Skip to content

Actions: apache/infrastructure-actions

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
verify: accept GitHub release immutability + Sigstore attestation as runtime-download trust anchor CodeQL #2900: Pull request #887 synchronize by potiuk
1m 5s verify-trusted-download-provenance
verify-trusted-download-provenance
1m 5s
build(deps): bump zizmorcore/zizmor-action in /.github/workflows (#885) CodeQL #2899: Commit 650f242 pushed by potiuk
6m 25s main
main
6m 25s
Bump ruff from 0.15.14 to 0.15.15 in /pelican (#913) CodeQL #2898: Commit 55624bc pushed by potiuk
7s main
main
7s
Sync actions.yml, composite action, and approved_patterns.yml CodeQL #2897: Commit e7c26e7 pushed by asfgit
5s main
main
5s
Bump ruff from 0.15.14 to 0.15.15 in /stash (#914) CodeQL #2896: Commit a63b68b pushed by potiuk
4s main
main
4s
Allow newer rubygems/release-gem (#907) CodeQL #2895: Commit 2380628 pushed by potiuk
5m 7s main
main
5m 7s
action-allowlist-review: bump carabiner-dev/actions (#911) CodeQL #2894: Commit 2b04b6b pushed by potiuk
10s main
main
10s
verify: accept validate* checksum helpers as JS download verification… CodeQL #2893: Commit df5bdc0 pushed by potiuk
1m 12s main
main
1m 12s
CodeQL CodeQL #2892: Scheduled
5m 55s main
main
5m 55s
Bump ruff from 0.15.14 to 0.15.15 in /stash CodeQL #2891: Pull request #914 opened by dependabot Bot
1m 6s dependabot/uv/stash/ruff-0.15.15
dependabot/uv/stash/ruff-0.15.15
1m 6s
Bump ruff from 0.15.14 to 0.15.15 in /pelican CodeQL #2890: Pull request #913 opened by dependabot Bot
57s dependabot/uv/pelican/ruff-0.15.15
dependabot/uv/pelican/ruff-0.15.15
57s
Sync actions.yml, composite action, and approved_patterns.yml CodeQL #2889: Commit 40884a2 pushed by asfgit
1m 14s main
main
1m 14s
Merge pull request #910 from apache/dependabot/github_actions/dot-git… CodeQL #2888: Commit 91fb88c pushed by potiuk
17s main
main
17s
verify: accept validate* checksum helpers as JS download verification (unblocks #910) CodeQL #2887: Pull request #912 opened by potiuk
1m 7s verify-accept-validate-checksum-helpers
verify-accept-validate-checksum-helpers
1m 7s
action-allowlist-review: bump astral-sh/setup-uv from 8.1.0 to 8.2.0 in /.github/actions/for-dependabot-triggered-reviews CodeQL #2886: Pull request #910 synchronize by dependabot Bot
1m 5s dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.2.0
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.2.0
1m 5s
Sync actions.yml, composite action, and approved_patterns.yml CodeQL #2885: Commit 15cbbdc pushed by asfgit
1m 9s main
main
1m 9s
Merge pull request #905 from apache/dependabot/github_actions/dot-git… CodeQL #2884: Commit 4fbc603 pushed by potiuk
7s main
main
7s
Merge pull request #908 from apache/dependabot/github_actions/dot-git… CodeQL #2883: Commit fdada5d pushed by potiuk
6s main
main
6s
Merge pull request #909 from apache/dependabot/github_actions/dot-git… CodeQL #2882: Commit 012ddc8 pushed by potiuk
11s main
main
11s
CodeQL CodeQL #2881: Scheduled
1m 11s main
main
1m 11s
action-allowlist-review: bump carabiner-dev/actions from 1.2.0 to 1.2.1 in /.github/actions/for-dependabot-triggered-reviews CodeQL #2880: Pull request #911 opened by dependabot Bot
1m 8s dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/carabiner-dev/actions-1.2.1
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/carabiner-dev/actions-1.2.1
1m 8s
action-allowlist-review: bump astral-sh/setup-uv from 8.1.0 to 8.2.0 in /.github/actions/for-dependabot-triggered-reviews CodeQL #2879: Pull request #910 opened by dependabot Bot
1m 10s dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.2.0
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/astral-sh/setup-uv-8.2.0
1m 10s
action-allowlist-review: bump graalvm/setup-graalvm from 1.5.3 to 1.5.4 in /.github/actions/for-dependabot-triggered-reviews CodeQL #2878: Pull request #909 opened by dependabot Bot
1m 8s dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/graalvm/setup-graalvm-1.5.4
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/graalvm/setup-graalvm-1.5.4
1m 8s
CodeQL CodeQL #2877: Scheduled
1m 12s main
main
1m 12s
action-allowlist-review: bump aws-actions/configure-aws-credentials from 6.1.3 to 6.2.0 in /.github/actions/for-dependabot-triggered-reviews CodeQL #2876: Pull request #908 opened by dependabot Bot
1m 17s dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/aws-actions/configure-aws-credentials-6.2.0
dependabot/github_actions/dot-github/actions/for-dependabot-triggered-reviews/aws-actions/configure-aws-credentials-6.2.0
1m 17s