CodeQL

Workflow runs for CodeQL

• chore(deps): Bump filelock from 3.32.5 to 4.2.1 in /requirements

  completed successfully:
  CodeQL#533:Pull request#281openedbydependabot[bot]Bot
  dependabot/pip/requirements/filelock-4.2.1

  Oct 24, 20261m 12s
  More actions for workflow run 533

• chore(deps-dev): Bump setuptools from 84.0.0 to 84.1.0 in /requirements

  completed successfully:
  CodeQL#532:Pull request#280openedbydependabot[bot]Bot
  dependabot/pip/requirements/setuptools-84.1.0

  Oct 24, 20261m 8s
  More actions for workflow run 532

• chore(deps): Bump certifi from 2026.7.22 to 2026.10.19 in /requirements

  completed successfully:
  CodeQL#531:Pull request#279openedbydependabot[bot]Bot
  dependabot/pip/requirements/certifi-2026.10.19

  Oct 24, 20261m 5s
  More actions for workflow run 531

• fix(verify,runtime): reject private JWK members, non-canonical base64url, lone surrogates, and duplicate JSON keys (#267)

  completed successfully:
  CodeQL#530:Pull request#270synchronizebydrk-ram
  drk-ram:drk-ram-fix-verify-runtime-hardening-267

  Oct 23, 20261m 18s
  More actions for workflow run 530

• fix(config,tdx): reject bool max_delegation_depth, non-mapping attestation config, and trailing/empty TDX quote containers (#273)

  completed successfully:
  CodeQL#529:Pull request#278openedbydrk-ram
  drk-ram:drk-ram-fix-config-tdx-273

  Oct 23, 20269m 18s
  More actions for workflow run 529

• fix(delegation,attestation): enforce RFC 8785 safe-integer bounds and canonical lowercase hex on HolderProof and CallerPossession (#274)

  completed successfully:
  CodeQL#528:Pull request#277openedbydrk-ram
  drk-ram:drk-ram-fix-delegation-attestation-274

  Oct 23, 20261m 33s
  More actions for workflow run 528

• fix(transport): enforce canonical base64url in b64url_decode and reject non-string fields in parse_channel_offer (#271)

  completed successfully:
  CodeQL#527:Pull request#276openedbydrk-ram
  drk-ram:drk-ram-fix-transport-b64url-wire-271

  Oct 23, 20262m 13s
  More actions for workflow run 527

• fix(cli,transport): reject duplicate JSON keys, non-finite constants, and non-string coercion in CLI and HTTP transport (#272)

  completed successfully:
  CodeQL#526:Pull request#275openedbydrk-ram
  drk-ram:drk-ram-fix-cli-transport-json-272

  Oct 23, 20261m 31s
  More actions for workflow run 526

• fix(verify,runtime): reject private JWK members, non-canonical base64url, lone surrogates, and duplicate JSON keys (#267)

  requires action with the application:
  CodeQL#525:Pull request#270openedbydrk-ram
  drk-ram:drk-ram-fix-verify-runtime-hardening-267

  Oct 23, 2026Action required
  More actions for workflow run 525

• fix: reject future revocation snapshots under freshness policy

  completed successfully:
  CodeQL#524:Pull request#269openedbydinakarjs
  dinakarjs:fix/future-revocation-freshness

  Oct 23, 202655s
  More actions for workflow run 524

• fix(verify,runtime): reject private JWK members, non-canonical base64url, lone surrogates, duplicate JSON keys, and future revocation snapshots

  failed:
  CodeQL#523:Pull request#268openedbydrk-ram
  drk-ram:drk-ram-fix-verify-runtime-hardening-267

  Oct 23, 20268s
  More actions for workflow run 523

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#522:Pull request#266synchronizebydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Oct 21, 202659s
  More actions for workflow run 522

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#521:Pull request#266synchronizebydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Oct 21, 20261m 8s
  More actions for workflow run 521

• test: characterize cA2A advertisement with pinned official A2A TCK

  completed successfully:
  CodeQL#520:Pull request#266openedbydinakarjs
  dinakarjs:test/pinned-a2a-tck-differential

  Oct 21, 20261m 10s
  More actions for workflow run 520

• fix(deps): refresh certifi locks for PYSEC-2026-4320

  completed successfully:
  CodeQL#519:Pull request#265openedbydinakarjs
  dinakarjs:fix/certifi-audit-2026-4320

  Oct 21, 20261m 4s
  More actions for workflow run 519

• fix(ci): check installed dependencies in CI and release validation

  completed successfully:
  CodeQL#518:Pull request#264openedbydinakarjs
  dinakarjs:fix/ci-installed-dependency-consistency

  Oct 21, 20261m 4s
  More actions for workflow run 518

• chore(deps): Bump the python group with 3 updates

  completed successfully:
  CodeQL#517:Pull request#260synchronizebyimran-siddique
  dependabot/pip/python-15991472c8

  Oct 20, 202653s
  More actions for workflow run 517

• fix(ci): let /vouch reply on pull requests

  completed successfully:
  CodeQL#516:Pull request#262openedbyimran-siddique
  fix/vouch-pr-comment-permission

  Oct 19, 202653s
  More actions for workflow run 516

• chore(deps): Bump the actions group with 4 updates

  completed successfully:
  CodeQL#515:Pull request#261openedbydependabot[bot]Bot
  dependabot/github_actions/actions-a1663af67c

  Oct 19, 20261m 8s
  More actions for workflow run 515

• chore(deps): Bump the python group with 3 updates

  completed successfully:
  CodeQL#514:Pull request#260openedbydependabot[bot]Bot
  dependabot/pip/python-15991472c8

  Oct 19, 20261m 3s
  More actions for workflow run 514

• CodeQL

  completed successfully:
  CodeQL#513:Scheduled
  main

  Oct 18, 20261m 6s
  More actions for workflow run 513

• fix(channel): normalize low-order peer key errors

  completed successfully:
  CodeQL#512:Pull request#259openedbydinakarjs
  dinakarjs:fix/sealed-exchange-error-20261017

  Oct 16, 20261m 16s
  More actions for workflow run 512

• chore(deps): Bump the python group with 17 updates (#256)

  completed successfully:
  CodeQL#511:Commit305fedcpushedbyimran-siddique
  main

  Oct 16, 20262m 27s
  More actions for workflow run 511

• docs(papers): add the published report sources (#258)

  completed successfully:
  CodeQL#510:Commit72a678cpushedbyimran-siddique
  main

  Oct 16, 20261m 16s
  More actions for workflow run 510

• docs(papers): add the published report sources

  completed successfully:
  CodeQL#509:Pull request#258openedbyimran-siddique
  docs/papers-from-retired-repo

  Oct 16, 20262m 27s
  More actions for workflow run 509