CodeQL

codeql.yml

150 workflow runs

fix(tools): refuse HTTP redirects in capture_witness_receipt and check_mirrors (#173)
requires action with the application:
CodeQL#150:Pull request#174openedbydrk-ram
drk-ram:reject-unchecked-redirects
Nov 6, 2026Action required
evidence: receipts from a second witness for checkpoints 1 and 2
completed successfully:
CodeQL#149:Pull request#143synchronizebyogasurfproject-jpg
ogasurfproject-jpg:evidence/nenrin-witness-2026-10-20
Nov 2, 20261m 4s
CodeQL
completed successfully:
CodeQL#148:Scheduled
main
Nov 2, 202654s
chore(deps): bump the actions group across 1 directory with 5 updates
skipped:
CodeQL#147:Pull request#170synchronizebydependabot[bot]Bot
dependabot/github_actions/actions-5e1930e721
Nov 2, 20261s
chore(deps): bump the python group across 1 directory with 3 updates
skipped:
CodeQL#146:Pull request#172openedbydependabot[bot]Bot
dependabot/pip/python-ceaf1adbc4
Nov 2, 20261s
test: add a portable offline verifier corpus (#167)
completed successfully:
CodeQL#145:Commitbcef967pushedbyrajnisht7
main
Nov 1, 20261m 25s
test(packaging): verify installed chain and witness receipt commands
completed successfully:
CodeQL#144:Pull request#171synchronizebydinakarjs
dinakarjs:test-installed-chain-receipt
Oct 31, 202657s
test: add a portable offline verifier corpus
completed successfully:
CodeQL#143:Pull request#167synchronizebydinakarjs
dinakarjs:test/portable-verifier-corpus-20261025
Oct 31, 202650s
test(mmr): check serialized proof histories against a recursive fores…
completed successfully:
CodeQL#142:Commit96985e2pushedbyrajnisht7
main
Oct 29, 202656s
fix(mmr): enforce exact int types and strict schema validation in InclusionProof/ConsistencyProof.from_dict (#160)
requires action with the application:
CodeQL#141:Pull request#165synchronizebydrk-ram
drk-ram:drk-ram-fix-mmr-proofs-160
Oct 29, 2026Action required
fix(tools): enforce duplicate-key, non-finite, and dict-type checks across NDJSON registry loaders (#159)
requires action with the application:
CodeQL#140:Pull request#164synchronizebydrk-ram
drk-ram:drk-ram-fix-tools-ndjson-159
Oct 29, 2026Action required
fix(cli): reject non-global IP URLs and validate leaf_index/leaf_count in __main__ (#158)
requires action with the application:
CodeQL#139:Pull request#163synchronizebydrk-ram
drk-ram:drk-ram-fix-cli-main-158
Oct 29, 2026Action required
fix(signature): enforce strict JSON/profile and producer key binding across envelopes and claims (#157)
requires action with the application:
CodeQL#138:Pull request#162synchronizebydrk-ram
drk-ram:drk-ram-fix-signature-157
Oct 29, 2026Action required
fix(trace_verify,tools): enforce registry-anchor-v1 surrogate/number rules, reject private JWKs, and harden MMR/JSON parsing
requires action with the application:
CodeQL#137:Pull request#147synchronizebydrk-ram
drk-ram:drk-ram-fix-issue-146-anchor-jwk-mmr-json
Oct 29, 2026Action required
fix(trace_verify/_checkpoint): enforce canonical lowercase hex on key_id, root, and signature and reject unknown CheckpointRecord fields (#148)
requires action with the application:
CodeQL#136:Pull request#152synchronizebydrk-ram
drk-ram:drk-ram-fix-checkpoint-hex-148
Oct 29, 2026Action required
fix(trace_verify/_checkpoint): enforce canonical lowercase hex on key_id, root, and signature and reject unknown CheckpointRecord fields (#148)
requires action with the application:
CodeQL#135:Pull request#152synchronizebydrk-ram
drk-ram:drk-ram-fix-checkpoint-hex-148
Oct 29, 2026Action required
fix(trace_verify/_witness): enforce lowercase hex on signature, registry_key, and witness_key and reject non-finite JSON constants (#149)
requires action with the application:
CodeQL#134:Pull request#153synchronizebydrk-ram
drk-ram:drk-ram-fix-witness-hex-149
Oct 29, 2026Action required
fix(aggregator): enforce strict Content-Length and producer validation in server and use loads_unique in CheckpointLog (#151)
requires action with the application:
CodeQL#133:Pull request#155synchronizebydrk-ram
drk-ram:drk-ram-fix-aggregator-151
Oct 29, 2026Action required
fix(tools): enforce redirect allowlists and reject duplicate JSON keys in check_mirrors and capture_witness_receipt (#150)
requires action with the application:
CodeQL#132:Pull request#154synchronizebydrk-ram
drk-ram:drk-ram-fix-tools-redirects-150
Oct 29, 2026Action required
test(packaging): verify installed chain and witness receipt commands
completed successfully:
CodeQL#131:Pull request#171synchronizebydinakarjs
dinakarjs:test-installed-chain-receipt
Oct 29, 20261m 1s
test(packaging): verify installed chain and witness receipt commands
completed successfully:
CodeQL#130:Pull request#171openedbydinakarjs
dinakarjs:test-installed-chain-receipt
Oct 29, 202652s
fix(deps): update certifi publish lock (#145)
completed successfully:
CodeQL#129:Commit11eec40pushedbyrajnisht7
main
Oct 29, 202658s
chore(deps): bump the actions group across 1 directory with 5 updates
skipped:
CodeQL#128:Pull request#170openedbydependabot[bot]Bot
dependabot/github_actions/actions-5e1930e721
Oct 26, 20261s
chore(deps): bump the python group with 2 updates
skipped:
CodeQL#127:Pull request#169openedbydependabot[bot]Bot
dependabot/pip/python-127d2f2f82
Oct 26, 20261s
test(mmr): check serialized proof histories against a recursive forest oracle
completed successfully:
CodeQL#126:Pull request#168openedbydinakarjs
dinakarjs:test/mmr-serialized-histories-20261026
Oct 26, 202657s

