TAG

#codeql

Stories connected through a shared idea, actor, technology or theme.

4 SeptCodeQL 2.26.4 expands language and GitHub Actions security coverageGitHub rolled CodeQL 2.26.4 into code scanning on github.com with Go 1.27 support, more precise Rust data-flow locations, new Spring R2DBC SQL-injection sinks and expanded Java, Kotlin, JavaScript, TypeScript and Python taint modelling. The release also adds GitHub Actions detections for mutable references to reusable workflows and improves checks on workflow actor fields.→