Skip to content

Actions: simstudioai/sim

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
696 workflow runs
696 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(files): bound HTML parser input before building the DOM CodeQL #598: Pull request #6423 synchronize by waleedlatif1
3m 35s worktree-html-parser-oom
worktree-html-parser-oom
3m 35s
improvement(deploy): require per-install secrets instead of shipping defaults CodeQL #597: Pull request #6432 opened by waleedlatif1
5m 18s improvement/deployment-secret-handling
improvement/deployment-secret-handling
5m 18s
fix(webhooks): resolve the AgentMail tenant before verifying the signature CodeQL #596: Pull request #6431 opened by waleedlatif1
3m 39s fix/agentmail-webhook-tenant-resolution
fix/agentmail-webhook-tenant-resolution
3m 39s
improvement(tools): make internal tool routing an explicit tool declaration CodeQL #595: Pull request #6424 synchronize by waleedlatif1
3m 39s worktree-fix-internal-route-ssrf
worktree-fix-internal-route-ssrf
3m 39s
improvement(files): harden untrusted document preview and parsing CodeQL #594: Pull request #6420 synchronize by waleedlatif1
3m 32s docx-preview-hardening
docx-preview-hardening
3m 32s
fix(files): bound HTML parser input before building the DOM CodeQL #593: Pull request #6423 synchronize by waleedlatif1
3m 40s worktree-html-parser-oom
worktree-html-parser-oom
3m 40s
fix(files): escape user filenames in the Content-Disposition header CodeQL #592: Pull request #6430 opened by waleedlatif1
3m 41s content-disposition-escaping
content-disposition-escaping
3m 41s
improvement(copilot): bound image decode work on the VFS file read path CodeQL #591: Pull request #6421 synchronize by waleedlatif1
3m 35s vfs-image-read-limits
vfs-image-read-limits
3m 35s
improvement(files): harden untrusted document preview and parsing CodeQL #590: Pull request #6420 synchronize by waleedlatif1
3m 34s docx-preview-hardening
docx-preview-hardening
3m 34s
fix(mcp): apply the workspace personal API key setting to MCP serve auth CodeQL #589: Pull request #6429 opened by waleedlatif1
3m 36s worktree-mcp-serve-personal-api-key-policy
worktree-mcp-serve-personal-api-key-policy
3m 36s
fix(webhooks): centralize the path-delivery rule for trigger providers CodeQL #588: Pull request #6428 opened by waleedlatif1
3m 32s worktree-polling-trigger-forgery
worktree-polling-trigger-forgery
3m 32s
improvement(tools): make internal tool routing an explicit tool declaration CodeQL #587: Pull request #6424 synchronize by waleedlatif1
3m 35s worktree-fix-internal-route-ssrf
worktree-fix-internal-route-ssrf
3m 35s
improvement(copilot): bound image decode work on the VFS file read path CodeQL #586: Pull request #6421 synchronize by waleedlatif1
3m 34s vfs-image-read-limits
vfs-image-read-limits
3m 34s
improvement(file-parsers): bound PDF text extraction CodeQL #585: Pull request #6425 synchronize by waleedlatif1
3m 36s worktree-pdf-text-bomb
worktree-pdf-text-bomb
3m 36s
improvement(execute): enforce workspace permissions on function file exports CodeQL #584: Pull request #6427 opened by waleedlatif1
3m 40s worktree-fn-execute-workspace-authz
worktree-fn-execute-workspace-authz
3m 40s
fix(knowledge): apply knowledge-base access checks consistently across auth types CodeQL #583: Pull request #6426 synchronize by waleedlatif1
3m 36s worktree-kb-tag-definitions-authz
worktree-kb-tag-definitions-authz
3m 36s
improvement(tools): make internal tool routing an explicit tool declaration CodeQL #582: Pull request #6424 synchronize by waleedlatif1
3m 36s worktree-fix-internal-route-ssrf
worktree-fix-internal-route-ssrf
3m 36s
improvement(copilot): bound image decode work on the VFS file read path CodeQL #581: Pull request #6421 synchronize by waleedlatif1
3m 33s vfs-image-read-limits
vfs-image-read-limits
3m 33s
fix(files): bound HTML parser input before building the DOM CodeQL #580: Pull request #6423 synchronize by waleedlatif1
3m 33s worktree-html-parser-oom
worktree-html-parser-oom
3m 33s
fix(knowledge): apply knowledge-base access checks consistently across auth types CodeQL #579: Pull request #6426 opened by waleedlatif1
3m 29s worktree-kb-tag-definitions-authz
worktree-kb-tag-definitions-authz
3m 29s
improvement(file-parsers): bound PDF text extraction CodeQL #578: Pull request #6425 opened by waleedlatif1
3m 29s worktree-pdf-text-bomb
worktree-pdf-text-bomb
3m 29s
fix(files): anchor editor bubble menus to the selection on scroll CodeQL #577: Pull request #6419 synchronize by waleedlatif1
3m 34s fix/bubble-menu-scroll-anchor
fix/bubble-menu-scroll-anchor
3m 34s
improvement(tools): make internal tool routing an explicit tool declaration CodeQL #576: Pull request #6424 opened by waleedlatif1
3m 33s worktree-fix-internal-route-ssrf
worktree-fix-internal-route-ssrf
3m 33s
fix(files): bound HTML parser input before building the DOM CodeQL #575: Pull request #6423 opened by waleedlatif1
3m 40s worktree-html-parser-oom
worktree-html-parser-oom
3m 40s
fix(docs): stop the pinned sidebar running under the site footer CodeQL #574: Pull request #6422 opened by waleedlatif1
3m 33s worktree-docs-sidebar-footer
worktree-docs-sidebar-footer
3m 33s