CodeQL 2.26.0 flags AI prompt injection: the 2026 code scanning setup guide
GitHub shipped a CodeQL query on 10 July 2026 that catches prompt injection in code review: js/system-prompt-injection flags untrusted input flowing into an AI model's system prompt. Here is what it detects, how to turn
