CodeQL Scan

Workflow runs for CodeQL Scan

• chore: Bump vulnerable dependencies [CVE-2026-116585, CVE-2026-116586, CVE-2026-116587, CVE-2026-78661, CVE-2026-85747, CVE-2026-97045, GO-2026-5932]

  completed successfully:
  CodeQL Scan#9026:Pull request#3065openedbygithub-actions[bot]Bot
  security/cve-bump-main

  Oct 29, 20265m 44s
  More actions for workflow run 9026

• chore: Bump alpine from 294b683 to be26560 (#3063)

  completed successfully:
  CodeQL Scan#9025:Commitf7d7092pushedbyfseldow
  main

  Oct 29, 20267m 25s
  More actions for workflow run 9025

• fix: pass through images without a matching executor on mutation (#3056)

  completed successfully:
  CodeQL Scan#9024:Commit3f44842pushedbyfseldow
  main

  Oct 29, 20269m 48s
  More actions for workflow run 9024

• chore: Bump alpine from 294b683 to be26560

  completed successfully:
  CodeQL Scan#9023:Pull request#3063openedbydependabot[bot]Bot
  dependabot/docker/alpine-be2656061b536c1883c4034790e21d0a09c5aaaf51968b89368a3c0371ea2c9a

  Oct 29, 20264m 21s
  More actions for workflow run 9023

• feat(store): add StoreMux wildcard scope fallback

  completed successfully:
  CodeQL Scan#9022:Pull request#3059openedbyfseldow
  fseldow:xinhl/storemux-fallback-v2

  Oct 28, 20266m 25s
  More actions for workflow run 9022

• CodeQL Scan

  completed successfully:
  CodeQL Scan#9021:Scheduled
  main

  Oct 25, 20263m 34s
  More actions for workflow run 9021

• fix: pass through images without a matching executor on mutation

  completed successfully:
  CodeQL Scan#9020:Pull request#3056openedbyNopeCharon
  NopeCharon:fix/mutation-pass-through-unscoped-image

  Oct 24, 20265m 34s
  More actions for workflow run 9020

• chore: bump version to v2.0.0-beta.3

  completed successfully:
  CodeQL Scan#9019:Pull request#3054synchronizebyfseldow
  xinhl/main-v2.0.0-beta.3-bump

  Oct 22, 20263m 45s
  More actions for workflow run 9019

• feat: add per-artifact verification result metric (#3049)

  completed successfully:
  CodeQL Scan#9018:Commit9d1f75apushedbyfseldow
  main

  Oct 22, 20263m 19s
  More actions for workflow run 9018

• feat: add per-artifact verification result metric

  completed successfully:
  CodeQL Scan#9017:Pull request#3049synchronizebycharleswool
  charleswool:feat/verification-result-metric

  Oct 22, 20263m 8s
  More actions for workflow run 9017

• feat: add per-artifact verification result metric

  completed successfully:
  CodeQL Scan#9016:Pull request#3049synchronizebycharleswool
  charleswool:feat/verification-result-metric

  Oct 22, 20263m 21s
  More actions for workflow run 9016

• feat: add per-artifact verification result metric

  completed successfully:
  CodeQL Scan#9015:Pull request#3049synchronizebycharleswool
  charleswool:feat/verification-result-metric

  Oct 22, 20262m 57s
  More actions for workflow run 9015

• chore: bump distroless static nonroot base image (#3050)

  completed successfully:
  CodeQL Scan#9014:Commit088f7bepushedbysusanshi
  main

  Oct 22, 20263m 27s
  More actions for workflow run 9014

• chore: bump version to v2.0.0-beta.3

  completed successfully:
  CodeQL Scan#9013:Pull request#3054openedbyfseldow
  xinhl/main-v2.0.0-beta.3-bump

  Oct 22, 20263m 20s
  More actions for workflow run 9013

• chore: bump distroless static nonroot base image

  completed successfully:
  CodeQL Scan#9012:Pull request#3050synchronizebyfseldow
  xinhl/bump-distroless-nonroot-main-20261022

  Oct 22, 20263m 22s
  More actions for workflow run 9012

• chore: bump distroless static nonroot base image

  completed successfully:
  CodeQL Scan#9011:Pull request#3050openedbyfseldow
  xinhl/bump-distroless-nonroot-main-20261022

  Oct 22, 20263m 15s
  More actions for workflow run 9011

• chore: Bump oras.land/oras-go/v2 from 2.6.2 to 2.6.4 (#3044)

  completed successfully:
  CodeQL Scan#9010:Commitcc8ff2fpushedbyfseldow
  main

  Oct 22, 20265m 31s
  More actions for workflow run 9010

• chore: Bump oras.land/oras-go/v2 from 2.6.2 to 2.6.4

  completed successfully:
  CodeQL Scan#9009:Pull request#3044synchronizebyfseldow
  dependabot/go_modules/oras.land/oras-go/v2-2.6.4

  Oct 22, 20264m 14s
  More actions for workflow run 9009

• feat: add per-artifact verification result metric

  completed successfully:
  CodeQL Scan#9008:Pull request#3049openedbycharleswool
  charleswool:feat/verification-result-metric

  Oct 22, 20265m 0s
  More actions for workflow run 9008

• chore: Bump oras.land/oras-go/v2 from 2.6.2 to 2.6.4

  completed successfully:
  CodeQL Scan#9007:Pull request#3044openedbydependabot[bot]Bot
  dependabot/go_modules/oras.land/oras-go/v2-2.6.4

  Oct 22, 20263m 40s
  More actions for workflow run 9007

• CodeQL Scan

  completed successfully:
  CodeQL Scan#9006:Scheduled
  main

  Oct 18, 20264m 32s
  More actions for workflow run 9006

• chore: Bump vulnerable dependencies [CVE-2026-78659, CVE-2026-78660, …

  completed successfully:
  CodeQL Scan#9005:Commit492d79cpushedbyfseldow
  main

  Oct 14, 20264m 32s
  More actions for workflow run 9005

• chore: Bump vulnerable dependencies [CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78669, CVE-2026-97032, GO-2026-5932]

  completed successfully:
  CodeQL Scan#9004:Pull request#3038synchronizebyfseldow
  security/cve-bump-main

  Oct 14, 20263m 1s
  More actions for workflow run 9004

• chore: Bump vulnerable dependencies [CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78669, CVE-2026-97032, GO-2026-5932]

  completed successfully:
  CodeQL Scan#9003:Pull request#3038synchronizebyfseldow
  security/cve-bump-main

  Oct 14, 20263m 2s
  More actions for workflow run 9003

• chore: Bump vulnerable dependencies [CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78669, CVE-2026-97032, GO-2026-5932]

  completed successfully:
  CodeQL Scan#9002:Pull request#3038synchronizebyfseldow
  security/cve-bump-main

  Oct 14, 20264m 54s
  More actions for workflow run 9002