Skip to content

Actions: github/github-mcp-server

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
code-scanning.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Centralize sanitization of untrusted GitHub response fields CodeQL #10151: Pull request #3114 opened by SamMorrowDrums
1m 58s sammorrowdrums-issue-3106-apply-consistent-sanitization-to-untrust-18354a
sammorrowdrums-issue-3106-apply-consistent-sanitization-to-untrust-18354a
1m 58s
Centralize sanitization of untrusted GitHub response fields CodeQL #10150: Commit ab2b623 pushed by SamMorrowDrums
2m 5s sammorrowdrums-issue-3106-apply-consistent-sanitization-to-untrust-18354a
sammorrowdrums-issue-3106-apply-consistent-sanitization-to-untrust-18354a
2m 5s
fix(lockdown): bound repo-access cache expiry and isolate it per identity CodeQL #10149: Pull request #3113 opened by SamMorrowDrums
1m 56s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 56s
fix(lockdown): bound repo-access cache expiry and isolate it per iden… CodeQL #10148: Commit 64a43bc pushed by SamMorrowDrums
1m 45s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 45s
fix(http): make server lockdown mode an upper bound over requests CodeQL #10147: Pull request #3112 opened by SamMorrowDrums
2m 6s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
2m 6s
fix(http): make server lockdown mode an upper bound over requests CodeQL #10146: Commit 1b45732 pushed by SamMorrowDrums
1m 46s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
1m 46s
Limit HTTP request bodies before MCP middleware parsing CodeQL #10145: Pull request #3111 opened by SamMorrowDrums
1m 49s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
1m 49s
Limit HTTP request bodies before MCP middleware parsing CodeQL #10144: Commit 2cc4ccb pushed by SamMorrowDrums
1m 57s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
1m 57s
Filter invisible Unicode after HTML entity normalization CodeQL #10143: Pull request #3110 opened by SamMorrowDrums
2m 1s sammorrowdrums-filter-invisible-unicode-after-html-enti
sammorrowdrums-filter-invisible-unicode-after-html-enti
2m 1s
Filter invisible Unicode after HTML entity normalization CodeQL #10142: Commit cde2427 pushed by SamMorrowDrums
1m 54s sammorrowdrums-filter-invisible-unicode-after-html-enti
sammorrowdrums-filter-invisible-unicode-after-html-enti
1m 54s
fix(lockdown): harden pull_request_read get_commits handling CodeQL #10141: Pull request #3109 opened by SamMorrowDrums
2m 0s sammorrowdrums-harden-lockdown-pr-commits
sammorrowdrums-harden-lockdown-pr-commits
2m 0s
fix(lockdown): harden pull_request_read get_commits handling CodeQL #10140: Commit cd1642a pushed by SamMorrowDrums
2m 1s sammorrowdrums-harden-lockdown-pr-commits
sammorrowdrums-harden-lockdown-pr-commits
2m 1s
fix(raw): reject traversal segments when constructing raw content URLs CodeQL #10139: Pull request #3108 opened by SamMorrowDrums
2m 6s sammorrowdrums-raw-content-path-traversal-hardening
sammorrowdrums-raw-content-path-traversal-hardening
2m 6s
fix(raw): reject traversal segments when constructing raw content URLs CodeQL #10138: Commit a3da715 pushed by SamMorrowDrums
1m 49s sammorrowdrums-raw-content-path-traversal-hardening
sammorrowdrums-raw-content-path-traversal-hardening
1m 49s
build(deps): clear UI dependency alerts CodeQL #10137: Commit c54cd63 pushed by SamMorrowDrums
2m 5s main
main
2m 5s
build(deps): clear UI dependency alerts CodeQL #10136: Pull request #3100 opened by SamMorrowDrums
1m 54s sammorrowdrums-clear-ui-dependency-alerts
sammorrowdrums-clear-ui-dependency-alerts
1m 54s
build(deps): clear UI dependency alerts CodeQL #10135: Commit dd458ff pushed by SamMorrowDrums
2m 13s sammorrowdrums-clear-ui-dependency-alerts
sammorrowdrums-clear-ui-dependency-alerts
2m 13s
fix(issues): narrow search field enrichment fallback CodeQL #10134: Commit c64b6fe pushed by SamMorrowDrums
2m 40s main
main
2m 40s
fix(issues): preserve delete field semantics CodeQL #10133: Commit 1e7b3f9 pushed by SamMorrowDrums
1m 42s main
main
1m 42s
fix(repos): label deferred symlink content accurately CodeQL #10132: Commit a6b8207 pushed by SamMorrowDrums
1m 58s main
main
1m 58s
Clarify symlink behavior for repository file reads and writes CodeQL #10131: Pull request #3071 synchronize by SamMorrowDrums
2m 4s theinfosecguy:fix-symlink-file-write-safety
theinfosecguy:fix-symlink-file-write-safety
2m 4s
Handle unsupported issueFieldValues enrichment in search_issues CodeQL #10130: Pull request #2897 synchronize by SamMorrowDrums
1m 39s kerobbi/fix-search-issues-ghes-field-values
kerobbi/fix-search-issues-ghes-field-values
1m 39s
fix(issues): narrow search field enrichment fallback CodeQL #10129: Commit b9a7ebf pushed by SamMorrowDrums
1m 54s kerobbi/fix-search-issues-ghes-field-values
kerobbi/fix-search-issues-ghes-field-values
1m 54s
fix(tools): allow omitted tool arguments CodeQL #10128: Commit 4665185 pushed by SamMorrowDrums
1m 57s main
main
1m 57s
fix(issues): allow delete:false in issue_write issue_fields CodeQL #10127: Pull request #3077 synchronize by SamMorrowDrums
1m 47s tgockel:issue-fields-delete-false
tgockel:issue-fields-delete-false
1m 47s