Skip to content

Actions: chainloop-dev/chainloop

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
feat(trace): capture specs during the whole session (#3524) CodeQL #7888: Commit d8f7a4e pushed by migmartri
4m 52s main
main
4m 52s
fix(controlplane): enforce keyless verification of pushed attestations CodeQL #7887: Pull request #3529 synchronize by migmartri
4m 4s fix/enforce-keyless-verification
fix/enforce-keyless-verification
4m 4s
feat(trace): capture specs during the whole session CodeQL #7886: Pull request #3524 synchronize by migmartri
4m 47s issue-3515-spec-capture-during-session-impl
issue-3515-spec-capture-during-session-impl
4m 47s
feat(controlplane): sign the API token scope and check it against the row CodeQL #7885: Pull request #3530 opened by javirln
4m 45s javier/pfm-7580-api-token-jwt-does-not-contain-the-scope-type-and-scope-id
javier/pfm-7580-api-token-jwt-does-not-contain-the-scope-type-and-scope-id
4m 45s
feat(trace): capture specs during the whole session CodeQL #7884: Pull request #3524 synchronize by migmartri
4m 55s issue-3515-spec-capture-during-session-impl
issue-3515-spec-capture-during-session-impl
4m 55s
fix(controlplane): enforce keyless verification of pushed attestations CodeQL #7883: Pull request #3529 opened by migmartri
4m 30s fix/enforce-keyless-verification
fix/enforce-keyless-verification
4m 30s
fix(trace): support OpenCode 2 in chainloop trace CodeQL #7882: Pull request #3511 synchronize by javirln
4m 42s javier/pfm-7555-chainloop-trace-does-not-seem-to-be-working-with-opencode
javier/pfm-7555-chainloop-trace-does-not-seem-to-be-working-with-opencode
4m 42s
fix(trace): support OpenCode 2 in chainloop trace CodeQL #7881: Pull request #3511 synchronize by javirln
4m 17s javier/pfm-7555-chainloop-trace-does-not-seem-to-be-working-with-opencode
javier/pfm-7555-chainloop-trace-does-not-seem-to-be-working-with-opencode
4m 17s
feat(cli): use repository organization for attestations CodeQL #7880: Pull request #3518 synchronize by waveywaves
3m 11s waveywaves:feat/attestation-repo-organization
waveywaves:feat/attestation-repo-organization
3m 11s
spec: 004 Pi coding agent support in Chainloop Trace CodeQL #7879: Pull request #3523 synchronize by waveywaves
3m 17s waveywaves:spec/pi-trace-provider
waveywaves:spec/pi-trace-provider
3m 17s
fix(trace): attribute failed, overlapping and cross-checkout shell ed… CodeQL #7878: Commit 3733bb4 pushed by migmartri
5m 10s main
main
5m 10s
feat(cli): resolve attestation project from repository config CodeQL #7877: Pull request #3517 synchronize by waveywaves
4m 47s waveywaves:feat/attestation-repo-project
waveywaves:feat/attestation-repo-project
4m 47s
chore(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.36.12-20260825204119-511051f7f437.1 to 1.36.12-20260825204119-511051f7f437.2 CodeQL #7876: Pull request #3527 opened by dependabot Bot
4m 42s dependabot/go_modules/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go-1.36.12-20260825204119-511051f7f437.2
dependabot/go_modules/buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go-1.36.12-20260825204119-511051f7f437.2
4m 42s
chore(deps): bump github.com/go-git/go-billy/v6 from 6.0.0-alpha.2 to 6.0.0-beta.1 CodeQL #7875: Pull request #3526 opened by dependabot Bot
4m 8s dependabot/go_modules/github.com/go-git/go-billy/v6-6.0.0-beta.1
dependabot/go_modules/github.com/go-git/go-billy/v6-6.0.0-beta.1
4m 8s
chore(deps): bump the go-minor-and-patch group with 27 updates CodeQL #7874: Pull request #3525 opened by dependabot Bot
4m 33s dependabot/go_modules/go-minor-and-patch-d38572ce9b
dependabot/go_modules/go-minor-and-patch-d38572ce9b
4m 33s
spec: 004 Pi coding agent support in Chainloop Trace CodeQL #7873: Pull request #3523 synchronize by waveywaves
4m 58s waveywaves:spec/pi-trace-provider
waveywaves:spec/pi-trace-provider
4m 58s
feat(trace): capture specs during the whole session CodeQL #7872: Pull request #3524 opened by migmartri
3m 31s issue-3515-spec-capture-during-session-impl
issue-3515-spec-capture-during-session-impl
3m 31s
spec: 003 Spec capture during the session (#3516) CodeQL #7871: Commit 8c9113e pushed by migmartri
4m 45s main
main
4m 45s
spec: 004 Pi coding agent support in Chainloop Trace CodeQL #7870: Pull request #3523 opened by waveywaves
4m 45s waveywaves:spec/pi-trace-provider
waveywaves:spec/pi-trace-provider
4m 45s
fix(trace): attribute failed, overlapping and cross-checkout shell edits to the AI CodeQL #7869: Pull request #3521 synchronize by migmartri
4m 39s fix/trace-shell-attribution
fix/trace-shell-attribution
4m 39s
ci: remove the daily SCM configuration check workflow (#3522) CodeQL #7868: Commit 1d8c028 pushed by javirln
4m 29s main
main
4m 29s
spec: 003 Spec capture during the session CodeQL #7867: Pull request #3516 synchronize by migmartri
4m 33s issue-3515-spec-capture-during-session
issue-3515-spec-capture-during-session
4m 33s
spec: 003 Spec capture during the session CodeQL #7866: Pull request #3516 synchronize by migmartri
3m 48s issue-3515-spec-capture-during-session
issue-3515-spec-capture-during-session
3m 48s
ci: remove the daily SCM configuration check workflow CodeQL #7865: Pull request #3522 opened by javirln
4m 4s ci/remove-scm-configuration-check-workflow
ci/remove-scm-configuration-check-workflow
4m 4s
fix(trace): attribute failed, overlapping and cross-checkout shell edits to the AI CodeQL #7864: Pull request #3521 opened by migmartri
4m 43s fix/trace-shell-attribution
fix/trace-shell-attribution
4m 43s