Skip to content

Actions: apache/commons-xml

Actions

Dependency Review

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
dependency-review.yml
112 workflow runs
112 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
build(deps-dev): bump commons.graalvm.buildtools.version from 1.1.3 to 1.1.9 Dependency Review #112: Pull request #47 opened by dependabot Bot
9s dependabot/maven/commons.graalvm.buildtools.version-1.1.9
dependabot/maven/commons.graalvm.buildtools.version-1.1.9
9s
Harden the SAXTransformerFactory extension surface Dependency Review #111: Pull request #41 synchronize by ppkarwasz
2h 1m 53s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
2h 1m 53s
Harden getAssociatedStylesheet on Xalan via a DOMSource Dependency Review #110: Pull request #46 opened by ppkarwasz
1h 57m 42s ppkarwasz:fix/associated-stylesheet-domsource
ppkarwasz:fix/associated-stylesheet-domsource
1h 57m 42s
Recognize Saxon factories by package prefix Dependency Review #109: Pull request #45 opened by ppkarwasz
1h 50m 17s ppkarwasz:fix/saxon-factory-recognition
ppkarwasz:fix/saxon-factory-recognition
1h 50m 17s
Harden the XPath InputSource evaluation surface Dependency Review #108: Pull request #44 opened by ppkarwasz
1h 34m 42s ppkarwasz:fix/xpath-inputsource-hardening
ppkarwasz:fix/xpath-inputsource-hardening
1h 34m 42s
Keep caller-opted-in resources on the hardening floor Dependency Review #107: Pull request #42 synchronize by ppkarwasz
1h 14m 41s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
1h 14m 41s
State the threat-model scope by property contract and exclude transform outputs Dependency Review #106: Pull request #43 opened by ppkarwasz
1h 17m 42s ppkarwasz:docs/contract-scope-and-transform-output
ppkarwasz:docs/contract-scope-and-transform-output
1h 17m 42s
Keep caller-opted-in resources on the hardening floor Dependency Review #105: Pull request #42 opened by ppkarwasz
1h 30m 13s ppkarwasz:fix/resolver-optin-floors
ppkarwasz:fix/resolver-optin-floors
1h 30m 13s
docs: document the supported-runtime floor (OpenJDK 8+) Dependency Review #104: Pull request #38 synchronize by ppkarwasz
1h 34m 43s ppkarwasz:docs/supported-runtime-floor
ppkarwasz:docs/supported-runtime-floor
1h 34m 43s
Harden the SAXTransformerFactory extension surface Dependency Review #103: Pull request #41 synchronize by ppkarwasz
1h 43m 0s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 43m 0s
Harden the SAXTransformerFactory extension surface Dependency Review #102: Pull request #41 synchronize by ppkarwasz
1h 47m 9s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 47m 9s
Harden the SAXTransformerFactory extension surface Dependency Review #101: Pull request #41 opened by ppkarwasz
1h 46m 52s ppkarwasz:feature/harden-saxtransformerfactory
ppkarwasz:feature/harden-saxtransformerfactory
1h 46m 52s
docs: declare the SAXTransformerFactory extension surface out of scope Dependency Review #100: Pull request #40 opened by ppkarwasz
13s ppkarwasz:docs/saxtransformerfactory-out-of-scope
ppkarwasz:docs/saxtransformerfactory-out-of-scope
13s
docs: fix stale XmlFactories.harden(XMLReader) reference in threat model Dependency Review #99: Pull request #39 opened by ppkarwasz
3m 13s ppkarwasz:docs/fix-stale-harden-reference
ppkarwasz:docs/fix-stale-harden-reference
3m 13s
docs: document the supported-runtime floor (OpenJDK 8+) Dependency Review #98: Pull request #38 opened by ppkarwasz
3m 46s ppkarwasz:docs/supported-runtime-floor
ppkarwasz:docs/supported-runtime-floor
3m 46s
Remove XmlFactories.harden(XMLReader) and harden(Source) Dependency Review #97: Pull request #37 synchronize by ppkarwasz
23m 31s remove/harden-source
remove/harden-source
23m 31s
Remove XmlFactories.harden(XMLReader) and harden(Source) Dependency Review #96: Pull request #37 opened by ppkarwasz
19m 11s remove/harden-source
remove/harden-source
19m 11s
fix: Restore hardened state after reset() Dependency Review #95: Pull request #36 opened by ppkarwasz
18m 7s fix/saxparser-reset
fix/saxparser-reset
18m 7s
fix: Restore hardened state after reset() Dependency Review #94: Pull request #35 synchronize by ppkarwasz
22m 7s fix/saxparser-reset
fix/saxparser-reset
22m 7s
fix: Restore hardened state after reset() Dependency Review #93: Pull request #35 opened by ppkarwasz
28m 53s fix/saxparser-reset
fix/saxparser-reset
28m 53s
Remove XmlFactories.harden(XMLReader) and harden(Source) Dependency Review #92: Pull request #34 opened by ppkarwasz
32m 1s remove/harden-source
remove/harden-source
32m 1s
COMMONSXML-4: Make the resolver floors ignore-all with a throw-on-unresolved toggle Dependency Review #91: Pull request #30 synchronize by ppkarwasz
7s feature/ignore-all-resolver-floors
feature/ignore-all-resolver-floors
7s
Consolidate the hardening internals per JAXP type Dependency Review #90: Pull request #28 synchronize by ppkarwasz
11s feature/reduce-shade-footprint
feature/reduce-shade-footprint
11s
COMMONSXML-4: Make the resolver floors ignore-all with a throw-on-unresolved toggle Dependency Review #89: Pull request #30 synchronize by ppkarwasz
9s feature/ignore-all-resolver-floors
feature/ignore-all-resolver-floors
9s
Consolidate the hardening internals per JAXP type Dependency Review #88: Pull request #28 synchronize by ppkarwasz
8s feature/reduce-shade-footprint
feature/reduce-shade-footprint
8s