Skip to content

Actions: promptfoo/modelaudit

Actions

CodeQL Security Analysis

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
882 workflow runs
882 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

chore(deps): update python:3.13-slim docker digest to 739e721 CodeQL Security Analysis #886: Pull request #721 synchronize by renovate bot
1m 39s renovate/python-3.13-slim
renovate/python-3.13-slim
1m 39s
fix: accept valid ExecuTorch FlatBuffers binaries CodeQL Security Analysis #885: Pull request #715 synchronize by mldangelo
1m 10s fix/executorch-binary-validation
fix/executorch-binary-validation
1m 10s
chore(deps): update python:3.13-slim docker digest to 739e721 CodeQL Security Analysis #884: Pull request #721 synchronize by renovate bot
1m 54s renovate/python-3.13-slim
renovate/python-3.13-slim
1m 54s
chore(deps): update python:3.13-slim docker digest to 739e721 CodeQL Security Analysis #883: Pull request #721 opened by renovate bot
46s renovate/python-3.13-slim
renovate/python-3.13-slim
46s
fix: reduce Keras ZIP custom-object false positives (#716) CodeQL Security Analysis #882: Commit 165b238 pushed by mldangelo
3m 18s main
main
3m 18s
chore(deps): update python:3.13-slim docker digest to 5a7bc62 (#719) CodeQL Security Analysis #881: Commit bc58e21 pushed by mldangelo
25s main
main
25s
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 (#720) CodeQL Security Analysis #880: Commit 36a451c pushed by mldangelo
2m 1s main
main
2m 1s
fix(security): bound pickle metadata reads in metadata extraction CodeQL Security Analysis #879: Pull request #712 synchronize by mldangelo
1m 12s codex/fix-dos-vulnerability-in-pickle-extraction
codex/fix-dos-vulnerability-in-pickle-extraction
1m 12s
fix: bound XZ decompression memory in r_serialized scanner CodeQL Security Analysis #878: Commit 26d5b44 pushed by mldangelo
1m 52s main
main
1m 52s
fix(deps): update dependency numpy to >=2.4.3,<2.5 CodeQL Security Analysis #877: Pull request #669 synchronize by mldangelo
1m 48s renovate/numpy-2.x
renovate/numpy-2.x
1m 48s
fix(deps): update dependency numpy to >=2.4.3,<2.5 CodeQL Security Analysis #876: Pull request #669 synchronize by mldangelo
43s renovate/numpy-2.x
renovate/numpy-2.x
43s
fix(telemetry): hash file paths in payloads CodeQL Security Analysis #875: Pull request #717 synchronize by mldangelo
1m 41s codex/telemetry-file-hashes
codex/telemetry-file-hashes
1m 41s
fix(keras): derive safe layer inventory from exports CodeQL Security Analysis #874: Pull request #718 synchronize by mldangelo
1m 34s codex/fix-keras-h5-regressions
codex/fix-keras-h5-regressions
1m 34s
fix: reduce Keras ZIP custom-object false positives CodeQL Security Analysis #873: Pull request #716 synchronize by mldangelo
1m 47s fix/keras-zip-safe-object-detection
fix/keras-zip-safe-object-detection
1m 47s
fix: accept valid ExecuTorch FlatBuffers binaries CodeQL Security Analysis #872: Pull request #715 synchronize by mldangelo
1m 45s fix/executorch-binary-validation
fix/executorch-binary-validation
1m 45s
fix(security): bound pickle metadata reads in metadata extraction CodeQL Security Analysis #871: Pull request #712 synchronize by mldangelo
1m 52s codex/fix-dos-vulnerability-in-pickle-extraction
codex/fix-dos-vulnerability-in-pickle-extraction
1m 52s
fix: stop suppressing mixed-case pickle modules CodeQL Security Analysis #870: Pull request #698 synchronize by mldangelo
1m 45s feat/pickle-module-plausibility
feat/pickle-module-plausibility
1m 45s
fix: enforce decompression limits for compressed tar wrappers CodeQL Security Analysis #869: Pull request #709 synchronize by mldangelo
1m 43s codex/fix-vulnerability-in-tar-scanner-routing
codex/fix-vulnerability-in-tar-scanner-routing
1m 43s
fix: bound XZ decompression memory in r_serialized scanner CodeQL Security Analysis #868: Pull request #713 synchronize by mldangelo
1m 38s codex/fix-unbounded-lzma-decompression-issue
codex/fix-unbounded-lzma-decompression-issue
1m 38s
fix: recurse into NumPy object pickle payloads CodeQL Security Analysis #867: Pull request #699 synchronize by mldangelo
1m 38s feat/numpy-object-pickle-recursion
feat/numpy-object-pickle-recursion
1m 38s
chore(deps): update python:3.13-slim docker digest to 5a7bc62 CodeQL Security Analysis #866: Pull request #719 synchronize by mldangelo
1m 39s renovate/python-3.13-slim
renovate/python-3.13-slim
1m 39s
chore(deps): bump pyasn1 from 0.6.2 to 0.6.3 CodeQL Security Analysis #865: Pull request #720 synchronize by mldangelo
1m 47s dependabot/uv/pyasn1-0.6.3
dependabot/uv/pyasn1-0.6.3
1m 47s
fix(security): require explicit trust for local scan config CodeQL Security Analysis #864: Pull request #714 synchronize by mldangelo
1m 46s feat/trusted-local-config
feat/trusted-local-config
1m 46s
fix: bound XZ decompression memory in r_serialized scanner CodeQL Security Analysis #863: Pull request #713 synchronize by mldangelo
1m 42s codex/fix-unbounded-lzma-decompression-issue
codex/fix-unbounded-lzma-decompression-issue
1m 42s
fix: tighten dill MemoryError downgrade gating CodeQL Security Analysis #862: Commit 5eefa15 pushed by mldangelo
1m 47s main
main
1m 47s