Skip to content

Actions: SecAI-Hub/SecAI_OS

Actions

CodeQL Analysis

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
101 workflow runs
101 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

Resolve remaining audit findings — systemd hardening, UI security, bu… CodeQL Analysis #101: Commit d72d27c pushed by SecAI-Hub
1m 27s main
main
1m 27s
Security audit fixes — injection, symlinks, CI enforcement CodeQL Analysis #100: Commit 5d533c3 pushed by SecAI-Hub
1m 34s main
main
1m 34s
Populate diffusion runtime manifests with real SHA256 hashes CodeQL Analysis #99: Commit 2de9d6b pushed by SecAI-Hub
1m 29s main
main
1m 29s
Eliminate false positives — make all placeholder state honest and gua… CodeQL Analysis #98: Commit 6261207 pushed by SecAI-Hub
1m 23s main
main
1m 23s
Fix bluebuild and CI test failures CodeQL Analysis #97: Commit cee2a29 pushed by SecAI-Hub
1m 38s main
main
1m 38s
Fix CI and bluebuild failures CodeQL Analysis #96: Commit a5b26dc pushed by SecAI-Hub
1m 27s main
main
1m 27s
M53b: Hermetic build pipeline, gunicorn migration, upstream manifest,… CodeQL Analysis #95: Commit a812972 pushed by SecAI-Hub
1m 25s main
main
1m 25s
M54: On-demand diffusion runtime acquisition — one-click install from UI CodeQL Analysis #94: Commit b148d70 pushed by SecAI-Hub
1m 28s main
main
1m 28s
CodeQL Analysis CodeQL Analysis #93: Scheduled
1m 30s main
main
1m 30s
Bump anchore/sbom-action from 0.23.1 to 0.24.0 CodeQL Analysis #92: Pull request #11 opened by dependabot bot
1m 31s dependabot/github_actions/anchore/sbom-action-0.24.0
dependabot/github_actions/anchore/sbom-action-0.24.0
1m 31s
Bump github/codeql-action from 4.32.6 to 4.34.1 CodeQL Analysis #91: Pull request #10 opened by dependabot bot
1m 27s dependabot/github_actions/github/codeql-action-4.34.1
dependabot/github_actions/github/codeql-action-4.34.1
1m 27s
Bump github/codeql-action from 4.32.6 to 4.33.0 CodeQL Analysis #90: Pull request #9 opened by dependabot bot
1m 30s dependabot/github_actions/github/codeql-action-4.33.0
dependabot/github_actions/github/codeql-action-4.33.0
1m 30s
CodeQL Analysis CodeQL Analysis #89: Scheduled
1m 24s main
main
1m 24s
Bump actions/attest-build-provenance from 2.2.3 to 4.1.0 CodeQL Analysis #88: Pull request #8 opened by dependabot bot
1m 40s dependabot/github_actions/actions/attest-build-provenance-4.1.0
dependabot/github_actions/actions/attest-build-provenance-4.1.0
1m 40s
Bump actions/download-artifact from 4.3.0 to 8.0.1 CodeQL Analysis #87: Pull request #7 opened by dependabot bot
1m 39s dependabot/github_actions/actions/download-artifact-8.0.1
dependabot/github_actions/actions/download-artifact-8.0.1
1m 39s
Bump softprops/action-gh-release from 2.2.2 to 2.6.1 CodeQL Analysis #86: Pull request #6 opened by dependabot bot
1m 27s dependabot/github_actions/softprops/action-gh-release-2.6.1
dependabot/github_actions/softprops/action-gh-release-2.6.1
1m 27s
M53: Harder CI gates for production branches — release-gate job, CVE-… CodeQL Analysis #85: Commit e6fbf02 pushed by SecAI-Hub
1m 26s main
main
1m 26s
M52: Better release verification UX — Makefile, release manifest, str… CodeQL Analysis #84: Commit b7931ea pushed by SecAI-Hub
1m 30s main
main
1m 30s
M51: Stronger observability — unified dashboard, SLO tracking, alerti… CodeQL Analysis #83: Commit 46fbf31 pushed by SecAI-Hub
1m 32s main
main
1m 32s
M50: Production operations package — backup/restore, rollback matrix,… CodeQL Analysis #82: Commit d52a089 pushed by SecAI-Hub
1m 28s main
main
1m 28s
M49: Signed-first install path — eliminate unverified bootstrap CodeQL Analysis #81: Commit f5d4fba pushed by SecAI-Hub
1m 24s main
main
1m 24s
M48: Production hardening — 8 fixes for operational gaps CodeQL Analysis #80: Commit 1e5d7e1 pushed by SecAI-Hub
1m 27s main
main
1m 27s
Update release docs for M47: enforced CI gates, Go 1.25, mypy CodeQL Analysis #79: Commit 74c51c2 pushed by SecAI-Hub
1m 24s main
main
1m 24s
Bump Flask 3.1.1→3.1.3: fix GHSA-68rp-wp8r-4726 (Vary: Cookie) CodeQL Analysis #78: Commit 2137636 pushed by SecAI-Hub
1m 25s main
main
1m 25s
Fix CI: update setup-go version 1.23→1.25 to match go.mod CodeQL Analysis #77: Commit 50adccf pushed by SecAI-Hub
1m 25s main
main
1m 25s