Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
205 workflow runs
205 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
[#1160] Allow unescaped '=' in LDAPUtils dnRule attribute values CodeQL #205: Pull request #1161 opened by nicholascowan
Action required nicholascowan:fix/ldaputils-dn-allow-equals-in-values
nicholascowan:fix/ldaputils-dn-allow-equals-in-values
Action required
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stac… CodeQL #204: Commit d371abc pushed by vharseko
1h 53m 46s master
master
1h 53m 46s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stack-exhaustion and quadratic-time DoS in brace parsing (5.0.9 -> 5.0.12) CodeQL #203: Pull request #1159 opened by dependabot Bot
1h 29m 56s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/brace-expansion-5.0.12
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/brace-expansion-5.0.12
1h 29m 56s
Keep vendored and generated code out of CodeQL (#1152) CodeQL #202: Commit 5812b46 pushed by vharseko
17m 57s master
master
17m 57s
[#1155] Fix typos, unresolved placeholders and dead ForgeRock links i… CodeQL #201: Commit c9bf539 pushed by vharseko
23m 2s master
master
23m 2s
Keep vendored and generated code out of CodeQL CodeQL #200: Pull request #1152 synchronize by vharseko
1h 3m 37s vharseko:codeql-exclude-vendored-js
vharseko:codeql-exclude-vendored-js
1h 3m 37s
[#1154] Replace legacy ForgeRock relative links in the guides with An… CodeQL #199: Commit a9516e8 pushed by vharseko
32m 11s master
master
32m 11s
[#1154] Replace legacy ForgeRock relative links in the guides with Antora xrefs CodeQL #198: Pull request #1158 opened by vharseko
2h 50m 42s vharseko:issue-1154-legacy-links
vharseko:issue-1154-legacy-links
2h 50m 42s
[#1155] Fix typos, unresolved placeholders and dead ForgeRock links in the guides CodeQL #197: Pull request #1157 opened by vharseko
2h 46m 50s vharseko:issue-1155-docs-fixes
vharseko:issue-1155-docs-fixes
2h 46m 50s
Tomcat 10.1.59: CVE-2026-41293 CVE-2026-43512 CVE-2026-43515 CVE-2026… CodeQL #196: Commit 2771241 pushed by vharseko
55m 18s master
master
55m 18s
Keep vendored and generated code out of CodeQL CodeQL #195: Pull request #1152 synchronize by vharseko
1h 26m 23s vharseko:codeql-exclude-vendored-js
vharseko:codeql-exclude-vendored-js
1h 26m 23s
GHSA-253c-mchw-3w2r GHSA-r7fv-28h4-cvq7 markdown-it: Quadratic-time D… CodeQL #194: Commit aac035c pushed by vharseko
13m 12s master
master
13m 12s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stac… CodeQL #193: Commit ad1aa22 pushed by vharseko
1m 18s master
master
1m 18s
Keep vendored and generated code out of CodeQL CodeQL #192: Pull request #1152 opened by vharseko
1h 52m 40s vharseko:codeql-exclude-vendored-js
vharseko:codeql-exclude-vendored-js
1h 52m 40s
Enable HttpOnly session cookies by default CodeQL #191: Pull request #1059 synchronize by vharseko
2h 38m 0s vharseko:features/httponly
vharseko:features/httponly
2h 38m 0s
GHSA-253c-mchw-3w2r GHSA-r7fv-28h4-cvq7 markdown-it: Quadratic-time DoS in linkify and smartquotes (14.2.0 -> 14.3.2) CodeQL #190: Pull request #1151 opened by dependabot Bot
2h 6m 40s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/markdown-it-14.3.2
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/markdown-it-14.3.2
2h 6m 40s
Tomcat 10.1.59: CVE-2026-41293 CVE-2026-43512 CVE-2026-43515 CVE-2026-65182 CVE-2026-65905 CVE-2026-68525 CVE-2026-24734 CVE-2026-24880 CVE-2026-34483 CVE-2026-34487 CVE-2026-41284 CVE-2026-42498 CVE-2026-43513 CVE-2025-66614 CVE-2026-25854 CVE-2026-43514 CodeQL #189: Pull request #1150 opened by dependabot Bot
2h 1m 38s dependabot/maven/openam-federation/openam-idpdiscovery/org.apache.tomcat.embed-tomcat-embed-core-10.1.59
dependabot/maven/openam-federation/openam-idpdiscovery/org.apache.tomcat.embed-tomcat-embed-core-10.1.59
2h 1m 38s
CVE-2026-102276 CVE-2026-102277 CVE-2026-102278 brace-expansion: Stack-exhaustion and quadratic-time DoS in brace parsing (1.1.18 -> 1.1.21) CodeQL #188: Pull request #1149 opened by dependabot Bot
19m 8s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/brace-expansion-1.1.21
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/brace-expansion-1.1.21
19m 8s
[#1145] Keep the IdP discovery cookie within RFC 6265 (#1146) CodeQL #187: Commit 082e236 pushed by vharseko
31m 15s master
master
31m 15s
Raise the RequireJS and Mocha timeouts of the UI unit tests (#1148) CodeQL #186: Commit 834d4a7 pushed by vharseko
19m 7s master
master
19m 7s
Raise the RequireJS and Mocha timeouts of the UI unit tests CodeQL #185: Pull request #1148 opened by vharseko
14m 13s vharseko:fix/karma-requirejs-timeout
vharseko:fix/karma-requirejs-timeout
14m 13s
Bump the github-actions group with 4 updates (#1147) CodeQL #184: Commit b8b157f pushed by vharseko
26m 57s master
master
26m 57s
Bump the github-actions group with 4 updates CodeQL #183: Pull request #1147 opened by dependabot Bot
29m 43s dependabot/github_actions/github-actions-f7bb8367af
dependabot/github_actions/github-actions-f7bb8367af
29m 43s
Close the cheap CodeQL findings: pinned actions, token scopes, TLS id… CodeQL #182: Commit 683a8a4 pushed by vharseko
10m 57s master
master
10m 57s
[#1145] Keep the IdP discovery cookie within RFC 6265 CodeQL #181: Pull request #1146 synchronize by vharseko
22m 35s vharseko:idp-discovery-cookie-rfc6265
vharseko:idp-discovery-cookie-rfc6265
22m 35s