Skip to content

Actions: apache/commons-secure-xml

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
441 workflow runs
441 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Harden getAssociatedStylesheet on Xalan via a DOMSource CodeQL #191: Pull request #46 opened by ppkarwasz
1h 59m 41s ppkarwasz:fix/associated-stylesheet-domsource
ppkarwasz:fix/associated-stylesheet-domsource
1h 59m 41s
Recognize Saxon factories by package prefix CodeQL #190: Pull request #45 opened by ppkarwasz
1h 53m 30s ppkarwasz:fix/saxon-factory-recognition
ppkarwasz:fix/saxon-factory-recognition
1h 53m 30s
Harden the XPath InputSource evaluation surface CodeQL #189: Pull request #44 opened by ppkarwasz
1h 41m 14s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
1h 41m 14s
Keep caller-opted-in resources on the hardening floor CodeQL #188: Pull request #42 synchronize by ppkarwasz
1h 16m 11s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
1h 16m 11s
State the threat-model scope by property contract and exclude transform outputs CodeQL #187: Pull request #43 opened by ppkarwasz
1h 19m 12s ppkarwasz:docs/contract-scope-and-transform-output
ppkarwasz:docs/contract-scope-and-transform-output
1h 19m 12s
Keep caller-opted-in resources on the hardening floor CodeQL #186: Pull request #42 opened by ppkarwasz
1h 34m 20s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
1h 34m 20s
docs: document the supported-runtime floor (OpenJDK 8+) CodeQL #185: Pull request #38 synchronize by ppkarwasz
1h 34m 43s ppkarwasz:docs/supported-runtime-floor
ppkarwasz:docs/supported-runtime-floor
1h 34m 43s
Harden the SAXTransformerFactory extension surface CodeQL #184: Pull request #41 synchronize by ppkarwasz
1h 46m 33s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 46m 33s
Harden the SAXTransformerFactory extension surface CodeQL #183: Pull request #41 synchronize by ppkarwasz
1h 50m 20s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 50m 20s
Harden the SAXTransformerFactory extension surface CodeQL #182: Pull request #41 opened by ppkarwasz
1h 51m 26s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 51m 26s
Bump codeql-action from 4.37.6 to 4.37.7 CodeQL #181: Commit 125a1a3 pushed by garydgregory
2m 56s main
main
2m 56s
Merge pull request #40 from ppkarwasz/docs/saxtransformerfactory-out-… CodeQL #180: Commit 4d61f56 pushed by garydgregory
1m 48s main
main
1m 48s
Merge pull request #39 from ppkarwasz/docs/fix-stale-harden-reference CodeQL #179: Commit c7b7747 pushed by garydgregory
1m 56s main
main
1m 56s
docs: declare the SAXTransformerFactory extension surface out of scope CodeQL #178: Pull request #40 opened by ppkarwasz
2m 3s ppkarwasz:docs/saxtransformerfactory-out-of-scope
ppkarwasz:docs/saxtransformerfactory-out-of-scope
2m 3s
docs: fix stale XmlFactories.harden(XMLReader) reference in threat model CodeQL #177: Pull request #39 opened by ppkarwasz
5m 16s ppkarwasz:docs/fix-stale-harden-reference
ppkarwasz:docs/fix-stale-harden-reference
5m 16s
docs: document the supported-runtime floor (OpenJDK 8+) CodeQL #176: Pull request #38 opened by ppkarwasz
5m 42s ppkarwasz:docs/supported-runtime-floor
ppkarwasz:docs/supported-runtime-floor
5m 42s
Remove the harden(XMLReader) and harden(Source) methods from the publ… CodeQL #175: Commit 2a67b2f pushed by ppkarwasz
15m 13s main
main
15m 13s
Remove XmlFactories.harden(XMLReader) and harden(Source) CodeQL #174: Pull request #37 synchronize by ppkarwasz
27m 22s remove/harden-source
remove/harden-source
27m 22s
fix: Restore hardened state after reset() (#36) CodeQL #173: Commit 9c84b10 pushed by ppkarwasz
27m 46s main
main
27m 46s
Remove XmlFactories.harden(XMLReader) and harden(Source) CodeQL #172: Pull request #37 opened by ppkarwasz
21m 4s remove/harden-source
remove/harden-source
21m 4s
fix: Restore hardened state after reset() CodeQL #171: Pull request #36 opened by ppkarwasz
20m 20s fix/saxparser-reset
fix/saxparser-reset
20m 20s
Merge pull request #33 from ppkarwasz/chore/asf-yaml CodeQL #170: Commit be0343d pushed by garydgregory
50m 0s main
main
50m 0s
Merge pull request #29 from apache/feature/threat-model-caller-suppli… CodeQL #169: Commit a62d2fc pushed by garydgregory
49m 33s main
main
49m 33s
Merge pull request #30 from apache/feature/ignore-all-resolver-floors CodeQL #168: Commit 3337304 pushed by garydgregory
50m 5s main
main
50m 5s
fix: Restore hardened state after reset() CodeQL #167: Pull request #35 synchronize by ppkarwasz
23m 30s fix/saxparser-reset
fix/saxparser-reset
23m 30s
ProTip! You can narrow down the results and go further in time using created:<2026-08-18 or the other filters available.