Skip to content

Actions: apache/commons-secure-xml

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
441 workflow runs
441 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Harden the XPath InputSource evaluation surface CodeQL #216: Pull request #44 synchronize by ppkarwasz
2m 23s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
2m 23s
Harden the XPath InputSource evaluation surface CodeQL #215: Pull request #44 synchronize by ppkarwasz
2m 39s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
2m 39s
Harden the XPath InputSource evaluation surface CodeQL #214: Pull request #44 synchronize by ppkarwasz
3m 40s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
3m 40s
Harden the XPath InputSource evaluation surface CodeQL #213: Pull request #44 synchronize by ppkarwasz
9m 39s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
9m 39s
Merge pull request #46 from ppkarwasz/fix/associated-stylesheet-domso… CodeQL #212: Commit c78c508 pushed by garydgregory
5m 35s main
main
5m 35s
Bump github/codeql-action/init from 4.37.7 to 4.37.8 CodeQL #211: Commit 8d9d199 pushed by garydgregory
16m 48s main
main
16m 48s
build(deps-dev): bump commons.graalvm.buildtools.version from 1.1.3 to 1.1.10 CodeQL #210: Pull request #49 synchronize by ppkarwasz
1m 56s dependabot/maven/commons.graalvm.buildtools.version-1.1.10
dependabot/maven/commons.graalvm.buildtools.version-1.1.10
1m 56s
Harden getAssociatedStylesheet on Xalan via a DOMSource CodeQL #209: Pull request #46 synchronize by ppkarwasz
1m 47s ppkarwasz:fix/associated-stylesheet-domsource
ppkarwasz:fix/associated-stylesheet-domsource
1m 47s
Recognize Saxon factories by package prefix CodeQL #208: Pull request #45 synchronize by ppkarwasz
2m 2s ppkarwasz:fix/saxon-factory-recognition
ppkarwasz:fix/saxon-factory-recognition
2m 2s
Harden the XPath InputSource evaluation surface CodeQL #207: Pull request #44 synchronize by ppkarwasz
2m 6s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
2m 6s
State the threat-model scope by property contract and exclude transform outputs CodeQL #206: Pull request #43 synchronize by ppkarwasz
2m 3s ppkarwasz:docs/contract-scope-and-transform-output
ppkarwasz:docs/contract-scope-and-transform-output
2m 3s
Keep caller-opted-in resources on the hardening floor CodeQL #205: Pull request #42 synchronize by ppkarwasz
1m 52s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
1m 52s
Bump commons-parent to version 104 CodeQL #204: Commit 91f6be1 pushed by ppkarwasz
2m 14s main
main
2m 14s
build(deps-dev): bump commons.graalvm.buildtools.version from 1.1.3 to 1.1.10 CodeQL #203: Pull request #49 opened by dependabot Bot
2m 6s dependabot/maven/commons.graalvm.buildtools.version-1.1.10
dependabot/maven/commons.graalvm.buildtools.version-1.1.10
2m 6s
Run Javadoc in a dedicated job, and fix the SpotBugs goal order CodeQL #202: Pull request #48 opened by ppkarwasz
17m 44s ppkarwasz:fix/javadoc-ci-split
ppkarwasz:fix/javadoc-ci-split
17m 44s
Harden getAssociatedStylesheet on Xalan via a DOMSource CodeQL #201: Pull request #46 synchronize by ppkarwasz
2m 34s ppkarwasz:fix/associated-stylesheet-domsource
ppkarwasz:fix/associated-stylesheet-domsource
2m 34s
Recognize Saxon factories by package prefix CodeQL #200: Pull request #45 synchronize by ppkarwasz
2m 34s ppkarwasz:fix/saxon-factory-recognition
ppkarwasz:fix/saxon-factory-recognition
2m 34s
Harden the XPath InputSource evaluation surface CodeQL #199: Pull request #44 synchronize by ppkarwasz
3m 10s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
3m 10s
State the threat-model scope by property contract and exclude transform outputs CodeQL #198: Pull request #43 synchronize by ppkarwasz
6m 57s ppkarwasz:docs/contract-scope-and-transform-output
ppkarwasz:docs/contract-scope-and-transform-output
6m 57s
Keep caller-opted-in resources on the hardening floor CodeQL #197: Pull request #42 synchronize by ppkarwasz
5m 18s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
5m 18s
Merge pull request #41 from ppkarwasz/feature/harden-saxtransformerfa… CodeQL #196: Commit b1a85ef pushed by garydgregory
2m 14s main
main
2m 14s
Merge pull request #38 from ppkarwasz/docs/supported-runtime-floor CodeQL #195: Commit 87eff6d pushed by garydgregory
2m 48s main
main
2m 48s
CodeQL CodeQL #194: Scheduled
6m 21s main
main
6m 21s
build(deps-dev): bump commons.graalvm.buildtools.version from 1.1.3 to 1.1.9 CodeQL #193: Pull request #47 opened by dependabot Bot
2m 6s dependabot/maven/commons.graalvm.buildtools.version-1.1.9
dependabot/maven/commons.graalvm.buildtools.version-1.1.9
2m 6s
Harden the SAXTransformerFactory extension surface CodeQL #192: Pull request #41 synchronize by ppkarwasz
1h 59m 33s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 59m 33s
ProTip! You can narrow down the results and go further in time using created:<2026-08-19 or the other filters available.