github/codeql-action

Actions for running CodeQL analysis

Stars: 1.6k
Forks: 493
Open beginner issues: 1
Indexed issues: 158
Avg merge: 1d 13h
Merged PRs (30d): 44

Dominant language: TypeScript
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

Ruby (build-mode=none) default-setup analysis fails with "no source code was seen" on pull_request events, but succeeds on push — traced to --no-calculate-baseline Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql-action#4078 · 1 comment · Opened Aug 5, 2026
upload-sarif always warns when setting partialFingerprints Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

github/codeql-action#4052 · 4 comments · Opened Jul 29, 2026
CodeQL autobuild hangs forever on failure Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

github/codeql-action#4008 · 9 comments · Opened Jul 14, 2026
`codeql-action/init` Makes Metal Toolchain Unavailable on macOS 26 Runners Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

github/codeql-action#3978 · 4 comments · 1 reaction · Opened Jun 26, 2026
CodeQL fails to get Git version Closed

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#3962 · 1 comment · Opened Jun 16, 2026
CodeQL fails to detect rust/insecure-cookie in Rust code Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

github/codeql-action#3915 · 6 comments · 3 reactions · Opened May 19, 2026
Allow Swift to be run on ubuntu runners Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql-action#3870 · 3 comments · 1 reaction · Opened May 3, 2026
Could not process some files due to syntax errors Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#3854 · Opened Apr 28, 2026
API rate limit exceeded for installation Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#3851 · 2 comments · Opened Apr 27, 2026
Go extractor does not support build-mode: none, preventing overlay/incremental analysis on PRs Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql-action#3796 · 1 comment · Opened Apr 1, 2026
Please clarify if `github/codeql-action/upload-sarif` is meant to be used on PRs Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#3578 · 4 comments · Opened Mar 16, 2026
[BUG]: Proxy startup may report success when retries are exhausted and process does not stabilize Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

github/codeql-action#3530 · 1 comment · Opened Mar 1, 2026
No option to re-try failed CodeQL jobs Open

Difficulty 5/5 Over a week Newbie friendliness 32/100

github/codeql-action#3465 · 3 comments · 4 reactions · Opened Feb 10, 2026
Architecture mismatch on macOS self-hosted runner? Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/codeql-action#3416 · 4 comments · 1 reaction · Opened Jan 22, 2026
CodeQL fails to detect Javascript/Typescript files Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

github/codeql-action#3384 · 3 reactions · Opened Jan 5, 2026
upload-sarif: `git call failed.` more times than necessary for a working directory without a git repository Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#3383 · 2 comments · Opened Jan 2, 2026
Git commit sha detection inconsistent between telemetry and actual operations Open

github/codeql-action#3376 · 2 comments · 1 assignee · Opened Dec 19, 2025
'init' action doesn't seem to retry on socket exceptions and network hiccups Open

enhancement

github/codeql-action#3367 · 2 comments · 1 assignee · Opened Dec 16, 2025
(node:10154) [DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities. Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#3350 · 1 comment · 1 reaction · Opened Dec 10, 2025
Code scanning with GitHub Actions is not available for this repository. Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql-action#3291 · 2 comments · Opened Nov 13, 2025
📢 upcoming v3 deprecation, v4 now released 📢 Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

github/codeql-action#3271 · 6 comments · Opened Nov 3, 2025
GitHub Code Quality: IOException "No space left on device" Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql-action#3265 · 4 comments · Opened Nov 1, 2025
Can't copy linked item from alert text Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#3230 · 1 comment · Opened Oct 23, 2025
No link to a dismissed alert in github Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql-action#3229 · 4 comments · Opened Oct 23, 2025
Codeql action unable to build .NET project randomly Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#3208 · 3 comments · Opened Oct 16, 2025
codeql-action/init workflow validation doesn't respect custom source-root Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

github/codeql-action#3142 · 1 comment · Opened Sep 24, 2025
Tasks fails to download the latest version 3.29.7 Open

awaiting-response

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql-action#3018 · 3 comments · Opened Aug 7, 2025
Is it possible to create custom codeQL workflow for branch other than default branch may be dev? Open

awaiting-response

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#3008 · 1 comment · Opened Aug 7, 2025
https://github.blog/changelog/2025-07-21-code-scanning-will-stop-combining-multiple-sarif-runs-uploaded-in-the-same-sarif-file/ broke all scan tools Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#2985 · 2 comments · Opened Jul 22, 2025
Please consider using verified commits Open

github/codeql-action#2974 · 1 comment · 1 assignee · Opened Jul 16, 2025
How should repo level issues be handled? Open

Difficulty 4/5 3-5 days Newbie friendliness 28/100

github/codeql-action#2964 · 3 comments · Opened Jul 8, 2025
upload-sarif does not handle relative paths when trivy runs on a subfolder Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

github/codeql-action#2904 · 2 comments · 1 reaction · Opened May 23, 2025
CODEQL_ACTION_CLEANUP_TRAP_CACHES is not working Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#2885 · 5 comments · Opened May 2, 2025
Repo includes Adobe Flash file which cause intelligent firewall to block zipball download by GitHub Actions Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#2877 · 2 comments · Opened May 1, 2025
Default CodeQL action uses Ubuntu Jammy, which has a very old version of Meson Open

question

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#2875 · 2 comments · 1 reaction · Opened Apr 30, 2025
Evaluation will not finish with CodeQL Bundle v2.21.0 Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql-action#2866 · 2 comments · Opened Apr 23, 2025
Does not run on Dependabot PRs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql-action#2858 · 3 comments · 1 reaction · Opened Apr 10, 2025
upload-sarif: relative paths beginning with `./` are not handled correctly Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

github/codeql-action#2829 · 2 comments · 1 reaction · Opened Mar 26, 2025
[upload-sarif@v3] action completely ignore the `sha` input and using commit hash from `checkout_path` instead Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

github/codeql-action#2807 · 2 comments · Opened Mar 14, 2025
No progress during "Streaming the extraction of the CodeQL bundle" Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

github/codeql-action#2790 · 2 comments · 2 reactions · Opened Mar 3, 2025
Unable to run custom queries against GitHub Actions Open

awaiting-response

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#2755 · 1 comment · Opened Feb 5, 2025
Linux ARM: java/bin/java: Exec format error Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

github/codeql-action#2700 · 2 comments · 2 reactions · Opened Jan 16, 2025
Failure doesn't show as failure Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#2691 · 1 comment · Opened Jan 14, 2025
After completing the CodeQL check it showing in progress state Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

github/codeql-action#2661 · 4 comments · Opened Dec 20, 2024
OutOfMemoryError: GC overhead limit exceeded during autobuild Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#2604 · 5 comments · 2 reactions · Opened Nov 13, 2024
go build hangs after codeql init Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

github/codeql-action#2589 · 3 comments · Opened Nov 11, 2024
CodeQL Bundle: Precompiled queries have mode 0600 Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

github/codeql-action#2540 · Opened Oct 11, 2024
Sudden Appearance of a codeql alert Open

awaiting-response

Difficulty 4/5 3-5 days Newbie friendliness 25/100

github/codeql-action#2528 · 1 comment · Opened Oct 7, 2024
Confusing CodeQL Error: Go files were found but not processed Open

github/codeql-action#2515 · 5 comments · 1 reaction · 1 assignee · Opened Oct 2, 2024
Error while uploading SARIF file using action github/codeql-action/upload-sarif Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

github/codeql-action#2456 · 8 comments · 1 reaction · Opened Sep 2, 2024

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

github/codeql-action

Showing the newest 100

Get new issues in your inbox