CodeQL

Workflow runs for CodeQL

• fix(factory,agt-approval,agt-audit): preserve explicit empty event_id/instance_id for validation and reject pre-epoch timestamps in TS (#115)

  requires action with the application:
  CodeQL#237:Pull request#120openedbydrk-ram
  drk-ram:drk-ram-fix-factory-agt-ts-115

  Oct 25, 2026Action required
  More actions for workflow run 237

• fix(projection): validate canonical decimal timestamps in TypeScript hrTime and skip non-finite floats in spanAttributes (#114)

  requires action with the application:
  CodeQL#236:Pull request#119openedbydrk-ram
  drk-ram:drk-ram-fix-projection-114

  Oct 25, 2026Action required
  More actions for workflow run 236

• fix(otel,metrics): reject bare string classification_values, whitespace-padded entries, and reserved '_other' bucket (#113)

  requires action with the application:
  CodeQL#235:Pull request#118openedbydrk-ram
  drk-ram:drk-ram-fix-otel-metrics-113

  Oct 25, 2026Action required
  More actions for workflow run 235

• fix(agt_data,data-flow): reject float classification tiers and pre-epoch evaluated_at timestamps in Python and TypeScript (#112)

  requires action with the application:
  CodeQL#234:Pull request#117openedbydrk-ram
  drk-ram:drk-ram-fix-agt-data-112

  Oct 25, 2026Action required
  More actions for workflow run 234

• fix(adapters): enforce safe-integer duration ceilings and integer-exact epoch timestamps across Cedar, OPA, and AGT policy adapters (#111)

  requires action with the application:
  CodeQL#233:Pull request#116openedbydrk-ram
  drk-ram:drk-ram-fix-policy-adapters-111

  Oct 25, 2026Action required
  More actions for workflow run 233

• fix(telemetry): close tuple privacy bypass, reject array AgenTrust headers in TS propagation, and validate digests in TRACE finalization

  requires action with the application:
  CodeQL#232:Pull request#102synchronizebydrk-ram
  drk-ram:drk-ram-fix-telemetry-privacy-propagation-digest

  Oct 25, 2026Action required
  More actions for workflow run 232

• fix(adapters): enforce safe-integer duration bounds and digest validation in Python AGT adapters (#106)

  requires action with the application:
  CodeQL#231:Pull request#109synchronizebydrk-ram
  drk-ram:drk-ram-fix-agt-adapters-106

  Oct 24, 2026Action required
  More actions for workflow run 231

• fix(data_flow,propagation): validate size_bytes/token_count in Python data_flow and reject control chars and conflicting headers in propagation (#104)

  requires action with the application:
  CodeQL#230:Pull request#108synchronizebydrk-ram
  drk-ram:drk-ram-fix-data-flow-propagation-103

  Oct 24, 2026Action required
  More actions for workflow run 230

• fix(usage): enforce safe-integer token bounds in Python and reject empty/boolean cost amounts in TypeScript (#103)

  requires action with the application:
  CodeQL#229:Pull request#110synchronizebydrk-ram
  drk-ram:drk-ram-fix-usage-104

  Oct 24, 2026Action required
  More actions for workflow run 229

• fix(evidence): reject boolean/non-integer max_events and enforce 64-char lowercase hex previousDigest in Python and TypeScript (#105)

  requires action with the application:
  CodeQL#228:Pull request#107synchronizebydrk-ram
  drk-ram:drk-ram-fix-evidence-105

  Oct 24, 2026Action required
  More actions for workflow run 228

• fix(evidence): reject boolean/non-integer max_events and enforce 64-char lowercase hex previousDigest in Python and TypeScript (#105)

  requires action with the application:
  CodeQL#227:Pull request#107synchronizebydrk-ram
  drk-ram:drk-ram-fix-evidence-105

