Steps to reproduce

• Download latest CodeQL bundle (v2.25.4 at the moment).
• Have a minimal Rust project with rust/insecure-cookie in it (take the code example from the official documentation).
• Run the following command in the directory with the Rust project:

codeql database create --build-mode=none --language=rust .codeql-db
codeql database analyze --format=sarifv2.1.0 --output=codeql.sarif .codeql-db

• Look at the produced codeql.sarif

Expected behavior

results field should have 1 finding with rust/insecure-cookie id.

Actual behavior

results field is empty

Notes

The same codeql version with the same Rust code worked as expected on May 18, 2026, 2:31 PM GMT+9.