CodeQL

Workflow runs for CodeQL

• CodeQL

  completed successfully:
  CodeQL#750:Scheduled
  master

  Nov 2, 20262m 13s
  More actions for workflow run 750

• CodeQL

  completed successfully:
  CodeQL#749:Scheduled
  master

  Oct 26, 20262m 51s
  More actions for workflow run 749

• CodeQL

  completed successfully:
  CodeQL#748:Scheduled
  master

  Oct 19, 20262m 32s
  More actions for workflow run 748

• CodeQL

  completed successfully:
  CodeQL#747:Scheduled
  master

  Oct 12, 20262m 52s
  More actions for workflow run 747

• fix(limiter): Bearer-only identity + IP-keyed pre-auth login (variant-tolerant)

  completed successfully:
  CodeQL#746:Pull request#460openedbyAlajmah
  security/limiter-identity-v5

  Oct 9, 20261m 19s
  More actions for workflow run 746

• fix(limiter): Bearer-only identity + IP-keyed pre-auth login (variant-tolerant)

  completed successfully:
  CodeQL#745:Pull request#459openedbyAlajmah
  security/limiter-identity-v4

  Oct 9, 20261m 28s
  More actions for workflow run 745

• fix(limiter): Bearer-only identity with IP-keyed pre-auth login (variant-tolerant)

  completed successfully:
  CodeQL#744:Pull request#458openedbyAlajmah
  security/limiter-identity-v3

  Oct 9, 20261m 22s
  More actions for workflow run 744

• fix(10): streaming 25MiB webhook body cap — explicit disposition, swallowed late errors, no blanket listener removal

  completed successfully:
  CodeQL#743:Pull request#457openedbyAlajmah
  security/10-webhook-body-limit-v4

  Oct 9, 20261m 33s
  More actions for workflow run 743

• fix(limiter): Bearer-only identity + IP-keyed pre-auth login throttle

  completed successfully:
  CodeQL#742:Pull request#456openedbyAlajmah
  security/limiter-identity-v2

  Oct 9, 20261m 26s
  More actions for workflow run 742

• fix(10): streaming 25MiB webhook body cap — explicit disposition, swallowed late errors

  completed successfully:
  CodeQL#741:Pull request#455openedbyAlajmah
  security/10-webhook-body-limit-v3

  Oct 9, 20261m 30s
  More actions for workflow run 741

• fix(limiter): Bearer-only identity derivation closes the rotation bypass

  completed successfully:
  CodeQL#740:Pull request#454openedbyAlajmah
  security/limiter-identity-bearer-only

  Oct 9, 20261m 30s
  More actions for workflow run 740

• test(limiter): behavior pins + non-Bearer identity-bypass reproducer …

  completed successfully:
  CodeQL#739:Commit8c9b93bpushedbyAlajmah
  master

  Oct 9, 20262m 47s
  More actions for workflow run 739

• test(36/37): direct-path dangerous-key regressions with explicit nest…

  completed successfully:
  CodeQL#738:Commit779f58fpushedbyAlajmah
  master

  Oct 9, 20262m 41s
  More actions for workflow run 738

• test(limiter): behavior pins + non-Bearer identity-bypass reproducer (recorded, not fixed)

  completed successfully:
  CodeQL#737:Pull request#453openedbyAlajmah
  security/limiter-behavior-regressions-v3

  Oct 9, 20261m 23s
  More actions for workflow run 737

• test(limiter): behavior pins + non-Bearer identity-bypass reproducer (recorded, not fixed)

  completed successfully:
  CodeQL#736:Pull request#452openedbyAlajmah
  security/limiter-behavior-regressions-v2

  Oct 9, 20261m 23s
  More actions for workflow run 736

• test(36/37): direct-path regressions with explicit nested-prototype invariants

  completed successfully:
  CodeQL#735:Pull request#451openedbyAlajmah
  security/36-37-direct-path-regressions-v2

  Oct 9, 20261m 16s
  More actions for workflow run 735

• fix(10): streaming 25MiB webhook body cap — explicit disposition on both rejection paths

  completed successfully:
  CodeQL#734:Pull request#450openedbyAlajmah
  security/10-webhook-body-limit-v2

  Oct 9, 20261m 13s
  More actions for workflow run 734

• test(limiter): pin rate-limiter behavior — limits, 429, exclusions, identities, documented fail-open

  completed successfully:
  CodeQL#733:Pull request#449openedbyAlajmah
  security/limiter-behavior-regressions

  Oct 9, 202657s
  More actions for workflow run 733

• test(36/37): direct-path dangerous-key regressions for both merge primitives

  completed successfully:
  CodeQL#732:Pull request#448openedbyAlajmah
  security/36-37-direct-path-regressions

  Oct 9, 20261m 18s
  More actions for workflow run 732

• fix(10): enforce a streaming 25MB body cap on the webhook receiver

  completed successfully:
  CodeQL#731:Pull request#447openedbyAlajmah
  security/10-webhook-body-limit

  Oct 9, 20261m 22s
  More actions for workflow run 731

• fix(28): webhook dispatcher selects handlers by own property only (#446)

  completed successfully:
  CodeQL#730:Commit6216fb8pushedbyAlajmah
  master

  Oct 8, 20262m 8s
  More actions for workflow run 730

• fix(28): webhook dispatcher selects handlers by own property only

  completed successfully:
  CodeQL#729:Pull request#446openedbyAlajmah
  security/28-dispatch-guard

  Oct 8, 20261m 7s
  More actions for workflow run 729

• feat(425): plugin execution moves behind a disposable OS sandbox (#12…

  completed successfully:
  CodeQL#728:Commit7b07c72pushedbyAlajmah
  master

  Oct 8, 20262m 15s
  More actions for workflow run 728

• feat(425): plugin execution moves behind a disposable OS sandbox (#12 fix)

  completed successfully:
  CodeQL#727:Pull request#445openedbyAlajmah
  425/plugin-sandbox-isolation-v14

  Oct 8, 20261m 29s
  More actions for workflow run 727

• feat(425): plugin execution moves behind a disposable OS sandbox (#12 fix)

  completed successfully:
  CodeQL#726:Pull request#444openedbyAlajmah
  425/plugin-sandbox-isolation-v13

  Oct 8, 20261m 33s
  More actions for workflow run 726