Skip to content

Actions: anchore/syft

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yaml
927 workflow runs
927 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Add support for scanning IPK packages using the deb-archive-cataloger CodeQL #1086: Pull request #5111 synchronize by skyhisi
Action required skyhisi:add-ipk
skyhisi:add-ipk
Action required
chore(deps): update CPE dictionary index CodeQL #1085: Pull request #5221 opened by anchore-oss-update-bot
3m 8s anchore-oss-update-bot:auto/cpe-dictionary-index
anchore-oss-update-bot:auto/cpe-dictionary-index
3m 8s
fix(dotnet): preserve requested version range in packages.lock.json metadata (#5211) CodeQL #1084: Pull request #5220 opened by CAOShurong
Action required CAOShurong:codex/5211-preserve-requested-version
CAOShurong:codex/5211-preserve-requested-version
Action required
fix(java): resolve uber-jar version from root version.properties (issue #5163) CodeQL #1083: Pull request #5219 opened by CAOShurong
Action required CAOShurong:codex/5163-uberjar-versionproperties
CAOShurong:codex/5163-uberjar-versionproperties
Action required
feat(java): add support for palantir gradle-consistent-versions versions.lock lockfiles CodeQL #1082: Pull request #5218 synchronize by CAOShurong
Action required CAOShurong:codex/5176-gradle-consistent-versions-lockfile
CAOShurong:codex/5176-gradle-consistent-versions-lockfile
Action required
feat(java): add support for palantir gradle-consistent-versions versions.lock lockfiles CodeQL #1081: Pull request #5218 opened by CAOShurong
Action required CAOShurong:codex/5176-gradle-consistent-versions-lockfile
CAOShurong:codex/5176-gradle-consistent-versions-lockfile
Action required
fix(portage): read a CONTENTS path that contains spaces CodeQL #1080: Pull request #5217 opened by luantaraschi
Action required luantaraschi:fix/portage-contents-path-with-spaces
luantaraschi:fix/portage-contents-path-with-spaces
Action required
fix(elixir): use Hex package names from mix.lock CodeQL #1079: Pull request #5216 opened by sueun-dev
Action required sueun-dev:fix-elixir-mix-lock-hex-alias
sueun-dev:fix-elixir-mix-lock-hex-alias
Action required
fix: don't suppress binaries owned by unrelated OS packages CodeQL #1078: Pull request #5215 opened by yzxcj797
Action required yzxcj797:fix/unrelated-os-owner-binary-suppression
yzxcj797:fix/unrelated-os-owner-binary-suppression
Action required
chore(deps): update anchore dependencies CodeQL #1077: Pull request #5085 synchronize by anchore-oss-update-bot
4m 52s anchore-oss-update-bot:auto/anchore-deps
anchore-oss-update-bot:auto/anchore-deps
4m 52s
fix(binary): detect grafana security-patch release versions CodeQL #1076: Pull request #5213 synchronize by pujitha24
Action required pujitha24:auto/issue-5059
pujitha24:auto/issue-5059
Action required
fix(lua): skip rockspec with no package name (#4825) CodeQL #1075: Commit bf82010 pushed by spiffcs
3m 7s main
main
3m 7s
fix(lua): skip rockspec with no package name CodeQL #1074: Pull request #4825 synchronize by spiffcs
2m 59s mvanhorn:osc/4824-empty-rockspec
mvanhorn:osc/4824-empty-rockspec
2m 59s
fix(binary): detect grafana security-patch release versions CodeQL #1073: Pull request #5213 opened by pujitha24
2m 54s pujitha24:auto/issue-5059
pujitha24:auto/issue-5059
2m 54s
fix(lua): skip rockspec with no package name CodeQL #1072: Pull request #4825 synchronize by spiffcs
3m 0s mvanhorn:osc/4824-empty-rockspec
mvanhorn:osc/4824-empty-rockspec
3m 0s
fix(dotnet): resolve packages.lock dependencies deterministically CodeQL #1071: Pull request #5210 synchronize by spiffcs
2m 55s dotnet-packages-lock-per-tfm-deps
dotnet-packages-lock-per-tfm-deps
2m 55s
fix(cpe): generate the correct CPE for Microsoft Edge PE binaries CodeQL #1070: Pull request #5212 opened by pujitha24
Action required pujitha24:auto/issue-4429
pujitha24:auto/issue-4429
Action required
fix(dotnet): resolve packages.lock dependencies deterministically CodeQL #1069: Pull request #5210 synchronize by spiffcs
2m 50s dotnet-packages-lock-per-tfm-deps
dotnet-packages-lock-per-tfm-deps
2m 50s
fix(dotnet): resolve packages.lock dependencies deterministically CodeQL #1068: Pull request #5210 opened by spiffcs
2m 51s dotnet-packages-lock-per-tfm-deps
dotnet-packages-lock-per-tfm-deps
2m 51s
fix(dotnet): correct inverted dependency-of relationship direction in… CodeQL #1067: Commit 7ca1f22 pushed by spiffcs
2m 36s main
main
2m 36s
fix(rpm): keep the epoch when parsing RPM manifest packages (#5201) CodeQL #1066: Commit 93cf893 pushed by spiffcs
3m 0s main
main
3m 0s
fix(rpm): keep the epoch when parsing RPM manifest packages CodeQL #1065: Pull request #5201 synchronize by spiffcs
2m 52s sueun-dev:fix-rpm-manifest-epoch
sueun-dev:fix-rpm-manifest-epoch
2m 52s
chore(deps): bump golang.org/x/mod from 0.39.0 to 0.40.0 (#5208) CodeQL #1064: Commit 34ef7dc pushed by oss-auto-merger Bot
5m 12s main
main
5m 12s
chore(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 … CodeQL #1063: Commit 29edf90 pushed by oss-auto-merger Bot
4m 12s main
main
4m 12s
chore(deps): bump github.com/hashicorp/go-getter from 1.8.6 to 1.8.8 CodeQL #1062: Pull request #5207 synchronize by dependabot Bot
5m 26s dependabot/go_modules/github.com/hashicorp/go-getter-1.8.8
dependabot/go_modules/github.com/hashicorp/go-getter-1.8.8
5m 26s