Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
OpenIdentityPlatform
commons
Repository navigation
Code
Issues
2
(2)
Pull requests
Actions
Projects
Wiki
Security and quality
Insights
More
items
Actions: OpenIdentityPlatform/commons
Actions
All workflows
Workflows
Build Maven
Build Maven
CodeQL
CodeQL
Copilot cloud agent
Copilot cloud agent
Dependabot Updates
Dependabot Updates
Deploy Maven
Deploy Maven
Release Maven
Release Maven
Show more workflows...
Management
Caches
CodeQL
CodeQL
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
codeql.yml
will be ignored since log searching is not yet available
387 workflow runs
387 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Escape all quotes in UI helpers (CodeQL incomplete-sanitization)
CodeQL
#287:
Pull request
#280
synchronize by
vharseko
16m 38s
vharseko:features/ui-incomplete-sanitization
vharseko:features/ui-incomplete-sanitization
16m 38s
View #280
View workflow file
Replace deprecated method/constructor calls (CodeQL java/deprecated-call)
CodeQL
#286:
Pull request
#285
synchronize by
vharseko
4m 23s
vharseko:codeql/fix-deprecated-call
vharseko:codeql/fix-deprecated-call
4m 23s
View #285
View workflow file
Replace deprecated method/constructor calls (CodeQL java/deprecated-call)
CodeQL
#285:
Pull request
#285
opened by
vharseko
4m 29s
vharseko:codeql/fix-deprecated-call
vharseko:codeql/fix-deprecated-call
4m 29s
View #285
View workflow file
Fix potential unreleased lock in ScriptRegistryImpl (CodeQL java/unreleased-lock)
CodeQL
#284:
Pull request
#284
opened by
vharseko
2h 8m 21s
vharseko:features/fix-unreleased-lock
vharseko:features/fix-unreleased-lock
2h 8m 21s
View #284
View workflow file
Harden GitHub Actions workflows (CodeQL medium alerts)
CodeQL
#283:
Pull request
#283
opened by
vharseko
2h 15m 28s
vharseko:features/harden-actions-workflows
vharseko:features/harden-actions-workflows
2h 15m 28s
View #283
View workflow file
CodeQL
CodeQL
#282:
Manually run by
vharseko
1h 57m 8s
master
master
1h 57m 8s
View workflow file
Fix useless regex escapes in ValidatorsUtils namePattern
CodeQL
#281:
Pull request
#282
opened by
vharseko
2h 33m 4s
vharseko:features/validators-useless-regex-escape
vharseko:features/validators-useless-regex-escape
2h 33m 4s
View #282
View workflow file
Guard OAuth return pages against prototype pollution
CodeQL
#280:
Pull request
#281
opened by
vharseko
2h 32m 29s
vharseko:features/oauth-html-prototype-pollution
vharseko:features/oauth-html-prototype-pollution
2h 32m 29s
View #281
View workflow file
Escape all quotes in UI helpers (CodeQL incomplete-sanitization)
CodeQL
#279:
Pull request
#280
opened by
vharseko
1h 55m 0s
vharseko:features/ui-incomplete-sanitization
vharseko:features/ui-incomplete-sanitization
1h 55m 0s
View #280
View workflow file
Harden docbook branding scripts.js (CodeQL high alerts)
CodeQL
#278:
Pull request
#279
opened by
vharseko
1h 46m 8s
vharseko:features/docbkx-scripts-security
vharseko:features/docbkx-scripts-security
1h 46m 8s
View #279
View workflow file
Fix ReDoS and URL-scheme bypass in bundled marked.js
CodeQL
#277:
Pull request
#278
opened by
vharseko
1h 49m 27s
vharseko:features/marked-redos-url-scheme
vharseko:features/marked-redos-url-scheme
1h 49m 27s
View #278
View workflow file
Use AES/GCM instead of AES/CBC for json-crypto session encryption
CodeQL
#276:
Pull request
#277
opened by
vharseko
2h 19m 28s
vharseko:features/json-crypto-aes-gcm
vharseko:features/json-crypto-aes-gcm
2h 19m 28s
View #277
View workflow file
CodeQL
CodeQL
#275:
Scheduled
19m 13s
master
master
19m 13s
View workflow file
Drop the stale animal-sniffer Java 1.7 API check from persistit (#276)
CodeQL
#274:
Commit
0f5e380
pushed by
vharseko
4m 47s
master
master
4m 47s
View workflow file
Drop the stale animal-sniffer Java 1.7 API check from persistit
CodeQL
#273:
Pull request
#276
synchronize by
vharseko
4m 23s
vharseko:features/persistit-drop-animal-sniffer
vharseko:features/persistit-drop-animal-sniffer
4m 23s
View #276
View workflow file
Drop the stale animal-sniffer Java 1.7 API check from persistit
CodeQL
#272:
Pull request
#276
opened by
vharseko
3m 59s
vharseko:features/persistit-drop-animal-sniffer
vharseko:features/persistit-drop-animal-sniffer
3m 59s
View #276
View workflow file
Make non-static nested classes static (CodeQL java/non-static-nested-…
CodeQL
#271:
Commit
3f8c989
pushed by
vharseko
1h 30m 26s
master
master
1h 30m 26s
View workflow file
Make non-static nested classes static (CodeQL java/non-static-nested-class)
CodeQL
#270:
Pull request
#249
synchronize by
vharseko
1h 40m 18s
vharseko:features/codeql-static-nested-class
vharseko:features/codeql-static-nested-class
1h 40m 18s
View #249
View workflow file
Remove never-read local variables (CodeQL java/local-variable-is-neve…
CodeQL
#269:
Commit
cca1422
pushed by
vharseko
51s
master
master
51s
View workflow file
Remove never-read local variables (CodeQL java/local-variable-is-never-read)
CodeQL
#268:
Pull request
#248
synchronize by
vharseko
1h 1m 5s
vharseko:features/codeql-local-var-never-read
vharseko:features/codeql-local-var-never-read
1h 1m 5s
View #248
View workflow file
Replace boxed-primitive constructors with valueOf (CodeQL java/ineffi…
CodeQL
#267:
Commit
138bd7a
pushed by
vharseko
7m 40s
master
master
7m 40s
View workflow file
Add missing @Override annotations (CodeQL java/missing-override-annot…
CodeQL
#266:
Commit
e516274
pushed by
vharseko
22s
master
master
22s
View workflow file
Add missing @Override annotations (CodeQL java/missing-override-annotation)
CodeQL
#265:
Pull request
#246
synchronize by
vharseko
25m 29s
vharseko:features/codeql-missing-override
vharseko:features/codeql-missing-override
25m 29s
View #246
View workflow file
Use short-circuit && in Exchange.removeKeyRangeInternal (CodeQL java/…
CodeQL
#264:
Commit
a0c3465
pushed by
vharseko
12m 34s
master
master
12m 34s
View workflow file
Handle the STRICT host name verifier explicitly (CodeQL java/missing-…
CodeQL
#263:
Commit
77e436c
pushed by
vharseko
20s
master
master
20s
View workflow file
Previous
1
2
3
4
5
6
7
…
15
16
Next
You can’t perform that action at this time.