Skip to content

Merge upstream codeql-cli/latest. #331

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dilanbhalla merged 541 commits into from
Feb 23, 2026

PS: Fixup PowerShell after https://github.com/github/codeql/pull/21051.

80deee8
Select commit
Loading
Failed to load commit list.
Merged

Merge upstream codeql-cli/latest. #331

PS: Fixup PowerShell after https://github.com/github/codeql/pull/21051.
80deee8
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL completed Feb 23, 2026 in 2s

5 configurations not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 5 configurations present on refs/heads/main were not found:

Actions workflow (rust-analysis.yml)

  • ❓  .github/workflows/rust-analysis.yml:analyze/language:rust

Actions workflow (csv-coverage-metrics.yml)

  • ❓  .github/workflows/csv-coverage-metrics.yml:publish-csharp
  • ❓  .github/workflows/csv-coverage-metrics.yml:publish-java

API upload

  • ❓  <default>

Actions workflow (cpp-swift-analysis.yml)

  • ❓  .github/workflows/cpp-swift-analysis.yml:CodeQL-Build

New alerts in code changed by this pull request

  • 1 warning
  • 39 notes

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 631 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Useless assignment to local variable Warning

This assignment to
bytesRead
Loading
is useless, since its value is never read.

Check notice on line 330 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependencyManager.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 541 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/DependencyManager.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 168 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 178 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 417 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 623 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 695 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 846 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 888 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 896 in csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/NugetPackageRestorer.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 631 in csharp/extractor/Semmle.Extraction.CSharp/CodeAnalysisExtensions/SymbolExtensions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 697 in csharp/extractor/Semmle.Extraction.CSharp/CodeAnalysisExtensions/SymbolExtensions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 846 in csharp/extractor/Semmle.Extraction.CSharp/CodeAnalysisExtensions/SymbolExtensions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Nested 'if' statements can be combined Note

These 'if' statements can be combined.

Check notice on line 44 in csharp/extractor/Semmle.Extraction.CSharp/Entities/Base/Entity.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 182 in csharp/extractor/Semmle.Extraction.CSharp/Entities/Parameter.cs

See this annotation in the file changed.

Code scanning / CodeQL

Nested 'if' statements can be combined Note

These 'if' statements can be combined.

Check notice on line 589 in csharp/extractor/Semmle.Extraction.CSharp/Entities/Types/Type.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed opportunity to use Where Note

This foreach loop
implicitly filters its target sequence
Loading
- consider filtering the sequence explicitly using '.Where(...)'.

Check notice on line 266 in csharp/extractor/Semmle.Util/BuildActions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 285 in csharp/extractor/Semmle.Util/BuildActions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.

Check notice on line 288 in csharp/extractor/Semmle.Util/BuildActions.cs

See this annotation in the file changed.

Code scanning / CodeQL

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments Note

Call to 'System.IO.Path.Combine' may silently drop its earlier arguments.

Check notice on line 25 in csharp/autobuilder/Semmle.Autobuild.Cpp.Tests/BuildScripts.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed 'readonly' opportunity Note test

Field 'FileDeleteIn' can be 'readonly'.

Check notice on line 32 in csharp/autobuilder/Semmle.Autobuild.Cpp.Tests/BuildScripts.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed 'readonly' opportunity Note test

Field 'FileExistsIn' can be 'readonly'.

Check notice on line 33 in csharp/autobuilder/Semmle.Autobuild.Cpp.Tests/BuildScripts.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed 'readonly' opportunity Note test

Field 'FileExists' can be 'readonly'.

Check notice on line 45 in csharp/autobuilder/Semmle.Autobuild.Cpp.Tests/BuildScripts.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed 'readonly' opportunity Note test

Field 'RunProcessIn' can be 'readonly'.

Check notice on line 46 in csharp/autobuilder/Semmle.Autobuild.Cpp.Tests/BuildScripts.cs

See this annotation in the file changed.

Code scanning / CodeQL

Missed 'readonly' opportunity Note test

Field 'RunProcess' can be 'readonly'.