A fatal error occurred: python-security-extended.qls is not a .ql file, .qls file, a directory, or a query pack specification.

Open

#21,293 opened on Feb 6, 2026 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty: 4/5
Estimated time: 3-5 days
Newbie friendliness: 25/100

Issue type: Bug
Clarity: Needs clarification
Activity status: Stale
Tech stack: python
Domain: security

Research direction

Start with the AdvancedSecurity-Codeql-Analyze task's database analyze invocation and the python-security-extended.qls argument shown in the error. Trace how that query selection is supplied for Python analysis, then reproduce the command and verify that analysis completes without the fatal query-file error.

Written by the indexing model from the issue text.

Description

question

Description of the issue

Can someone please help me check this issue

##[warning] Error running analysis for python: Error: Error running the 'database analyze' CodeQL command (2)
A fatal error occurred: python-security-extended.qls is not a .ql file, .qls file, a directory, or a query pack specification.

##[warning] Error: Error running the 'database analyze' CodeQL command (2)
##[warning] Error: Error running the 'database analyze' CodeQL command (2)
    at g.databaseAnalyze (/home/ubuntu/myagent/_work/_tasks/AdvancedSecurity-Codeql-Analyze_a9efc1ef-3900-494f-a460-963e3f5f6928/1.1.349/index.js:1:83569)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async t.Analyze.runQueries (/home/ubuntu/myagent/_work/_tasks/AdvancedSecurity-Codeql-Analyze_a9efc1ef-3900-494f-a460-963e3f5f6928/1.1.349/index.js:1:64208)
    at async /home/ubuntu/myagent/_work/_tasks/AdvancedSecurity-Codeql-Analyze_a9efc1ef-3900-494f-a460-963e3f5f6928/1.1.349/index.js:1:72572
##[warning] Error running analysis for python: Error: Error running the 'database analyze' CodeQL command (2)
##[error]Error running analysis for python: Error: Error running the 'database analyze' CodeQL command (2)

Dominant language: CodeQL
Stars: 10.1k
Forks: 2.1k
Avg merge: 2d 16h
Merged PRs (30d): 143

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

Similar issues

Reflected XSS in loopback OAuth callback via error_description Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

punkpeye/mcp-remote#369 · Opened Sep 23, 2026
qs-6.15.2.tgz: 2 vulnerabilities (highest severity is: 5.3) Open

Mend: dependency security vulnerability untriaged

Difficulty 1/5 Under an hour Newbie friendliness 86/100

opensearch-project/opensearch-api-specification#1250 · Opened Sep 22, 2026
Setup page for elementary OS omits warning about unpatched pre-installed Flatpak (1.14.6) Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

flathub/flathub#10349 · Opened Sep 22, 2026
CVE-2024-24786 CPE mismatch Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 90/100

cisagov/vulnrichment#337 · Opened Sep 22, 2026
[BUG - Public]Need user friendly error when trying to create a new account with subaddressing an existing email. Open

bug DUP Reservations

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

bcgov/reserve-rec-public#896 · Opened Sep 22, 2026

More Security issues