Skip to content

Actions: jenstroeger/python-package-template

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yaml
407 workflow runs
407 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
chore(deps-dev): update cyclonedx-bom requirement from <5.0.0,>=4.0.0 to >=4.0.0,<8.0.0 CodeQL #1216: Pull request #1148 synchronize by jenstroeger
1m 39s dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-8.0.0
dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-8.0.0
1m 39s
CodeQL CodeQL #1215: Scheduled
1m 37s main
main
1m 37s
fix: make very very sure that pip prune uses only wheels (from the wheelhouse), and prevent accidentally building a wheel CodeQL #1214: Pull request #1151 opened by jenstroeger
1m 47s fix-makefile-7
fix-makefile-7
1m 47s
fix: don’t print warning about upgrading the venv if the venv wasn’t upgraded yet CodeQL #1213: Pull request #1150 opened by jenstroeger
1m 44s fix-makefile-6
fix-makefile-6
1m 44s
refactor: use Dependency Groups (PEP 735) instead of misusing package extras for dependencies that are not direct package dependencies CodeQL #1212: Pull request #1149 opened by jenstroeger
1m 36s use-group-dependencies
use-group-dependencies
1m 36s
chore(deps-dev): update cyclonedx-bom requirement from <5.0.0,>=4.0.0 to >=4.0.0,<8.0.0 CodeQL #1211: Pull request #1148 opened by dependabot Bot
2m 38s dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-8.0.0
dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-8.0.0
2m 38s
chore(deps-dev): bump faker from 40.13.0 to 40.15.0 CodeQL #1210: Pull request #1147 opened by dependabot Bot
1m 33s dependabot/pip/main/faker-40.15.0
dependabot/pip/main/faker-40.15.0
1m 33s
chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 CodeQL #1209: Pull request #1146 opened by dependabot Bot
1m 42s dependabot/github_actions/main/github/codeql-action-4.35.2
dependabot/github_actions/main/github/codeql-action-4.35.2
1m 42s
chore(deps): bump step-security/harden-runner from 2.16.1 to 2.19.0 CodeQL #1208: Pull request #1145 opened by dependabot Bot
1m 35s dependabot/github_actions/main/step-security/harden-runner-2.19.0
dependabot/github_actions/main/step-security/harden-runner-2.19.0
1m 35s
chore(deps): update cyclonedx-bom requirement from <5.0.0,>=4.0.0 to >=4.0.0,<6.0.0 CodeQL #1207: Pull request #919 synchronize by dependabot Bot
1m 29s dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-6.0.0
dependabot/pip/main/cyclonedx-bom-gte-4.0.0-and-lt-6.0.0
1m 29s
feat: add a Makefile goal simple-index-pep691 that generates a PEP-691 compatible Simple Index directory inside the dist; rename the existing goal to simple-index-pep503 CodeQL #1206: Pull request #1143 synchronize by jenstroeger
1m 32s add-simple-index-to-dist-pep691
add-simple-index-to-dist-pep691
1m 32s
fix(ci): when gathering build artifacts for subsequent jobs/steps then constrain finding said artifacts and ignore generated directories CodeQL #1205: Pull request #1144 synchronize by jenstroeger
1m 31s fix-dist-find-maxdepth
fix-dist-find-maxdepth
1m 31s
chore(deps-dev): update pytest requirement from <9.0.0,>=7.2.0 to >=9… CodeQL #1204: Commit f000c2a pushed by jenstroeger
1m 28s main
main
1m 28s
fix(ci): when gathering build artifacts for subsequent jobs/steps then constrain finding said artifacts and ignore generated directories CodeQL #1203: Pull request #1144 opened by jenstroeger
1m 29s fix-dist-find-maxdepth
fix-dist-find-maxdepth
1m 29s
feat: add a Makefile goal simple-index-pep691 that generates a PEP-691 compatible Simple Index directory inside the dist; rename the existing goal to simple-index-pep503 CodeQL #1202: Pull request #1143 opened by jenstroeger
1m 39s add-simple-index-to-dist-pep691
add-simple-index-to-dist-pep691
1m 39s
CodeQL CodeQL #1201: Scheduled
1m 28s main
main
1m 28s
chore(deps-dev): update pytest requirement from <9.0.0,>=7.2.0 to >=9.0.3,<10.0.0 CodeQL #1200: Pull request #1142 opened by dependabot Bot
4m 5s dependabot/pip/main/pytest-gte-9.0.3-and-lt-10.0.0
dependabot/pip/main/pytest-gte-9.0.3-and-lt-10.0.0
4m 5s
chore(deps-dev): update pip-audit requirement from <3.0.0,>=2.4.4 to >=2.10.0,<3.0.0 CodeQL #1199: Pull request #1141 opened by dependabot Bot
4m 57s dependabot/pip/main/pip-audit-gte-2.10.0-and-lt-3.0.0
dependabot/pip/main/pip-audit-gte-2.10.0-and-lt-3.0.0
4m 57s
chore(deps-dev): update flit requirement from <4.0.0,>=3.2.0 to >=3.12.0,<4.0.0 CodeQL #1198: Pull request #1140 opened by dependabot Bot
5m 27s dependabot/pip/main/flit-gte-3.12.0-and-lt-4.0.0
dependabot/pip/main/flit-gte-3.12.0-and-lt-4.0.0
5m 27s
chore(deps-dev): update pre-commit requirement from <4.6.0,>=3.0.0 to >=4.5.1,<4.6.0 CodeQL #1197: Pull request #1139 opened by dependabot Bot
2m 20s dependabot/pip/main/pre-commit-gte-4.5.1-and-lt-4.6.0
dependabot/pip/main/pre-commit-gte-4.5.1-and-lt-4.6.0
2m 20s
chore(deps-dev): update perflint requirement from <1.0.0,>=0.8.0 to >=0.8.1,<1.0.0 CodeQL #1196: Pull request #1138 opened by dependabot Bot
3m 26s dependabot/pip/main/perflint-gte-0.8.1-and-lt-1.0.0
dependabot/pip/main/perflint-gte-0.8.1-and-lt-1.0.0
3m 26s
chore(deps-dev): bump commitizen from 4.13.9 to 4.13.10 CodeQL #1195: Pull request #1137 opened by dependabot Bot
3m 40s dependabot/pip/main/commitizen-4.13.10
dependabot/pip/main/commitizen-4.13.10
3m 40s
chore(deps-dev): update sphinx requirement from <9.0.0,>=5.1.1 to >=8.1.3,<9.0.0 CodeQL #1194: Pull request #1136 opened by dependabot Bot
3m 12s dependabot/pip/main/sphinx-gte-8.1.3-and-lt-9.0.0
dependabot/pip/main/sphinx-gte-8.1.3-and-lt-9.0.0
3m 12s
chore(deps-dev): update pylint requirement from <4.1.0,>=3.0.0 to >=4.0.5,<4.1.0 CodeQL #1193: Pull request #1135 opened by dependabot Bot
2m 29s dependabot/pip/main/pylint-gte-4.0.5-and-lt-4.1.0
dependabot/pip/main/pylint-gte-4.0.5-and-lt-4.1.0
2m 29s
chore(deps-dev): update flit-core requirement from <4.0.0,>=3.2.0 to >=3.12.0,<4.0.0 CodeQL #1192: Pull request #1134 opened by dependabot Bot
2m 30s dependabot/pip/main/flit-core-gte-3.12.0-and-lt-4.0.0
dependabot/pip/main/flit-core-gte-3.12.0-and-lt-4.0.0
2m 30s