Skip to content

Actions: github/github-mcp-server

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
code-scanning.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
perf(sanitize): make clean text allocation-free on the hot path CodeQL #10201: Pull request #3120 opened by SamMorrowDrums
1m 54s sammorrowdrums-optimize-sanitizer-hot-paths
sammorrowdrums-optimize-sanitizer-hot-paths
1m 54s
perf(sanitize): make clean text allocation-free on the hot path CodeQL #10200: Commit d8e30fa pushed by SamMorrowDrums
1m 57s sammorrowdrums-optimize-sanitizer-hot-paths
sammorrowdrums-optimize-sanitizer-hot-paths
1m 57s
fix(copilot): explain review request denials instead of forwarding a bare 404 CodeQL #10199: Pull request #3119 opened by dylanpulver
Action required dylanpulver:fix/copilot-review-cross-fork
dylanpulver:fix/copilot-review-cross-fork
Action required
Limit HTTP request bodies before MCP middleware parsing CodeQL #10198: Pull request #3111 synchronize by SamMorrowDrums
2m 4s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
2m 4s
Set the request-body limit to 5 MiB at both layers CodeQL #10197: Commit 0f7f2de pushed by SamMorrowDrums
2m 2s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
2m 2s
fix(lockdown): isolate repo-access cache per caller identity CodeQL #10196: Pull request #3113 synchronize by SamMorrowDrums
1m 43s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 43s
fix(lockdown): drop fixed-age expiry, keep per-identity cache isolation CodeQL #10195: Commit 5ccedb7 pushed by SamMorrowDrums
1m 55s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 55s
Limit HTTP request bodies before MCP middleware parsing CodeQL #10194: Pull request #3111 synchronize by SamMorrowDrums
2m 5s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
2m 5s
Merge remote-tracking branch 'origin/main' into sammorrowdrums-align-… CodeQL #10193: Commit 609c40f pushed by SamMorrowDrums
1m 57s sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
sammorrowdrums-issue-3102-limit-http-request-bodies-before-mcp-mid-d0a507
1m 57s
refactor: condense lockdown comments in pull_request_read get_commits CodeQL #10192: Commit 08edfa8 pushed by SamMorrowDrums
2m 0s main
main
2m 0s
fix(raw): reject dot-dot segments revealed by decoding encoded separa… CodeQL #10191: Commit c195fb9 pushed by SamMorrowDrums
2m 53s main
main
2m 53s
Re-run fence filter and preserve valid variation sequences CodeQL #10190: Commit 53fc915 pushed by SamMorrowDrums
1m 35s main
main
1m 35s
Sanitize remaining issue-ref and blame headline response paths CodeQL #10189: Commit 912cce6 pushed by SamMorrowDrums
2m 6s main
main
2m 6s
fix(http): make server lockdown mode an upper bound over requests (#3… CodeQL #10188: Commit 3bad3bc pushed by SamMorrowDrums
1m 9s main
main
1m 9s
refactor: condense lockdown comments in GetPullRequestCommits CodeQL #10187: Pull request #3115 opened by SamMorrowDrums
1m 49s sammorrowdrums-comment-cleanup
sammorrowdrums-comment-cleanup
1m 49s
refactor: condense lockdown comments in pull_request_read get_commits CodeQL #10186: Commit 4fdeadb pushed by SamMorrowDrums
1m 55s sammorrowdrums-comment-cleanup
sammorrowdrums-comment-cleanup
1m 55s
fix(lockdown): isolate repo-access cache per caller identity CodeQL #10185: Pull request #3113 synchronize by SamMorrowDrums
1m 45s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 45s
refactor(lockdown): trim comments to non-obvious invariants CodeQL #10184: Commit 78828ec pushed by SamMorrowDrums
1m 51s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 51s
fix(http): make server lockdown mode an upper bound over requests CodeQL #10183: Pull request #3112 synchronize by SamMorrowDrums
1m 53s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
1m 53s
refactor: trim excessive comments from lockdown upper-bound PR CodeQL #10182: Commit 5a1863b pushed by SamMorrowDrums
1m 55s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
1m 55s
refactor: condense lockdown comments in pull_request_read get_commits CodeQL #10181: Commit 5ef7a40 pushed by SamMorrowDrums
1m 59s sammorrowdrums-harden-lockdown-pr-commits
sammorrowdrums-harden-lockdown-pr-commits
1m 59s
fix(lockdown): isolate repo-access cache per caller identity CodeQL #10180: Pull request #3113 synchronize by SamMorrowDrums
2m 1s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
2m 1s
Revert "ci(lint): skip remote config schema verification" CodeQL #10179: Commit 9f7a1a7 pushed by SamMorrowDrums
1m 58s sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
sammorrowdrums-issue-3107-use-bounded-isolated-expiry-for-lockdown-c56a37
1m 58s
fix(http): make server lockdown mode an upper bound over requests CodeQL #10178: Pull request #3112 synchronize by SamMorrowDrums
2m 10s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
2m 10s
Merge branch 'main' into sammorrowdrums-lockdown-mode-upper-bound-http CodeQL #10177: Commit 53fb8c8 pushed by SamMorrowDrums
2m 3s sammorrowdrums-lockdown-mode-upper-bound-http
sammorrowdrums-lockdown-mode-upper-bound-http
2m 3s