  Oct 23, 2026Action required
  More actions for workflow run 227

• fix(data_flow,propagation): validate size_bytes/token_count in Python data_flow and reject control chars and conflicting headers in propagation (#104)

  requires action with the application:
  CodeQL#226:Pull request#108synchronizebydrk-ram
  drk-ram:drk-ram-fix-data-flow-propagation-103

  Oct 23, 2026Action required
  More actions for workflow run 226

• fix(usage): enforce safe-integer token bounds in Python and reject empty/boolean cost amounts in TypeScript (#103)

  requires action with the application:
  CodeQL#225:Pull request#110openedbydrk-ram
  drk-ram:drk-ram-fix-usage-104

  Oct 23, 2026Action required
  More actions for workflow run 225

• fix(adapters): enforce safe-integer duration bounds and digest validation in Python AGT adapters (#106)

  requires action with the application:
  CodeQL#224:Pull request#109openedbydrk-ram
  drk-ram:drk-ram-fix-agt-adapters-106

  Oct 23, 2026Action required
  More actions for workflow run 224

• fix(data_flow,propagation): validate size_bytes/token_count in Python data_flow and reject control chars and conflicting headers in propagation (#104)

  requires action with the application:
  CodeQL#222:Pull request#108openedbydrk-ram
  drk-ram:drk-ram-fix-data-flow-propagation-103

  Oct 23, 2026Action required
  More actions for workflow run 222

• fix(evidence): reject boolean/non-integer max_events and enforce 64-char lowercase hex previousDigest in Python and TypeScript (#105)

  requires action with the application:
  CodeQL#223:Pull request#107openedbydrk-ram
  drk-ram:drk-ram-fix-evidence-105

  Oct 23, 2026Action required
  More actions for workflow run 223

• fix(telemetry): close tuple privacy bypass, reject array AgenTrust headers in TS propagation, and validate digests in TRACE finalization

  completed successfully:
  CodeQL#221:Pull request#102openedbydrk-ram
  drk-ram:drk-ram-fix-telemetry-privacy-propagation-digest

  Oct 23, 20261m 2s
  More actions for workflow run 221

• test: validate Python and TypeScript collector fault cases

  completed successfully:
  CodeQL#220:Pull request#100synchronizebydinakarjs
  dinakarjs:test/collector-fault-harness

  Oct 21, 202654s
  More actions for workflow run 220

• test: validate Python and TypeScript collector fault cases

  completed successfully:
  CodeQL#219:Pull request#100synchronizebydinakarjs
  dinakarjs:test/collector-fault-harness

  Oct 21, 202650s
  More actions for workflow run 219

• test: validate Python and TypeScript collector fault cases

  completed successfully:
  CodeQL#218:Pull request#100openedbydinakarjs
  dinakarjs:test/collector-fault-harness

  Oct 21, 202658s
  More actions for workflow run 218

• test(evidence): exercise delivery faults and lost acknowledgements

  completed successfully:
  CodeQL#217:Pull request#99openedbydinakarjs
  dinakarjs:test/delivery-fault-acceptance

  Oct 21, 202650s
  More actions for workflow run 217

• ci: bump the actions group with 3 updates (#98)

  completed successfully:
  CodeQL#216:Commit53708e5pushedbyimran-siddique
  main

  Oct 20, 20261m 8s
  More actions for workflow run 216

• ci: bump the actions group with 3 updates

  completed successfully:
  CodeQL#215:Pull request#98openedbydependabot[bot]Bot
  dependabot/github_actions/actions-1b1ce9824d

  Oct 20, 202658s
  More actions for workflow run 215

• test(ci): guard telemetry OIDC permission drift (#97)

  completed successfully:
  CodeQL#214:Commit8e84644pushedbyimran-siddique
  main

  Oct 19, 202650s
  More actions for workflow run 214

• CodeQL

  completed successfully:
  CodeQL#213:Scheduled
  main

  Oct 19, 202628m 8s
  More actions for workflow run 213