function doSomething() { | CODE |
| LOW | …/test/library-tests/UnderlyingTypes/contextualTypes.ts | 7 | declare function doSomething(options: Options); | CODE |
| LOW | …l/test/library-tests/frameworks/ReactJS/use-server1.js | 1 | async function getData( | CODE |
| LOW | …l/test/library-tests/frameworks/ReactJS/use-server2.js | 3 | export async function getData( | CODE |
| LOW | …t/ql/test/library-tests/frameworks/SQL/mysql2-types.ts | 3 | export function doSomething(conn: Connection) { | CODE |
| LOW | …t/ql/test/library-tests/frameworks/SQL/sqlite-types.ts | 3 | export function doSomething(db: Database) { | CODE |
| LOW | …/ql/test/library-tests/frameworks/SQL/spanner-types.ts | 3 | export function doSomething(db: Database) { | CODE |
| LOW | javascript/ql/src/Expressions/examples/MissingAwait.js | 1 | async function getData(id) { | CODE |
| LOW | …script/ql/src/Expressions/examples/MissingAwaitGood.js | 1 | async function getData(id) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …hon/ql/test/query-tests/Statements/unreachable/test.py | 21 | CODE | |
| MEDIUM | …ql/test/query-tests/Variables/unused/variables_test.py | 137 | CODE | |
| MEDIUM | …ql/test/query-tests/Variables/unused/variables_test.py | 139 | CODE | |
| MEDIUM | …/query-tests/Variables/undefined/UninitializedLocal.py | 14 | CODE | |
| MEDIUM | python/ql/test/library-tests/types/exceptions/test.py | 26 | CODE | |
| MEDIUM | python/ql/test/library-tests/stmts/raise_stmt/test.py | 4 | CODE | |
| MEDIUM | …brary-tests/ControlFlow/evaluation-order/test_basic.py | 181 | CODE | |
| MEDIUM | …/ql/test/extractor-tests/splitter/unreachable_split.py | 5 | CODE | |
| MEDIUM | …/ql/test/extractor-tests/splitter/unreachable_split.py | 9 | CODE | |
| MEDIUM | …/query-tests/Statements/unreachable_suppressed/test.py | 39 | CODE | |
| MEDIUM | …on/ql/test/2/query-tests/Exceptions/generators/test.py | 11 | CODE | |
| MEDIUM | python/ql/src/Statements/UnreachableCode.py | 5 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | python/extractor/buildtools/version.py | 28 | # working on potential older versions, we'll just use `py --version` which forwards | COMMENT |
| MEDIUM | python/extractor/semmle/python/passes/objects.py | 245 | #This code must be robust against (possibly intentionally) incorrect implementations | COMMENT |
| LOW | python/extractor/blib2to3/pgen2/pgen.py | 373 | # Can't just return self.arcs == other.arcs, because that | COMMENT |
| MEDIUM | …extractor/src/main/kotlin/comments/CommentExtractor.kt | 52 | // The actual extractor logic is a bit more nuanced than | COMMENT |
| LOW | …sts/kotlin/posix/java_kotlin_extraction_orders/test.py | 121 | # No jar file involved, just add the dependency build directory to the classpath: | COMMENT |
| MEDIUM | …s/Format/WrongTypeFormatArguments/Buildless/second.cpp | 31 | // and robust but the developer may know enough to make this safe) | COMMENT |
| MEDIUM | swift/tools/incompatible-os/IncompatibleOs.cpp | 4 | // This is implemented as a C++ binary instead of a hardcoded JSON file so we can leverage existing | COMMENT |
| MEDIUM | swift/extractor/mangler/SwiftMangler.cpp | 450 | // which ExtensionDecl or ValueDecl it's mentioned in) might be more robust, but there doesn't | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 133 | // Step 1: Perform classical ECDH key agreement to derive a shared secret. | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 136 | // Step 2: Combine the ECDH secret and the post-quantum secret using a | COMMENT |
| LOW⚡ | …xperimental/library-tests/quantum/jca/Encryption2.java | 144 | // Step 3: Encrypt the data using AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 129 | // Step 1: Encrypt plaintext with AES-GCM. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 132 | // Step 2: Encrypt the AES-GCM ciphertext with ChaCha20-Poly1305. | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 136 | // Step 3: Decrypt the outer layer (ChaCha20-Poly1305). | COMMENT |
