Skip to content

Actions: promptfoo/modelaudit

Actions

CodeQL Security Analysis

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
747 workflow runs
747 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

fix: expand dangerous pickle primitive coverage CodeQL Security Analysis #751: Pull request #705 synchronize by mldangelo
1m 48s feat/pickle-expanded-dangerous-primitives
feat/pickle-expanded-dangerous-primitives
1m 48s
fix: expand dangerous pickle primitive coverage CodeQL Security Analysis #750: Pull request #705 synchronize by mldangelo
1m 16s feat/pickle-expanded-dangerous-primitives
feat/pickle-expanded-dangerous-primitives
1m 16s
fix: expand dangerous pickle primitive coverage CodeQL Security Analysis #749: Pull request #705 synchronize by mldangelo
1m 48s feat/pickle-expanded-dangerous-primitives
feat/pickle-expanded-dangerous-primitives
1m 48s
fix: recurse into NumPy object pickle payloads CodeQL Security Analysis #748: Pull request #699 synchronize by mldangelo
1m 39s feat/numpy-object-pickle-recursion
feat/numpy-object-pickle-recursion
1m 39s
fix: expand dangerous pickle primitive coverage CodeQL Security Analysis #747: Pull request #705 synchronize by mldangelo
1m 11s feat/pickle-expanded-dangerous-primitives
feat/pickle-expanded-dangerous-primitives
1m 11s
fix: bound skops zip entry reads and enforce uncompressed size limit … CodeQL Security Analysis #746: Commit a91577d pushed by mldangelo
1m 55s main
main
1m 55s
fix: fail closed on malformed STACK_GLOBAL operands CodeQL Security Analysis #745: Pull request #704 synchronize by mldangelo
1m 40s feat/pickle-stack-global-fail-closed
feat/pickle-stack-global-fail-closed
1m 40s
fix: remove pickle hasattr allowlist entries CodeQL Security Analysis #744: Pull request #692 synchronize by mldangelo
1m 46s feat/pickle-hasattr-allowlist
feat/pickle-hasattr-allowlist
1m 46s
fix: bound advanced pickle global extraction CodeQL Security Analysis #743: Pull request #700 synchronize by mldangelo
1m 37s codex/propose-fix-for-opcode-exhaustion-vulnerability
codex/propose-fix-for-opcode-exhaustion-vulnerability
1m 37s
fix: remove pickle hasattr allowlist entries CodeQL Security Analysis #742: Pull request #692 synchronize by mldangelo
1m 40s feat/pickle-hasattr-allowlist
feat/pickle-hasattr-allowlist
1m 40s
fix: harden import-only pickle global detection CodeQL Security Analysis #741: Pull request #691 synchronize by mldangelo
1m 35s feat/pickle-import-only-findings
feat/pickle-import-only-findings
1m 35s
fix: add torch and numpy helper primitive coverage CodeQL Security Analysis #740: Pull request #706 opened by mldangelo
1m 42s feat/pickle-helper-primitives
feat/pickle-helper-primitives
1m 42s
fix: fail closed on malformed STACK_GLOBAL operands CodeQL Security Analysis #739: Pull request #704 synchronize by typpo
1m 4s feat/pickle-stack-global-fail-closed
feat/pickle-stack-global-fail-closed
1m 4s
fix: harden xgboost subprocess import isolation (#701) CodeQL Security Analysis #738: Commit 2df2d78 pushed by mldangelo
3m 3s main
main
3m 3s
fix: block legacy httplib pickle aliases (#703) CodeQL Security Analysis #737: Commit 24b789a pushed by mldangelo
1m 49s main
main
1m 49s
fix: fail closed on malformed STACK_GLOBAL operands CodeQL Security Analysis #736: Pull request #704 opened by mldangelo
1m 15s feat/pickle-stack-global-fail-closed
feat/pickle-stack-global-fail-closed
1m 15s
fix: recurse into NumPy object pickle payloads CodeQL Security Analysis #735: Pull request #699 synchronize by mldangelo
1m 10s feat/numpy-object-pickle-recursion
feat/numpy-object-pickle-recursion
1m 10s
fix: recurse into NumPy object pickle payloads CodeQL Security Analysis #734: Pull request #699 synchronize by mldangelo
1m 13s feat/numpy-object-pickle-recursion
feat/numpy-object-pickle-recursion
1m 13s
fix: block legacy httplib pickle aliases CodeQL Security Analysis #733: Pull request #703 opened by mldangelo
1m 14s feat/pickle-httplib-alias-coverage
feat/pickle-httplib-alias-coverage
1m 14s
fix: recurse into NumPy object pickle payloads CodeQL Security Analysis #732: Pull request #699 synchronize by mldangelo
1m 8s feat/numpy-object-pickle-recursion
feat/numpy-object-pickle-recursion
1m 8s
fix: enforce skops ZIP entry and archive uncompressed size limits to prevent decompression-bomb DoS CodeQL Security Analysis #731: Pull request #702 opened by mldangelo
2m 5s codex/fix-skops-scanner-decompression-size-limits
codex/fix-skops-scanner-decompression-size-limits
2m 5s
fix: harden xgboost subprocess import isolation CodeQL Security Analysis #730: Pull request #701 opened by mldangelo
1m 1s codex/propose-fix-for-xgboost-import-hijack
codex/propose-fix-for-xgboost-import-hijack
1m 1s
fix: bound advanced pickle global extraction CodeQL Security Analysis #729: Pull request #700 opened by mldangelo
1m 9s codex/propose-fix-for-opcode-exhaustion-vulnerability
codex/propose-fix-for-opcode-exhaustion-vulnerability
1m 9s
fix: remove pickle hasattr allowlist entries CodeQL Security Analysis #728: Pull request #692 synchronize by mldangelo
1m 11s feat/pickle-hasattr-allowlist
feat/pickle-hasattr-allowlist
1m 11s
fix: detect risky import-only pickle ML surfaces CodeQL Security Analysis #727: Pull request #696 synchronize by mldangelo
1m 7s feat/pickle-risky-ml-imports
feat/pickle-risky-ml-imports
1m 7s