Navigation Menu

CodeQL

150 workflow runs

fix(tools): refuse HTTP redirects in capture_witness_receipt and check_mirrors (#173)

evidence: receipts from a second witness for checkpoints 1 and 2

CodeQL

chore(deps): bump the actions group across 1 directory with 5 updates

chore(deps): bump the python group across 1 directory with 3 updates

test: add a portable offline verifier corpus (#167)

test(packaging): verify installed chain and witness receipt commands

test: add a portable offline verifier corpus

test(mmr): check serialized proof histories against a recursive fores…

fix(mmr): enforce exact int types and strict schema validation in InclusionProof/ConsistencyProof.from_dict (#160)

fix(tools): enforce duplicate-key, non-finite, and dict-type checks across NDJSON registry loaders (#159)

fix(cli): reject non-global IP URLs and validate leaf_index/leaf_count in main (#158)

fix(signature): enforce strict JSON/profile and producer key binding across envelopes and claims (#157)

fix(trace_verify,tools): enforce registry-anchor-v1 surrogate/number rules, reject private JWKs, and harden MMR/JSON parsing

fix(trace_verify/_checkpoint): enforce canonical lowercase hex on key_id, root, and signature and reject unknown CheckpointRecord fields (#148)

fix(trace_verify/_checkpoint): enforce canonical lowercase hex on key_id, root, and signature and reject unknown CheckpointRecord fields (#148)

fix(trace_verify/_witness): enforce lowercase hex on signature, registry_key, and witness_key and reject non-finite JSON constants (#149)

fix(aggregator): enforce strict Content-Length and producer validation in server and use loads_unique in CheckpointLog (#151)

fix(tools): enforce redirect allowlists and reject duplicate JSON keys in check_mirrors and capture_witness_receipt (#150)

test(packaging): verify installed chain and witness receipt commands

test(packaging): verify installed chain and witness receipt commands

fix(deps): update certifi publish lock (#145)

chore(deps): bump the actions group across 1 directory with 5 updates

chore(deps): bump the python group with 2 updates

test(mmr): check serialized proof histories against a recursive forest oracle

Workflow runs for CodeQL

150 workflow runs