codeql

Workflow runs for codeql

• ci(release): publish signed GitHub Releases with SLSA provenance (#55)

  completed successfully:
  codeql#84:Commitfabbc82pushedbycarbon-evolution
  main

  Oct 18, 20261m 26s
  More actions for workflow run 84

• ci(release): signed GitHub Releases with Sigstore signatures and SLSA provenance

  completed successfully:
  codeql#83:Pull request#55openedbycarbon-evolution
  ci/signed-releases

  Oct 18, 20261m 12s
  More actions for workflow run 83

• docs(security): re-rate OWASP Top 10 after #50-#52 (#54)

  completed successfully:
  codeql#82:Commitda32571pushedbycarbon-evolution
  main

  Oct 18, 20261m 0s
  More actions for workflow run 82

• docs(security): re-rate OWASP Top 10 after #50–#52

  completed successfully:
  codeql#81:Pull request#54openedbycarbon-evolution
  docs/owasp-reassessment

  Oct 18, 20261m 12s
  More actions for workflow run 81

• chore(deps): bump the actions group with 3 updates (#49)

  completed successfully:
  codeql#80:Commit5a24bcfpushedbycarbon-evolution
  main

  Oct 18, 20261m 20s
  More actions for workflow run 80

• chore: hold Node major bumps in Dependabot; ignore local .claude stat…

  completed successfully:
  codeql#79:Commit8e361a3pushedbycarbon-evolution
  main

  Oct 18, 20261m 21s
  More actions for workflow run 79

• fix(security): tighten CSP and add hardening headers (OWASP A02) (#52)

  completed successfully:
  codeql#78:Commitbba2c3bpushedbycarbon-evolution
  main

  Oct 18, 20261m 1s
  More actions for workflow run 78

• fix(security): gate the recon scanner proxy; trust proxy headers only…

  completed successfully:
  codeql#77:Commitf47eb0bpushedbycarbon-evolution
  main

  Oct 18, 20261m 24s
  More actions for workflow run 77

• chore: hold Node major bumps in Dependabot; ignore local .claude state

  completed successfully:
  codeql#76:Pull request#53openedbycarbon-evolution
  chore/dependabot-node-majors

  Oct 18, 20261m 5s
  More actions for workflow run 76

• fix(security): tighten CSP and add hardening headers (OWASP A02)

  completed successfully:
  codeql#75:Pull request#52openedbycarbon-evolution
  fix/security-headers

  Oct 18, 20261m 11s
  More actions for workflow run 75

• fix(security): gate recon scanner proxy; trust proxy headers only on opt-in (OWASP A01)

  completed successfully:
  codeql#74:Pull request#51openedbycarbon-evolution
  fix/scanner-access

  Oct 18, 202657s
  More actions for workflow run 74

• fix(analytics): make Umami opt-in, drop visitor-IP event (OWASP A06) …

  completed successfully:
  codeql#73:Commit0385471pushedbycarbon-evolution
  main

  Oct 18, 20261m 8s
  More actions for workflow run 73

• chore(types): replace explicit any in 20 more files (batch 2) (#45)

  completed successfully:
  codeql#72:Commit5cd3246pushedbycarbon-evolution
  main

  Oct 18, 20261m 12s
  More actions for workflow run 72

• fix(analytics): make Umami opt-in, drop visitor-IP event (OWASP A06)

  completed successfully:
  codeql#71:Pull request#50openedbycarbon-evolution
  fix/analytics-opt-in

  Oct 18, 20261m 17s
  More actions for workflow run 71

• chore(deps): bump the actions group with 3 updates

  completed successfully:
  codeql#70:Pull request#49openedbydependabot[bot]Bot
  dependabot/github_actions/actions-1b1ce9824d

  Oct 18, 202655s
  More actions for workflow run 70

• chore(deps): bump the docker group across 2 directories with 1 update

  completed successfully:
  codeql#69:Pull request#48openedbydependabot[bot]Bot
  dependabot/docker/docker-472585c14e

  Oct 18, 20261m 13s
  More actions for workflow run 69

• docs(security): OWASP Top 10:2025 assessment; private reporting (#47)

  completed successfully:
  codeql#68:Commit0276376pushedbycarbon-evolution
  main

  Oct 18, 20261m 30s
  More actions for workflow run 68

• ci: malware scan, OWASP ZAP baseline, OpenSSF Scorecard; pin all acti…

  completed successfully:
  codeql#67:Commite27f328pushedbycarbon-evolution
  main

  Oct 18, 20261m 9s
  More actions for workflow run 67

• docs(security): OWASP Top 10:2025 assessment; private vulnerability reporting

  completed successfully:
  codeql#66:Pull request#47openedbycarbon-evolution
  docs/owasp-assessment

  Oct 18, 20261m 13s
  More actions for workflow run 66

• ci: malware scan, OWASP ZAP baseline, OpenSSF Scorecard; pin all actions

  completed successfully:
  codeql#65:Pull request#46synchronizebycarbon-evolution
  ci/security-scans

  Oct 18, 20261m 0s
  More actions for workflow run 65

• ci: malware scan, OWASP ZAP baseline, OpenSSF Scorecard; pin all actions

  completed successfully:
  codeql#64:Pull request#46synchronizebycarbon-evolution
  ci/security-scans

  Oct 18, 202659s
  More actions for workflow run 64

• ci: malware scan, OWASP ZAP baseline, OpenSSF Scorecard; pin all actions

  completed successfully:
  codeql#63:Pull request#46openedbycarbon-evolution
  ci/security-scans

  Oct 18, 202652s
  More actions for workflow run 63

• chore(types): replace explicit any in 20 more files (batch 2)

  completed successfully:
  codeql#62:Pull request#45openedbycarbon-evolution
  chore/types-batch-2

  Oct 18, 20261m 2s
  More actions for workflow run 62

• fix(github-webhook): configurable target; fail closed when unconfigur…

  completed successfully:
  codeql#61:Commit45da475pushedbycarbon-evolution
  main

  Oct 18, 202656s
  More actions for workflow run 61

• fix(github-webhook): configurable target; fail closed when unconfigured

  completed successfully:
  codeql#60:Pull request#44openedbycarbon-evolution
  fix/github-webhook-target

  Oct 18, 20261m 11s
  More actions for workflow run 60