Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
129 workflow runs
129 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Escape reflected request parameters in the sample servlets (#1129) CodeQL #129: Commit 8891ce4 pushed by vharseko
2h 2m 11s master
master
2h 2m 11s
SetupUtils: pass chmod arguments to Runtime.exec as an array (#1126) CodeQL #128: Commit 6006c77 pushed by vharseko
23s master
master
23s
[#1114] Fix precompile-jsps profile for the Jakarta EE 9 webapp (#1120) CodeQL #127: Commit f189e36 pushed by vharseko
18s master
master
18s
Escape reflected request parameters in the sample servlets CodeQL #126: Pull request #1129 synchronize by vharseko
2h 38m 30s vharseko:fix/sample-apps-xss
vharseko:fix/sample-apps-xss
2h 38m 30s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does no… CodeQL #125: Commit bfa7e10 pushed by vharseko
2h 37m 3s master
master
2h 37m 3s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #124: Pull request #1131 opened by vharseko
14m 39s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
14m 39s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #123: Pull request #1128 synchronize by vharseko
2h 7m 17s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
2h 7m 17s
Escape reflected request parameters in the sample servlets CodeQL #122: Pull request #1129 opened by vharseko
1h 34m 49s vharseko:fix/sample-apps-xss
vharseko:fix/sample-apps-xss
1h 34m 49s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #121: Pull request #1128 opened by vharseko
28m 43s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
28m 43s
Do not log session ids, access tokens and password attributes CodeQL #120: Pull request #1127 opened by vharseko
1h 3m 32s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
1h 3m 32s
CodeQL CodeQL #119: Scheduled
1h 45m 58s master
master
1h 45m 58s
SetupUtils: pass chmod arguments to Runtime.exec as an array CodeQL #118: Pull request #1126 opened by vharseko
55m 5s vharseko:fix/setuputils-chmod-exec-args
vharseko:fix/setuputils-chmod-exec-args
55m 5s
CVE-2026-84373 vitest: Path traversal / arbitrary file read via @vite… CodeQL #117: Commit 5993d76 pushed by vharseko
1h 20m 50s master
master
1h 20m 50s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources (4.3.1 -> 4.3.2) CodeQL #116: Pull request #1125 opened by dependabot Bot
11h 58m 34s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.2
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.2
11h 58m 34s
GHSA-p498-v437-472g @humanfs/node: Recursive copy follows symlinks an… CodeQL #115: Commit 7663eb8 pushed by vharseko
13h 23m 11s master
master
13h 23m 11s
CVE-2026-43871 GHSA-8wv5-x4w7-5gww libthrift: Infinite loop in Apache… CodeQL #114: Commit bcdd785 pushed by vharseko
25s master
master
25s
CVE-2026-84373 vitest: Path traversal / arbitrary file read via @vitest/mocker redirect mocks (4.1.0 -> 4.1.11) CodeQL #113: Pull request #1124 opened by dependabot Bot
10h 13m 26s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/multi-d0c2d048a7
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/multi-d0c2d048a7
10h 13m 26s
[#1111] Click fork: stop calling javax.servlet-bound upstream ClickUt… CodeQL #112: Commit 475b6f1 pushed by maximthomas
19m 50s master
master
19m 50s
CodeQL CodeQL #111: Scheduled
19m 8s master
master
19m 8s
CVE-2026-73088 CVE-2026-73089 browserslist: Prototype write via untru… CodeQL #110: Commit ed7c087 pushed by vharseko
14m 27s master
master
14m 27s
CVE-2026-75899 CVE-2026-75931 CVE-2026-75975 CVE-2026-76172 GHSA-qw65… CodeQL #109: Commit d464cfb pushed by vharseko
54s master
master
54s
CVE-2026-73088 CVE-2026-73089 browserslist: Prototype write via untrusted custom stats and unbounded cache growth (-> 4.28.9) CodeQL #108: Pull request #1123 opened by vharseko
14m 4s vharseko:bump/browserslist-4.28.9
vharseko:bump/browserslist-4.28.9
14m 4s
Bump browserslist from 4.28.2 to 4.28.9 in /openam-ui/openam-ui-js-sdk CodeQL #107: Pull request #1122 opened by dependabot Bot
12m 30s dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/browserslist-4.28.9
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/browserslist-4.28.9
12m 30s
Bump browserslist from 4.25.4 to 4.28.9 in /openam-ui/openam-ui-ria CodeQL #106: Pull request #1121 opened by dependabot Bot
13m 13s dependabot/npm_and_yarn/openam-ui/openam-ui-ria/browserslist-4.28.9
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/browserslist-4.28.9
13m 13s
Fix Device Code session propagation and OIDC claims CodeQL #105: Pull request #1108 synchronize by dairoca90
16m 10s dairoca90:debug-16.1.2
dairoca90:debug-16.1.2
16m 10s