CodeQL

Workflow runs for CodeQL

• chore(deps): Bump the python group across 1 directory with 17 updates

  completed successfully:
  CodeQL#597:Pull request#305openedbydependabot[bot]Bot
  dependabot/pip/python-3f9e26765c

  Nov 2, 20261m 10s
  More actions for workflow run 597

• chore(deps): Bump python from 3.11.17-slim-bookworm to 3.11.18-slim-bookworm

  completed successfully:
  CodeQL#596:Pull request#304openedbydependabot[bot]Bot
  dependabot/docker/python-3.11.18-slim-bookworm

  Nov 2, 202657s
  More actions for workflow run 596

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#595:Pull request#269synchronizebydinakarjs
  dinakarjs:fix/future-revocation-freshness

  Nov 2, 20261m 11s
  More actions for workflow run 595

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#594:Pull request#266synchronizebydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Nov 2, 202659s
  More actions for workflow run 594

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#593:Pull request#269synchronizebydinakarjs
  dinakarjs:fix/future-revocation-freshness

  Nov 2, 20261m 23s
  More actions for workflow run 593

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#592:Pull request#266synchronizebydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Nov 2, 20261m 17s
  More actions for workflow run 592

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#591:Pull request#269synchronizebydinakarjs
  dinakarjs:fix/future-revocation-freshness

  Nov 2, 20261m 6s
  More actions for workflow run 591

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#590:Pull request#269synchronizebydinakarjs
  dinakarjs:fix/future-revocation-freshness

  Nov 2, 20261m 3s
  More actions for workflow run 590

• CodeQL

  completed successfully:
  CodeQL#589:Scheduled
  main

  Nov 1, 20261m 1s
  More actions for workflow run 589

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#588:Pull request#294synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Nov 1, 20261m 13s
  More actions for workflow run 588

• fix(deps): enforce pyasn1 security floor for SDK and CI installs

  completed successfully:
  CodeQL#587:Pull request#303synchronizebydinakarjs
  dinakarjs:fix/pyasn1-audit-20261031

  Nov 1, 20261m 4s
  More actions for workflow run 587

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#586:Pull request#294synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Nov 1, 20261m 22s
  More actions for workflow run 586

• fix(verify): require TDX quote version 4 and validate expected digest lengths in verify_tdx_quote and verify_sev_snp_report (#283)

  requires action with the application:
  CodeQL#585:Pull request#288synchronizebydrk-ram
  drk-ram:drk-ram-fix-tdx-snp-verify-283

  Oct 31, 2026Action required
  More actions for workflow run 585

• fix(tpm): reject trailing quote bytes, bound AIA HTTP fetches, and verify report.platform in verify_tpm_report (#282)

  requires action with the application:
  CodeQL#584:Pull request#287synchronizebydrk-ram
  drk-ram:drk-ram-fix-tpm-282

  Oct 31, 2026Action required
  More actions for workflow run 584

• fix(config,tdx): reject bool max_delegation_depth, non-mapping attestation config, and trailing/empty TDX quote containers (#273)

  requires action with the application:
  CodeQL#583:Pull request#278synchronizebydrk-ram
  drk-ram:drk-ram-fix-config-tdx-273

  Oct 31, 2026Action required
  More actions for workflow run 583

• fix(delegation,attestation): enforce RFC 8785 safe-integer bounds and canonical lowercase hex on HolderProof and CallerPossession (#274)

  requires action with the application:
  CodeQL#582:Pull request#277synchronizebydrk-ram
  drk-ram:drk-ram-fix-delegation-attestation-274

  Oct 31, 2026Action required
  More actions for workflow run 582

• fix(transport): enforce canonical base64url in b64url_decode and reject non-string fields in parse_channel_offer (#271)

  requires action with the application:
  CodeQL#581:Pull request#276synchronizebydrk-ram
  drk-ram:drk-ram-fix-transport-b64url-wire-271

  Oct 31, 2026Action required
  More actions for workflow run 581

• fix(cli,transport): reject duplicate JSON keys, non-finite constants, and non-string coercion in CLI and HTTP transport (#272)

  requires action with the application:
  CodeQL#580:Pull request#275synchronizebydrk-ram
  drk-ram:drk-ram-fix-cli-transport-json-272

  Oct 31, 2026Action required
  More actions for workflow run 580

• fix(deps): enforce pyasn1 security floor for SDK and CI installs

  completed successfully:
  CodeQL#579:Pull request#303openedbydinakarjs
  dinakarjs:fix/pyasn1-audit-20261031

  Oct 31, 202648s
  More actions for workflow run 579

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#578:Pull request#294synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Oct 31, 202648s
  More actions for workflow run 578

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#577:Pull request#294synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Oct 30, 20261m 4s
  More actions for workflow run 577

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#576:Pull request#266synchronizebydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Oct 30, 20265m 49s
  More actions for workflow run 576

• test(response): exercise bounded occurrence histories and ordered con…

  completed successfully:
  CodeQL#575:Commit945292bpushedbyrajnisht7
  main

  Oct 29, 202657s
  More actions for workflow run 575

• test(response): exercise bounded occurrence histories and ordered contention

  completed successfully:
  CodeQL#574:Pull request#293synchronizebyrajnisht7
  dinakarjs:test/response-history-model-20261026

  Oct 29, 20261m 11s
  More actions for workflow run 574

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#573:Pull request#269synchronizebyrajnisht7
  dinakarjs:fix/future-revocation-freshness

  Oct 29, 20261m 9s
  More actions for workflow run 573