CodeQL

codeql.yml

2500+ workflow runs

chore(deps): bump the go-minor-and-patch group with 26 updates (#3355)
completed successfully:
CodeQL#7387:Commit34f0f6fpushedbymigmartri
main
Aug 17, 20266m 17s
chore(deps): bump google.golang.org/protobuf from 1.36.12-0.202601201…
completed successfully:
CodeQL#7386:Commit5523d13pushedbymigmartri
main
Aug 17, 20265m 46s
chore(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12
completed successfully:
CodeQL#7385:Pull request#3356openedbydependabot[bot]Bot
dependabot/go_modules/google.golang.org/protobuf-1.36.12
Aug 17, 20265m 13s
chore(deps): bump the go-minor-and-patch group with 26 updates
completed successfully:
CodeQL#7384:Pull request#3355openedbydependabot[bot]Bot
dependabot/go_modules/go-minor-and-patch-080c92ccd6
Aug 17, 20266m 5s
CodeQL
completed successfully:
CodeQL#7383:Scheduled
main
Aug 17, 20265m 35s
fix: upgrade golang.org/x/mod to v0.40.0
completed successfully:
CodeQL#7382:Pull request#3354openedbychainloop-platform[bot]Bot
chainloop/fix-go-2026-6179-golang-org-x-mod-20260815-154608
Aug 15, 20265m 39s
fix: upgrade golang.org/x/mod to v0.40.0 for GO-2026-6180
completed successfully:
CodeQL#7381:Pull request#3353openedbychainloop-platform[bot]Bot
chainloop/fix-go-2026-6180-golang-org-x-mod-20260815-154254
Aug 15, 20265m 29s
fix: remediate GO-2026-5942-stdlib (#3352)
completed successfully:
CodeQL#7380:Commit4a516b6pushedbymatiasinsaurralde
main
Aug 15, 20266m 1s
fix: remediate GO-2026-5942-stdlib
completed successfully:
CodeQL#7379:Pull request#3352synchronizebymatiasinsaurralde
chainloop/fix-go-2026-5942-stdlib-20260815-001515
Aug 15, 20265m 49s
fix: require Go 1.26.6 to resolve GO-2026-5026-stdlib (#3351)
completed successfully:
CodeQL#7378:Commitb20d4a0pushedbymatiasinsaurralde
main
Aug 15, 20266m 5s
fix: remediate GO-2026-5942-stdlib
completed successfully:
CodeQL#7377:Pull request#3352openedbychainloop-platform[bot]Bot
chainloop/fix-go-2026-5942-stdlib-20260815-001515
Aug 15, 20265m 37s
fix: require Go 1.26.6 to resolve GO-2026-5026-stdlib
completed successfully:
CodeQL#7376:Pull request#3351openedbychainloop-platform[bot]Bot
chainloop/fix-go-2026-5026-stdlib-20260815-001311
Aug 15, 20265m 53s
fix(policies): bound rego policy evaluation with an execution timeout…
completed successfully:
CodeQL#7375:Commit6169a9dpushedbyjiparis
main
Aug 14, 202611m 29s
fix(policies): bound rego policy evaluation with an execution timeout
completed successfully:
CodeQL#7374:Pull request#3350synchronizebyjiparis
jiparis:fix/rego-execution-timeout
Aug 14, 20265m 47s
fix(policies): bound rego policy evaluation with an execution timeout
completed successfully:
CodeQL#7373:Pull request#3350openedbyjiparis
jiparis:fix/rego-execution-timeout
Aug 14, 20265m 22s
Bump Helm Chart and Dagger Version => v1.106.0 (#3349)
completed successfully:
CodeQL#7372:Commit3bfc2f5pushedbyjavirln
main
Aug 14, 20265m 26s
ci: publish GitHub release as a draft until post-release steps succeed
completed successfully:
CodeQL#7370:Pull request#3348synchronizebyjavirln
javirln:javier/pfm-6883-release-workflow-use-goreleaser-draft-release-and-publish
Aug 13, 20265m 27s
ci: publish GitHub release as a draft until post-release steps succeed
completed successfully:
CodeQL#7369:Pull request#3348openedbyjavirln
javirln:javier/pfm-6883-release-workflow-use-goreleaser-draft-release-and-publish
Aug 13, 20265m 33s
fix(crafter): release go-git packfile descriptors after repository re…
completed successfully:
CodeQL#7368:Commit02631d6pushedbymatiasinsaurralde
main
Aug 13, 20265m 47s
perf(crafter): stream AccessChk material instead of buffering it whol…
completed successfully:
CodeQL#7367:Commit2e94498pushedbyjavirln
main
Aug 13, 20265m 17s
fix(attestation): omit inline policy evaluations when CAS ref is set …
completed successfully:
CodeQL#7366:Commit162186dpushedbyjavirln
main
Aug 13, 20265m 37s
feat(artifact-cas): stream raw uploads to the OCI CAS backend
completed successfully:
CodeQL#7365:Pull request#3347synchronizebyjavirln
javirln:javier/pfm-6924-implement-raw-streaming-in-the-oci-cas-backend-distribution
Aug 13, 20264m 39s
feat(artifact-cas): stream raw uploads to the OCI CAS backend
completed successfully:
CodeQL#7364:Pull request#3347synchronizebyjavirln
javirln:javier/pfm-6924-implement-raw-streaming-in-the-oci-cas-backend-distribution
Aug 13, 20265m 27s
perf(crafter): stream AccessChk material instead of buffering it whole
completed successfully:
CodeQL#7363:Pull request#3344synchronizebyjavirln
javirln:access-chk
Aug 13, 20265m 16s
feat(artifact-cas): stream raw uploads to the OCI CAS backend
completed successfully:
CodeQL#7362:Pull request#3347openedbyjavirln
javirln:javier/pfm-6924-implement-raw-streaming-in-the-oci-cas-backend-distribution
Aug 13, 20264m 44s