| LOW⚡ | …l/library-tests/quantum/jca/ChainedEncryptionTest.java | 139 | // Step 4: Decrypt the inner layer (AES-GCM). | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …src/experimental/Security/CWE-1427/examples/example.py | 9 | goodAgent = GuardrailAgent( # GOOD: Agent created with guardrails automatically configured. | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 134 | input: userInput, // OK - guarded client with input guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 143 | content: userInput, // OK - guarded client with input guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 156 | input: userInput, // OK - guarded Azure client with pre_flight guardrails | CODE |
| MEDIUM | …urity/CWE-1427/UserPromptInjection/openai_user_test.js | 159 | // === Unprotected GuardrailsOpenAI: no input guardrails (SHOULD ALERT) === | COMMENT |
| MEDIUM | …urity/CWE-1427/examples/user-prompt-injection_fixed.js | 6 | // An input guardrail (here, the OpenAI guardrails library) inspects the user input and | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/scripts/create-change-note.py | 115 | # Check if running in interactive mode (no arguments) or with arguments | COMMENT |
| LOW | misc/scripts/library-coverage/generate-timeseries.py | 227 | # Close files: | COMMENT |
| LOW | python/extractor/lark/parsers/cyk.py | 106 | # Check if the parse succeeded. | COMMENT |
| LOW | python/extractor/semmle/python/modules.py | 47 | #Set source to a latin-1 decoding of source string (which cannot fail). | COMMENT |
| LOW | …est/query-tests/Variables/undefined/UndefinedGlobal.py | 146 | # Set them to (), so that isinstance() works with them | COMMENT |
| LOW | …java/buildless-dependency-different-repository/test.py | 10 | # Check if process died | COMMENT |
| LOW | …ation-tests/java/maven_3_fetch_maven_4_wrapper/test.py | 15 | # Set maven_home_path to the extracted directory | COMMENT |
| LOW | …ry-tests/Security/CWE-077/.github/workflows/test17.yml | 24 | # Check if the event is a pull request or pull_request_target | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | misc/codegen/generators/qlgen.py | 82 | CODE | |
| LOW | python/extractor/semmle/logging.py | 293 | CODE | |
| LOW | python/extractor/semmle/python/passes/flow.py | 1220 | CODE | |
| LOW | python/extractor/semmle/python/passes/flow.py | 1555 | CODE | |
| LOW | …thon/ql/test/library-tests/PointsTo/decorators/test.py | 12 | CODE | |
| LOW | …thon/ql/test/library-tests/PointsTo/decorators/test.py | 19 | CODE | |
| LOW | …thon/ql/test/library-tests/ApiGraphs/py3/async_test.py | 12 | CODE | |
| LOW | …thon/ql/test/library-tests/ApiGraphs/py3/async_test.py | 29 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 11 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 19 | CODE | |
| LOW | python/ql/src/Security/CWE-022/examples/tainted_path.py | 30 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | swift/extractor/mangler/SwiftMangler.h | 155 | // In this implementation, fetching gives a hash of the mangled name itself, leading to a direct | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 29 | # TODO: Create test-cases for the many ways that `make_response` can be used | COMMENT |
| LOW | …l/test/library-tests/frameworks/flask/response_test.py | 187 | # TODO: add tests for setting status code | COMMENT |
| LOW | python/ql/test/library-tests/frameworks/data/test.py | 128 | # TODO: implement support for lists | COMMENT |
| LOW | python/ql/test/library-tests/frameworks/data/test.py | 131 | # TODO: implement support for tuples | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …emmle.Extraction.CSharp.StubGenerator/StubGenerator.cs | 75 | writer.WriteLine("// This file contains auto-generated code."); | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …experimental/library-tests/quantum/jca/IVArtifact.java | 216 | // Fixed IV (all zeros for demonstration purposes; insecure in production) | COMMENT |
| LOW | …query-tests/Security/CWE-829/.github/workflows/poc.yml | 33 | # For PRs make sure to checkout the PR branch | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tegration-tests/update-ferstl-depgraph-dependencies.sh | 14 | # Usage: | COMMENT |
| LOW | java/ql/src/utils/modelconverter/ConvertExtensions.py | 2 | # Usage: | COMMENT |
| LOW | csharp/ql/src/utils/modelconverter/ConvertExtensions.py | 2 | # Usage: | COMMENT |