CodeQL security analysis

Workflow runs for CodeQL security analysis

• CodeQL security analysis

  completed successfully:
  CodeQL security analysis#33:Scheduled
  main

  Oct 20, 20261m 8s
  More actions for workflow run 33

• chore: prepare GitHub Sponsors funding configuration

  completed successfully:
  CodeQL security analysis#32:Commit0e11e92pushedbyharshitethic
  main

  Oct 19, 202611m 50s
  More actions for workflow run 32

• chore(deps): bump actions/checkout from 4 to 7

  completed successfully:
  CodeQL security analysis#31:Pull request#38openedbydependabot[bot]Bot
  dependabot/github_actions/actions/checkout-7

  Oct 19, 202659s
  More actions for workflow run 31

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in the safe-minor-and-patch group

  completed successfully:
  CodeQL security analysis#30:Pull request#37openedbydependabot[bot]Bot
  dependabot/github_actions/safe-minor-and-patch-dc5ed02c9f

  Oct 19, 20261m 26s
  More actions for workflow run 30

• chore(deps): update uvicorn requirement from <1,>=0.35 to >=0.54.0,<1 in /backend

  completed successfully:
  CodeQL security analysis#29:Pull request#36openedbydependabot[bot]Bot
  dependabot/pip/backend/uvicorn-gte-0.54.0-and-lt-1

  Oct 19, 202644s
  More actions for workflow run 29

• chore(deps): update httpx requirement from <1,>=0.28 to >=0.28.1,<1 in /backend

  completed successfully:
  CodeQL security analysis#28:Pull request#35openedbydependabot[bot]Bot
  dependabot/pip/backend/httpx-gte-0.28.1-and-lt-1

  Oct 19, 202649s
  More actions for workflow run 28

• PatchPilot: bounded Git output and process group cleanup (#33)

  completed successfully:
  CodeQL security analysis#27:Commit582c157pushedbyharshitethic
  main

  Oct 16, 20261m 3s
  More actions for workflow run 27

• Bound host Git output and clean up timed-out process groups

  completed successfully:
  CodeQL security analysis#26:Pull request#33openedbyharshitethic
  hardening/bounded-host-git-output

  Oct 16, 20261m 2s
  More actions for workflow run 26

• fix(ui): clear stale run results and verify browser failure states (#32)

  completed successfully:
  CodeQL security analysis#25:Commitb0017d9pushedbyharshitethic
  main

  Oct 15, 202644s
  More actions for workflow run 25

• Clear stale results on new/failed runs; add real Chromium regressions

  completed successfully:
  CodeQL security analysis#24:Pull request#32openedbyharshitethic
  test/browser-workflow-demo

  Oct 15, 20261m 0s
  More actions for workflow run 24

• Close repair-prompt credential leaks (#31)

  completed successfully:
  CodeQL security analysis#23:Commit59f3828pushedbyharshitethic
  main

  Oct 15, 202657s
  More actions for workflow run 23

• Close repair-prompt credential leaks through Git diffs and test output

  completed successfully:
  CodeQL security analysis#22:Pull request#31openedbyharshitethic
  fix/repair-context-privacy

  Oct 15, 202654s
  More actions for workflow run 22

• fix(provider): bound transfers and verify agent failure recovery (#30)

  completed successfully:
  CodeQL security analysis#21:Commitd05bd36pushedbyharshitethic
  main

  Oct 15, 20261m 1s
  More actions for workflow run 21

• Bound model-provider transfers and verify agent failure recovery

  completed successfully:
  CodeQL security analysis#20:Pull request#30openedbyharshitethic
  reliability/bounded-model-transport

  Oct 15, 202658s
  More actions for workflow run 20

• security(privacy): exclude credential files from model context

  completed successfully:
  CodeQL security analysis#19:Commita3e3962pushedbyharshitethic
  main

  Oct 15, 202656s
  More actions for workflow run 19

• Keep sensitive repository files and credential signatures out of AI context

  completed successfully:
  CodeQL security analysis#18:Pull request#29openedbyharshitethic
  security/filter-secrets-from-model-context

  Oct 15, 202651s
  More actions for workflow run 18

• security(commit): block accidental credentials before local Git commits

  completed successfully:
  CodeQL security analysis#17:Commit96b06d4pushedbyharshitethic
  main

  Oct 15, 202645s
  More actions for workflow run 17

• Prevent accidental credential and private-file commits in PatchPilot

  completed successfully:
  CodeQL security analysis#16:Pull request#28openedbyharshitethic
  security/prevent-secret-commits

  Oct 15, 202656s
  More actions for workflow run 16

• security(api): require local origin or strong bearer authorization

  completed successfully:
  CodeQL security analysis#15:Commitaa035cdpushedbyharshitethic
  main

  Oct 15, 20261m 0s
  More actions for workflow run 15

• Protect local code-editing API with loopback, Origin and bearer access controls

  completed successfully:
  CodeQL security analysis#14:Pull request#27openedbyharshitethic
  security/http-access-control

  Oct 15, 202652s
  More actions for workflow run 14

• security(git): ignore hostile hooks and config; deny internal control…

  completed successfully:
  CodeQL security analysis#13:Commitea6a3c3pushedbyharshitethic
  main

  Oct 13, 202650s
  More actions for workflow run 13

• Prevent untrusted Git hooks/config and block model edits to .git

  completed successfully:
  CodeQL security analysis#12:Pull request#26openedbyharshitethic
  security/git-config-and-control-file-boundaries

  Oct 13, 202658s
  More actions for workflow run 12

• security: restrict host execution to Git and keep test logs private (…

  completed successfully:
  CodeQL security analysis#11:Commit49bc0cdpushedbyharshitethic
  main

  Oct 13, 202654s
  More actions for workflow run 11

• Limit host execution to Git; keep diagnostic test output private

  completed successfully:
  CodeQL security analysis#10:Pull request#25openedbyharshitethic
  security/host-git-only-private-test-logs

  Oct 13, 202656s
  More actions for workflow run 10

• security: execute repository tests in fail-closed Docker isolation (#24)

  completed successfully:
  CodeQL security analysis#9:Commit3538f0apushedbyharshitethic
  main

  Oct 13, 202652s
  More actions for workflow run 9