Skip to content

Actions: MEFORORG/MessageFoundry

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
927 workflow runs
927 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
docs(coord): the session record has no branch field, and two rosters answer different questions CodeQL #927: Pull request #259 opened by wshallwshall
2h 53m 35s claude/coord-roster-semantics
claude/coord-roster-semantics
2h 53m 35s
backlog: file #1068, a -Force claim release leaves no record of who released whose claim CodeQL #926: Pull request #258 opened by wshallwshall
Queued claude/claim-force-audit
claude/claim-force-audit
Queued
docs: record the OpenFlow attribute review findings (BACKLOG #238) CodeQL #925: Pull request #255 opened by wshallwshall
57m 53s review-238-openflow-attrs
review-238-openflow-attrs
57m 53s
fix(tls): four insecure-TLS cells now clamp per ADR 0092 (BACKLOG #329, ASVS V12) CodeQL #924: Pull request #257 opened by wshallwshall
28m 34s fix-329-insecure-tls-cells
fix-329-insecure-tls-cells
28m 34s
fix(api): the auth-off startup arm now reports instance_exposed (BACKLOG #1013, ASVS 6.3.3) CodeQL #923: Pull request #256 opened by wshallwshall
43m 26s fix-1013-authoff-startup-arm
fix-1013-authoff-startup-arm
43m 26s
fix(checks): build-check validated the env file under --project-root … CodeQL #922: Commit afdc5cb pushed by wshallwshall
21m 26s main
main
21m 26s
feat(api): report-only TLS kex_groups posture field, and the webconsole seam 17->18 (BACKLOG #338) CodeQL #921: Pull request #254 opened by wshallwshall
54m 55s fix-338-tls-kex-report
fix-338-tls-kex-report
54m 55s
test(config): pytest testpaths now include the webconsole package (BACKLOG #1027) CodeQL #920: Pull request #253 opened by wshallwshall
1h 3m 32s fix-1027-testpaths-webconsole
fix-1027-testpaths-webconsole
1h 3m 32s
test(sandbox): a static AST guard pins the codec and worker import boundary (BACKLOG #346) CodeQL #919: Pull request #252 opened by wshallwshall
16m 50s fix-346-sandbox-import-static
fix-346-sandbox-import-static
16m 50s
fix(anon): always-on structural PHI detectors in the anonymizer leak-check (BACKLOG #331) CodeQL #918: Pull request #251 opened by wshallwshall
28m 22s fix-331-anon-phi-detectors
fix-331-anon-phi-detectors
28m 22s
test(connscale): dynamic contiguous ports, and the flaky marker dropped (BACKLOG #1014) CodeQL #917: Pull request #250 opened by wshallwshall
12m 41s fix-1014-connscale-ports
fix-1014-connscale-ports
12m 41s
fix(config): the rotation watcher now fingerprints SOAP body_secret_value_<i> (BACKLOG #1009) CodeQL #916: Pull request #246 opened by wshallwshall
50m 14s fix-1009-soap-secret-fp
fix-1009-soap-secret-fp
50m 14s
feat(asvs): the absence gate gains a --prove-absences mutation mode (BACKLOG #1006) CodeQL #915: Pull request #249 opened by wshallwshall
16m 25s fix-1006-absence-mutation
fix-1006-absence-mutation
16m 25s
fix(webconsole): three PHI routes now charge the per-actor read budget (BACKLOG #1025) CodeQL #914: Pull request #247 opened by wshallwshall
4m 32s fix-1025-phi-read-budget
fix-1025-phi-read-budget
4m 32s
fix(pipeline): sandbox kill now reaps the whole worker tree (BACKLOG #342) CodeQL #913: Pull request #248 opened by wshallwshall
5m 44s fix-342-sandbox-reap
fix-342-sandbox-reap
5m 44s
fix(auth): MFA enrollment consume-step, with the MFA test suite restructured (BACKLOG #1021) CodeQL #912: Pull request #245 opened by wshallwshall
3m 7s fix-1021-mfa-totp-consume
fix-1021-mfa-totp-consume
3m 7s
fix(auth): two TypeError crash paths on malformed IdP claims become audited ClaimsError (BACKLOG #1016) CodeQL #911: Pull request #244 opened by wshallwshall
8m 58s fix-1016-claims-malformed-idp
fix-1016-claims-malformed-idp
8m 58s
fix(auth): pin OIDC identity to (issuer, sub) with a subject-continuity guard (BACKLOG #1015) CodeQL #910: Pull request #243 opened by wshallwshall
2m 50s fix-1015-oidc-sub
fix-1015-oidc-sub
2m 50s
fix(checks): build-check validated the env file under --project-root then read values from cwd (BACKLOG #1062) CodeQL #909: Pull request #242 opened by wshallwshall
2m 59s claude/check-project-root-anchor
claude/check-project-root-anchor
2m 59s
docs(gate): record the ledger-gate coupling where someone can BREAK i… CodeQL #908: Commit 132dc68 pushed by wshallwshall
2m 30s main
main
2m 30s
fix(coord): two silent-failure defects in the session-mail installer and broadcast path, with regressions CodeQL #907: Pull request #239 synchronize by wshallwshall
2m 53s claude/session-mail-followups
claude/session-mail-followups
2m 53s
docs(adr): untrack the 104th releases file, unlink its ADR 0076 citation, and record D6 CodeQL #906: Pull request #241 opened by wshallwshall
2m 58s claude/adr0160-followup-102nd-file
claude/adr0160-followup-102nd-file
2m 58s
fix(coord): two silent-failure defects in the session-mail installer and broadcast path, with regressions CodeQL #905: Pull request #239 synchronize by wshallwshall
2m 58s claude/session-mail-followups
claude/session-mail-followups
2m 58s
docs(gate): record the ledger-gate coupling where someone can BREAK it, not only where it is relied on CodeQL #904: Pull request #228 synchronize by wshallwshall
3m 6s claude/gate-ledger-coupling-note
claude/gate-ledger-coupling-note
3m 6s
backlog: close #325, the leak-gate casefold gap was already fixed in #177 CodeQL #903: Pull request #240 opened by wshallwshall
2m 20s fix-325-leakgate-casefold
fix-325-leakgate-casefold
2m 20s