Skip to content

Actions: OpenIdentityPlatform/OpenAM

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
155 workflow runs
155 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Enable HttpOnly session cookies by default CodeQL #155: Pull request #1059 synchronize by vharseko
4h 49m 58s vharseko:features/httponly
vharseko:features/httponly
4h 49m 58s
Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files CodeQL #154: Pull request #1134 synchronize by vharseko
1h 54m 24s vharseko:codeql-medium-quick-fixes
vharseko:codeql-medium-quick-fixes
1h 54m 24s
Add Trivy vulnerability scanning for the Docker image CodeQL #153: Pull request #1141 opened by vharseko
1h 56m 10s vharseko:docker-trivy-scan
vharseko:docker-trivy-scan
1h 56m 10s
Run the CodeQL security-and-quality suite CodeQL #152: Pull request #1140 opened by vharseko
2h 56m 19s vharseko:codeql-security-and-quality
vharseko:codeql-security-and-quality
2h 56m 19s
Read SAML parameters from their binding in the .NET Fedlet; run e2e scripts without a shell CodeQL #151: Pull request #1139 opened by vharseko
1h 28m 39s vharseko:fedlet-sample-hardening
vharseko:fedlet-sample-hardening
1h 28m 39s
Keep stack traces and exception messages out of HTTP responses CodeQL #150: Pull request #1138 opened by vharseko
1h 11m 11s vharseko:no-stack-traces-in-responses
vharseko:no-stack-traces-in-responses
1h 11m 11s
Keep a logged value from forging a debug record CodeQL #149: Pull request #1137 opened by vharseko
1h 17m 3s vharseko:debug-log-continuation
vharseko:debug-log-continuation
1h 17m 3s
Set the Secure and HttpOnly cookie flags from creation CodeQL #148: Pull request #1136 opened by vharseko
1h 27m 0s vharseko:cookie-flags-from-creation
vharseko:cookie-flags-from-creation
1h 27m 0s
Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files CodeQL #147: Pull request #1134 synchronize by vharseko
52m 28s vharseko:codeql-medium-quick-fixes
vharseko:codeql-medium-quick-fixes
52m 28s
Check the SAML 1.x TARGET and the WS-Federation wreply against the realm's valid goto URLs CodeQL #146: Pull request #1135 opened by vharseko
50m 9s vharseko:saml1-wsfed-redirect-target
vharseko:saml1-wsfed-redirect-target
50m 9s
Close the cheap CodeQL findings: pinned actions, token scopes, TLS identity, private temp files CodeQL #145: Pull request #1134 opened by vharseko
37m 44s vharseko:codeql-medium-quick-fixes
vharseko:codeql-medium-quick-fixes
37m 44s
Run the security filters on every dispatch type CodeQL #144: Pull request #1133 opened by vharseko
33m 34s vharseko:security-filters-all-dispatchers
vharseko:security-filters-all-dispatchers
33m 34s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 PO… CodeQL #143: Commit 50fa700 pushed by vharseko
18m 53s master
master
18m 53s
[#1130] Verify client assertions by their own alg; default id_token_s… CodeQL #142: Commit 406d5ba pushed by vharseko
20s master
master
20s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does no… CodeQL #141: Commit 4b52a13 pushed by vharseko
1h 21m 40s master
master
1h 21m 40s
CVE-2026-84375 GHSA-2883-xcg3-v3hh js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources in openam-ui-api (4.3.1 -> 4.3.2) CodeQL #140: Pull request #1132 opened by vharseko
1h 54m 30s vharseko:fix/cve-2026-84375-js-yaml-api
vharseko:fix/cve-2026-84375-js-yaml-api
1h 54m 30s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #139: Pull request #1128 synchronize by vharseko
1h 17m 31s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
1h 17m 31s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #138: Pull request #1131 synchronize by vharseko
15m 9s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
15m 9s
Do not log session ids, access tokens and password attributes (#1127) CodeQL #137: Commit b6c1d8b pushed by vharseko
17m 45s master
master
17m 45s
GHSA-x8cj-3hqv-cgwh Session query REST endpoint lets a realm administ… CodeQL #136: Commit e0ba59d pushed by vharseko
1m 10s master
master
1m 10s
Do not log session ids, access tokens and password attributes CodeQL #135: Pull request #1127 synchronize by vharseko
36m 25s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
36m 25s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #134: Pull request #1131 synchronize by vharseko
29m 47s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
29m 47s
Validate ID-FF forward targets, FilesRepo identity names and SAML1 POST target CodeQL #133: Pull request #1128 synchronize by vharseko
14m 57s vharseko:fix/idff-forward-filesrepo-saml-oauth
vharseko:fix/idff-forward-filesrepo-saml-oauth
14m 57s
Do not log session ids, access tokens and password attributes CodeQL #132: Pull request #1127 synchronize by vharseko
18m 25s vharseko:fix/sensitive-token-logging
vharseko:fix/sensitive-token-logging
18m 25s
[#1130] Verify client assertions by their own alg; default id_token_signed_response_alg CodeQL #131: Pull request #1131 synchronize by vharseko
28m 25s vharseko:fix/1130-client-assertion-alg-dispatch
vharseko:fix/1130-client-assertion-alg-dispatch
28m 25s