CodeQL

Workflow runs for CodeQL

• cii: add project ID lookup and ownership verification

  completed successfully:
  CodeQL#16170:Pull request#5424openedbyAastha-spec-tech
  Aastha-spec-tech:badge-inherit-pr1

  Nov 6, 20262m 54s
  More actions for workflow run 16170

• 🌱 Bump the github-actions group across 1 directory with 6 updates

  completed successfully:
  CodeQL#16169:Pull request#5358synchronizebydependabot[bot]Bot
  dependabot/github_actions/github-actions-21176b9c99

  Nov 6, 20262m 36s
  More actions for workflow run 16169

• 🌱 Bump github.com/goreleaser/goreleaser/v2 from 2.18.3 to 2.19.0 in /tools

  completed successfully:
  CodeQL#16168:Pull request#5392synchronizebydependabot[bot]Bot
  dependabot/go_modules/tools/github.com/goreleaser/goreleaser/v2-2.19.0

  Nov 6, 20262m 57s
  More actions for workflow run 16168

• 🌱 Bump github.com/google/osv-scanner/v2 from 2.5.1 to 2.7.0

  completed successfully:
  CodeQL#16167:Pull request#5330synchronizebydependabot[bot]Bot
  dependabot/go_modules/github.com/google/osv-scanner/v2-2.7.0

  Nov 6, 20262m 36s
  More actions for workflow run 16167

• 🌱 Bump github.com/moby/buildkit from 0.32.2 to 0.34.1

  completed successfully:
  CodeQL#16166:Pull request#5356synchronizebydependabot[bot]Bot
  dependabot/go_modules/github.com/moby/buildkit-0.34.1

  Nov 6, 20262m 57s
  More actions for workflow run 16166

• 🌱 Bump chainguard/static from fe55470 to fc42af3

  completed successfully:
  CodeQL#16165:Pull request#5391synchronizebydependabot[bot]Bot
  dependabot/docker/chainguard/static-fc42af33e643f20d08baf03cddcc1c02ba57052dfb02edb0d79f3fc47bcea8d9

  Nov 6, 20262m 53s
  More actions for workflow run 16165

• 🌱 Bump golang from 5bc7f57 to 8201530 in the golang group across 1 directory

  completed successfully:
  CodeQL#16164:Pull request#5372synchronizebydependabot[bot]Bot
  dependabot/docker/golang-e7b607bb40

  Nov 6, 20262m 20s
  More actions for workflow run 16164

• 🌱 Bump golang from 5bc7f57 to 8201530 in the golang group across 1 directory

  completed successfully:
  CodeQL#16163:Pull request#5354synchronizebydependabot[bot]Bot
  dependabot/docker/golang-686d0ab98d

  Nov 6, 20262m 55s
  More actions for workflow run 16163

• ✨ Consider GitHub immutable releases as signed

  completed successfully:
  CodeQL#16162:Pull request#5002synchronizebyjustaugustus
  martincostello:gh-4823

  Nov 6, 20262m 46s
  More actions for workflow run 16162

• finding: use gofuzz build tag to select probe definition source

  completed successfully:
  CodeQL#16161:Pull request#5423openedbyAastha-spec-tech
  Aastha-spec-tech:fuzz-tag

  Nov 6, 20262m 50s
  More actions for workflow run 16161

• 🐛 localdir: list a symlink only when it resolves to a readable file

  completed successfully:
  CodeQL#16160:Pull request#5422openedbyjustaugustus
  justaugustus:fix/localdir-symlink-listing

  Nov 6, 20263m 3s
  More actions for workflow run 16160

• 🌱 Share experimental check classification with the MCP catalog

  completed successfully:
  CodeQL#16159:Pull request#5421openedbyMuneer320
  Muneer320:fix/centralize-experimental-checks

  Nov 5, 20262m 44s
  More actions for workflow run 16159

• 🐛 fix(mcp): verify pinned result commits

  completed successfully:
  CodeQL#16158:Pull request#5420synchronizebyareeebs
  areeebs:codex/mcp-commit-pin-provenance

  Nov 5, 20262m 24s
  More actions for workflow run 16158

• 🐛 fix(mcp): verify pinned result commits

  completed successfully:
  CodeQL#16157:Pull request#5420synchronizebyareeebs
  areeebs:codex/mcp-commit-pin-provenance

  Nov 5, 20262m 34s
  More actions for workflow run 16157

• 🐛 fix(mcp): verify pinned result commits

  completed successfully:
  CodeQL#16156:Pull request#5420openedbyareeebs
  areeebs:codex/mcp-commit-pin-provenance

  Nov 5, 20262m 24s
  More actions for workflow run 16156

• 🐛 fix(mcp): validate repository references

  completed successfully:
  CodeQL#16155:Pull request#5419openedbyareeebs
  areeebs:codex/mcp-validate-repo-refs

  Nov 5, 20263m 13s
  More actions for workflow run 16155

• 🐛 fix(mcp): return result coverage from check tool

  completed successfully:
  CodeQL#16154:Pull request#5418openedbyareeebs
  areeebs:codex/get-check-completeness

  Nov 5, 20263m 50s
  More actions for workflow run 16154

• 🐛 fix(branch-protection): recognize SHA-1 and SHA-256 release targets

  completed successfully:
  CodeQL#16153:Pull request#5417openedbyareeebs
  areeebs:codex/branch-protection-sha-targets

  Nov 5, 20262m 37s
  More actions for workflow run 16153

• Point CONTRIBUTING at the new bug form

  completed successfully:
  CodeQL#16152:Commite73dbc5pushedbyjustaugustus
  main

  Nov 5, 20262m 47s
  More actions for workflow run 16152

• 🌱 Replace issue templates with issue forms

  completed successfully:
  CodeQL#16151:Pull request#5414openedbyjustaugustus
  justaugustus:issue-forms

  Nov 5, 20262m 20s
  More actions for workflow run 16151

• CodeQL

  completed successfully:
  CodeQL#16150:Scheduled
  main

  Nov 4, 20263m 11s
  More actions for workflow run 16150

• 🐛 fix(gitlab): set TargetCommitish to commit SHA instead of commit URL path

  completed successfully:
  CodeQL#16149:Pull request#5410openedbypatelshivani2283-lab
  patelshivani2283-lab:fix/gitlab-release-target-commitish

  Nov 3, 20262m 55s
  More actions for workflow run 16149

• 🐛 Use latest GitLab commit date for merge requests

  completed successfully:
  CodeQL#16148:Pull request#5339synchronizebyXY-code1
  XY-code1:fix/gitlab-commit-date-boundary

  Nov 3, 20262m 43s
  More actions for workflow run 16148

• 📖 Introduce scorecard mcp in the README

  completed successfully:
  CodeQL#16147:Commitab792dapushedbyjustaugustus
  main

  Nov 3, 20263m 6s
  More actions for workflow run 16147

• ✨ Add Scorecard MCP server

  completed successfully:
  CodeQL#16146:Pull request#5402synchronizebyjustaugustus
  justaugustus:mcp-subcommand

  Nov 3, 20263m 5s
  More actions for workflow run 16146