Skip to content

Actions: OpenIdentityPlatform/OpenICF

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
92 workflow runs
92 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Refuse archive entries that escape their target directory and drop de… CodeQL #92: Commit 5f13859 pushed by vharseko
40m 46s master
master
40m 46s
Verify the connector server certificate against the host over the Web… CodeQL #91: Commit be1f0d7 pushed by vharseko
25m 3s master
master
25m 3s
Verify the connector server certificate against the host over the leg… CodeQL #90: Commit b70b75e pushed by vharseko
5m 22s master
master
5m 22s
[#124] Create the RemoteRequest promise at construction so an unsent request can be cancelled CodeQL #89: Pull request #127 synchronize by vharseko
1h 31m 37s vharseko:issue-124-remote-request-promise
vharseko:issue-124-remote-request-promise
1h 31m 37s
Encrypt in-memory secrets with AES/GCM and a fresh IV per value (#128) CodeQL #88: Commit 60c194b pushed by vharseko
1h 50m 27s master
master
1h 50m 27s
[#125] Do not resend the initial CONNECTOR_INFO request when shutdown… CodeQL #87: Commit 889aba7 pushed by vharseko
34s master
master
34s
Refuse archive entries that escape their target directory and drop dead ECIES code CodeQL #86: Pull request #126 synchronize by vharseko
1h 55m 5s vharseko:codeql-high-zipslip-dead-crypto
vharseko:codeql-high-zipslip-dead-crypto
1h 55m 5s
Verify the connector server certificate against the host over the legacy SSL connection CodeQL #85: Pull request #122 synchronize by vharseko
46m 35s vharseko:unsafe-cert-trust-hostname-verification
vharseko:unsafe-cert-trust-hostname-verification
46m 35s
Verify the connector server certificate against the host over the WebSocket connection CodeQL #84: Pull request #123 synchronize by vharseko
1h 3m 58s vharseko:websocket-client-hostname-verification
vharseko:websocket-client-hostname-verification
1h 3m 58s
Verify the connector server certificate against the host over the legacy SSL connection CodeQL #83: Pull request #122 synchronize by vharseko
3m 15s vharseko:unsafe-cert-trust-hostname-verification
vharseko:unsafe-cert-trust-hostname-verification
3m 15s
Verify the connector server certificate against the host over the legacy SSL connection CodeQL #82: Pull request #122 synchronize by vharseko
3m 33s vharseko:unsafe-cert-trust-hostname-verification
vharseko:unsafe-cert-trust-hostname-verification
3m 33s
Verify the connector server certificate against the host over the WebSocket connection CodeQL #81: Pull request #123 synchronize by vharseko
3m 0s vharseko:websocket-client-hostname-verification
vharseko:websocket-client-hostname-verification
3m 0s
Link Groovy javadoc through a local package-list instead of fetching it CodeQL #80: Pull request #146 opened by vharseko
1h 15m 49s vharseko:groovy-javadoc-offline-link
vharseko:groovy-javadoc-offline-link
1h 15m 49s
CodeQL CodeQL #79: Scheduled
3m 0s master
master
3m 0s
Replace chained instanceof filter dispatch with the existing FilterVisitor CodeQL #78: Pull request #145 opened by vharseko
2h 56m 12s vharseko:chained-type-tests
vharseko:chained-type-tests
2h 56m 12s
Close out the remaining small note-tier CodeQL categories CodeQL #77: Pull request #142 synchronize by vharseko
1h 18m 44s vharseko:note-small-categories
vharseko:note-small-categories
1h 18m 44s
Add missing @Override annotations across the codebase CodeQL #76: Pull request #144 opened by vharseko
2m 49s vharseko:missing-override-annotation
vharseko:missing-override-annotation
2m 49s
CodeQL CodeQL #75: Scheduled
3m 16s master
master
3m 16s
Make safe-to-static nested classes static and drop dead locals CodeQL #74: Pull request #143 opened by vharseko
51m 57s vharseko:local-var-nested-class
vharseko:local-var-nested-class
51m 57s
Close out the remaining small note-tier CodeQL categories CodeQL #73: Pull request #142 opened by vharseko
39m 44s vharseko:note-small-categories
vharseko:note-small-categories
39m 44s
Fix genuine bugs found while cleaning up java/unused-parameter alerts CodeQL #72: Pull request #141 opened by vharseko
7m 20s vharseko:unused-parameter
vharseko:unused-parameter
7m 20s
Limit the workflow token, pin third-party actions and bump all actions to current CodeQL #71: Pull request #130 synchronize by vharseko
9m 8s vharseko:ci-token-permissions-pinned-actions
vharseko:ci-token-permissions-pinned-actions
9m 8s
Fix mechanical CodeQL note findings: reflection, boxing, deprecated closes CodeQL #70: Pull request #134 synchronize by vharseko
10m 42s vharseko:codeql-note-safe-mechanics
vharseko:codeql-note-safe-mechanics
10m 42s
[#137] Wait for cleanup in RequestDistributorTest.testFailedRequest CodeQL #69: Pull request #140 opened by vharseko
3m 48s vharseko:request-distributor-failed-request-wait
vharseko:request-distributor-failed-request-wait
3m 48s
Wrap malformed numeric values in a domain exception instead of a bare NumberFormatException CodeQL #68: Pull request #139 opened by vharseko
2m 56s vharseko:codeql-uncaught-number-format
vharseko:codeql-uncaught-number-format
2m 56s