Navigation Menu

CodeQL

2500+ workflow runs

chore(deps): bump the go-minor-and-patch group with 26 updates (#3355)

chore(deps): bump google.golang.org/protobuf from 1.36.12-0.202601201…

chore(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12

chore(deps): bump the go-minor-and-patch group with 26 updates

CodeQL

fix: upgrade golang.org/x/mod to v0.40.0

fix: upgrade golang.org/x/mod to v0.40.0 for GO-2026-6180

fix: remediate GO-2026-5942-stdlib (#3352)

fix: remediate GO-2026-5942-stdlib

fix: require Go 1.26.6 to resolve GO-2026-5026-stdlib (#3351)

fix: remediate GO-2026-5942-stdlib

fix: require Go 1.26.6 to resolve GO-2026-5026-stdlib

fix(policies): bound rego policy evaluation with an execution timeout…

fix(policies): bound rego policy evaluation with an execution timeout

fix(policies): bound rego policy evaluation with an execution timeout

Bump Helm Chart and Dagger Version => v1.106.0 (#3349)

ci: publish GitHub release as a draft until post-release steps succeed

ci: publish GitHub release as a draft until post-release steps succeed

fix(crafter): release go-git packfile descriptors after repository re…

perf(crafter): stream AccessChk material instead of buffering it whol…

fix(attestation): omit inline policy evaluations when CAS ref is set …

feat(artifact-cas): stream raw uploads to the OCI CAS backend

feat(artifact-cas): stream raw uploads to the OCI CAS backend

perf(crafter): stream AccessChk material instead of buffering it whole

feat(artifact-cas): stream raw uploads to the OCI CAS backend

ProTip! You can narrow down the results and go further in time using the filter or the other filters available.

Workflow runs for CodeQL

2500+ workflow runs

ProTip! You can narrow down the results and go further in time using the created: filter or the other filters available.

ProTip! You can narrow down the results and go further in time using the filter or the other filters available.