Skip to content

Actions: bcoles/kasld

Actions

codeql

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
160 workflow runs
160 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
render: label the component method; drop it from the leak rows codeql #160: Commit 4af8605 pushed by bcoles
2m 14s master
master
2m 14s
components: recover the arm64 image base from fault-path timing codeql #159: Commit 1557129 pushed by bcoles
2m 14s master
master
2m 14s
build: verify the zlib tarball before it lands, and mirror the fetch codeql #158: Commit 3fa3fdf pushed by bcoles
2m 14s master
master
2m 14s
build: link a pinned static zlib into the cross and release builds codeql #157: Commit 3c2fbdb pushed by bcoles
2m 18s master
master
2m 18s
orchestrator: warn when elevated privileges discard the environment codeql #156: Commit dbca4df pushed by bcoles
2m 22s master
master
2m 22s
api: drop KASLD_* on a privilege-gaining exec codeql #155: Commit eb0c940 pushed by bcoles
2m 30s master
master
2m 30s
api: fail a fact read that does not fit under the sysroot codeql #154: Commit a734207 pushed by bcoles
2m 13s master
master
2m 13s
tests: clear the warnings the drivers emit on a full rebuild codeql #153: Commit 30034bc pushed by bcoles
2m 14s master
master
2m 14s
proc_config: decompress without a shell, and without naming the file … codeql #152: Commit 508764b pushed by bcoles
2m 26s master
master
2m 26s
orchestrator: bound the stdout one component may retain under --verbose codeql #151: Commit 17d5b9d pushed by bcoles
2m 40s master
master
2m 40s
orchestrator: reject wire text that would reach the terminal as an es… codeql #150: Commit a9dc616 pushed by bcoles
2m 14s master
master
2m 14s
check-results: validate the resolved image-base windows against truth codeql #149: Commit 9a6dfd3 pushed by bcoles
2m 20s master
master
2m 20s
rules: stop converting page-frame numbers with an assumed page size codeql #148: Commit 32cd635 pushed by bcoles
2m 32s master
master
2m 32s
build: fail when a component does not compile codeql #147: Commit 91e6357 pushed by bcoles
2m 29s master
master
2m 29s
arch: make the page size an axis, so a PFN is never converted with a … codeql #146: Commit 85d166f pushed by bcoles
2m 6s master
master
2m 6s
docs: add CHANGELOG.md codeql #145: Commit 59a68ed pushed by bcoles
2m 15s master
master
2m 15s
tests: hold the component metadata vocabulary to one list codeql #144: Commit 5efd4a5 pushed by bcoles
2m 2s master
master
2m 2s
syslog: size the log mapping so the caller can terminate it codeql #143: Commit a93503b pushed by bcoles
2m 10s master
master
2m 10s
check-results: strip control characters; validate the linear-map base codeql #142: Commit fb107d6 pushed by bcoles
2m 17s master
master
2m 17s
anonymize-fdt: allocate every temporary file with mktemp codeql #141: Commit 263fe3b pushed by bcoles
1m 54s master
master
1m 54s
orchestrator: report a component that died on a signal as crashed codeql #140: Commit 4773ce0 pushed by bcoles
2m 9s master
master
2m 9s
cleanup: align comments and headers with the code they describe codeql #139: Commit 7043b78 pushed by bcoles
2m 5s master
master
2m 5s
collect: capture the EFI marker and the bpf sysctl for replay codeql #138: Commit c7e3f9f pushed by bcoles
2m 41s master
master
2m 41s
extra: restore the hardening sysctls immediately on a trapped signal codeql #137: Commit a3bfa88 pushed by bcoles
2m 0s master
master
2m 0s
build: fall back to gcc or clang when the host has no cc codeql #136: Commit 4e97b24 pushed by bcoles
1m 51s master
master
1m 51s