Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
105 workflow runs
105 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Fix Device Code session propagation and OIDC claims CodeQL #105: Pull request #1108 synchronize by dairoca90
16m 10s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
16m 10s
[#1114] Fix precompile-jsps profile for the Jakarta EE 9 webapp CodeQL #104: Pull request #1120 opened by vharseko
15m 13s vharseko:fix/1114-precompile-jsps-jakarta
vharseko:fix/1114-precompile-jsps-jakarta
15m 13s
GHSA-p498-v437-472g @humanfs/node: Recursive copy follows symlinks and copies files from outside the source tree CodeQL #103: Pull request #1119 opened by dependabot Bot
14m 7s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/humanfs/node-0.16.8
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/humanfs/node-0.16.8
14m 7s
CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172 GHSA-qw65-cvwx-89v3 GHSA-58mr-gqgx-xq4g fast-uri: SSRF and host confusion (3.1.5 -> 3.1.7) CodeQL #102: Pull request #1118 opened by vharseko
52m 34s vharseko:fix/fast-uri-3.1.7
vharseko:fix/fast-uri-3.1.7
52m 34s
Bump fast-uri from 3.1.5 to 3.1.7 in /openam-ui/openam-ui-ria CodeQL #101: Pull request #1117 opened by dependabot Bot
14m 39s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.7
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.7
14m 39s
Bump fast-uri from 3.1.5 to 3.1.7 in /openam-ui/openam-ui-js-sdk CodeQL #100: Pull request #1116 opened by dependabot Bot
14m 15s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.7
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.7
14m 15s
CVE-2026-43871 GHSA-8wv5-x4w7-5gww libthrift: Infinite loop in Apache Thrift Java bindings (0.23.0 -> 0.24.0) CodeQL #99: Pull request #1115 opened by dependabot Bot
12m 57s dependabot/maven/org.apache.thrift-libthrift-0.24.0
dependabot/maven/org.apache.thrift-libthrift-0.24.0
12m 57s
Fix Device Code session propagation and OIDC claims CodeQL #98: Pull request #1108 synchronize by dairoca90
15m 15s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
15m 15s
CodeQL CodeQL #97: Scheduled
14m 2s master
master
14m 2s
Fix Device Code session propagation and OIDC claims CodeQL #96: Pull request #1108 synchronize by dairoca90
14m 31s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
14m 31s
CodeQL CodeQL #95: Scheduled
18m 56s master
master
18m 56s
[#1111] Click fork: stop calling javax.servlet-bound upstream ClickUtils CodeQL #94: Pull request #1112 synchronize by maximthomas
39m 34s maximthomas:issues/1111-click-log-javax-bound
maximthomas:issues/1111-click-log-javax-bound
39m 34s
[#1111] Click fork: stop calling javax.servlet-bound upstream ClickUtils CodeQL #93: Pull request #1112 opened by maximthomas
50m 31s maximthomas:issues/1111-click-log-javax-bound
maximthomas:issues/1111-click-log-javax-bound
50m 31s
Remove the Java serialization round trip from the bundled Click HiddenField CodeQL #92: Pull request #1109 synchronize by vharseko
29m 12s vharseko:fix/ghsa-7j4m-m698-57hp-remove-click-deserialization
vharseko:fix/ghsa-7j4m-m698-57hp-remove-click-deserialization
29m 12s
Remove the Java serialization round trip from the bundled Click HiddenField CodeQL #91: Pull request #1109 opened by vharseko
2h 25m 26s vharseko:fix/ghsa-7j4m-m698-57hp-remove-click-deserialization
vharseko:fix/ghsa-7j4m-m698-57hp-remove-click-deserialization
2h 25m 26s
CodeQL CodeQL #90: Scheduled
17m 29s master
master
17m 29s
Fix Device Code session propagation and OIDC claims CodeQL #89: Pull request #1108 opened by dairoca90
15m 33s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
15m 33s
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap reso… CodeQL #88: Commit d937e56 pushed by vharseko
1h 34m 17s master
master
1h 34m 17s
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap resolution CodeQL #87: Pull request #1106 opened by dependabot Bot
26m 43s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
26m 43s
[#1103] Add upgrade step syncing missing ScriptingService sub-configu… CodeQL #86: Commit 7fb46c2 pushed by vharseko
28m 0s master
master
28m 0s
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text … CodeQL #85: Commit c5dd05f pushed by vharseko
25s master
master
25s
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #84: Pull request #1104 synchronize by vharseko
13m 32s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
13m 32s
CodeQL CodeQL #83: Scheduled
18m 21s master
master
18m 21s
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text elements CodeQL #82: Pull request #1105 opened by dependabot Bot
14m 10s dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
14m 10s
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations CodeQL #81: Pull request #1104 synchronize by vharseko
14m 49s vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
14m 49s