Skip to content

Actions: crewAIInc/crewAI

Actions

CodeQL Advanced

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(llm): route all DashScope models through native provider CodeQL Advanced #10641: Pull request #7234 opened by Alphaxiaoteng
Action required Alphaxiaoteng:fix/dashscope-non-qwen-native-provider
Alphaxiaoteng:fix/dashscope-non-qwen-native-provider
Action required
harden: disable external XML entity processing in xml_loader.py... CodeQL Advanced #10640: Pull request #7232 opened by anupamme
27s anupamme:fix-repo-crewai-xxe-xml-loader-defusedxml
anupamme:fix-repo-crewai-xxe-xml-loader-defusedxml
27s
fix: show updated agent answer before each feedback prompt when verbose=False CodeQL Advanced #10639: Pull request #6386 synchronize by Julien-ser
Action required Julien-ser:fix/verbose-human-input-display
Julien-ser:fix/verbose-human-input-display
Action required
feat(tools): add native MrScraper integration CodeQL Advanced #10638: Pull request #7231 opened by ai-mrscraper
Action required ai-mrscraper:feat/mrscraper
ai-mrscraper:feat/mrscraper
Action required
Add AgentTollSafetyTool: honeypot/rug checks for a Base token via x402 (#7227) CodeQL Advanced #10637: Pull request #7228 opened by tevfikefeaydin
Action required tevfikefeaydin:add-agenttoll-safety-tool
tevfikefeaydin:add-agenttoll-safety-tool
Action required
Add AgentTollSafetyTool: honeypot/rug checks for a Base token via x402 CodeQL Advanced #10636: Pull request #7226 opened by tevfikefeaydin
11s tevfikefeaydin:add-agenttoll-safety-tool
tevfikefeaydin:add-agenttoll-safety-tool
11s
fix(flow): report missing persistence state CodeQL Advanced #10634: Pull request #7221 synchronize by Ultronen
Action required Ultronen:fix/persistence-state-error
Ultronen:fix/persistence-state-error
Action required
fix(flow): report missing persistence state CodeQL Advanced #10633: Pull request #7221 opened by Ultronen
Action required Ultronen:fix/persistence-state-error
Ultronen:fix/persistence-state-error
Action required
fix(tools): detect databricks LIMIT by clause, not substring CodeQL Advanced #10632: Pull request #7219 opened by santhiprakash
Action required santhiprakash:fix/databricks-limit-clause
santhiprakash:fix/databricks-limit-clause
Action required
chore(deps): update docling-core[chunking] requirement from >=2.74.1 to >=2.92.0 CodeQL Advanced #10631: Pull request #6811 synchronize by dependabot Bot
1m 14s dependabot/uv/docling-core-chunking--gte-2.89.0
dependabot/uv/docling-core-chunking--gte-2.89.0
1m 14s
chore(deps-dev): bump types-psycopg2 from 2.9.21.20251012 to 2.9.21.20260724 CodeQL Advanced #10630: Pull request #6812 synchronize by dependabot Bot
1m 15s dependabot/uv/types-psycopg2-2.9.21.20260724
dependabot/uv/types-psycopg2-2.9.21.20260724
1m 15s
chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp (#7215) CodeQL Advanced #10629: Commit 3d72c70 pushed by lorenzejay
2m 50s main
main
2m 50s
docs: add security best practices guide for CrewAI agents CodeQL Advanced #10628: Pull request #4674 synchronize by pandego
Action required pandego:fix/4651-security-best-practices-guide
pandego:fix/4651-security-best-practices-guide
Action required
chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp CodeQL Advanced #10627: Pull request #7215 synchronize by Vidit-Ostwal
2m 46s cursor/ignore-nltk-ghsa-8mgp-9f48
cursor/ignore-nltk-ghsa-8mgp-9f48
2m 46s
feat: add llmman as an OpenAI-compatible provider CodeQL Advanced #10626: Pull request #7217 opened by ericcurtin
Action required ericcurtin:feat/llmman-provider
ericcurtin:feat/llmman-provider
Action required
chore(ci): ignore unpatched nltk GHSA-8mgp-746c-j5xp CodeQL Advanced #10625: Pull request #7215 opened by Vidit-Ostwal
1m 13s cursor/ignore-nltk-ghsa-8mgp-9f48
cursor/ignore-nltk-ghsa-8mgp-9f48
1m 13s
fix: re-raise LLM guardrail execution errors instead of failed validation CodeQL Advanced #10624: Pull request #7151 synchronize by BetterAndBetterII
Action required BetterAndBetterII:fix/llm-guardrail-execution-error
BetterAndBetterII:fix/llm-guardrail-execution-error
Action required
fix(llms): normalize scheme and port in Ollama base URL CodeQL Advanced #10623: Pull request #7206 synchronize by Vidit-Ostwal
1m 20s parthiban-sivakumar:parthiban/fix/ollama-base-url-normalization
parthiban-sivakumar:parthiban/fix/ollama-base-url-normalization
1m 20s
fix: await async tools natively in _ainvoke_loop_native_tools CodeQL Advanced #10622: Pull request #6622 synchronize by rkfshakti
Action required rkfshakti:fix/async-native-tools-6611
rkfshakti:fix/async-native-tools-6611
Action required
fix: await async tools natively in _ainvoke_loop_native_tools CodeQL Advanced #10621: Pull request #6622 synchronize by rkfshakti
Action required rkfshakti:fix/async-native-tools-6611
rkfshakti:fix/async-native-tools-6611
Action required
feat(tools): add SkimReaderTool (card-key or x402 clean web reader) CodeQL Advanced #10620: Pull request #7214 opened by JessieJanie
Action required JessieJanie:feat/skim-reader-tool
JessieJanie:feat/skim-reader-tool
Action required
feat(embeddings): add openrouter as a supported embedding provider CodeQL Advanced #10619: Pull request #7127 synchronize by gamal1osama
Action required gamal1osama:feat/openrouter-embedding-provider
gamal1osama:feat/openrouter-embedding-provider
Action required
fix(memory): preserve reusable scope configs (#7068) CodeQL Advanced #10618: Commit 98799a3 pushed by Vidit-Ostwal
2m 13s main
main
2m 13s
fix(memory): preserve reusable scope configs CodeQL Advanced #10617: Pull request #7068 synchronize by Vidit-Ostwal
1m 21s tandede:fix/preserve-memory-scope-config
tandede:fix/preserve-memory-scope-config
1m 21s
chore(deps): update docling-core[chunking] requirement from >=2.74.1 to >=2.92.0 CodeQL Advanced #10616: Pull request #6811 synchronize by dependabot Bot
1m 17s dependabot/uv/docling-core-chunking--gte-2.89.0
dependabot/uv/docling-core-chunking--gte-2.89.0
1m 17s