CodeQL security analysis

Workflow runs for CodeQL security analysis

• security(http): reject ambiguous duplicate Host headers (#41)

  completed successfully:
  CodeQL security analysis#44:Commitfeaf652pushedbyharshitethic
  main

  Oct 27, 202649s
  More actions for workflow run 44

• CodeQL security analysis

  completed successfully:
  CodeQL security analysis#43:Scheduled
  main

  Oct 27, 20261m 4s
  More actions for workflow run 43

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in the safe-minor-and-patch group across 1 directory

  completed successfully:
  CodeQL security analysis#42:Pull request#37synchronizebydependabot[bot]Bot
  dependabot/github_actions/safe-minor-and-patch-dc5ed02c9f

  Oct 26, 202654s
  More actions for workflow run 42

• chore(deps): update pydantic requirement from <3,>=2.14.0 to >=2.14.1,<3 in /backend

  completed successfully:
  CodeQL security analysis#41:Pull request#42openedbydependabot[bot]Bot
  dependabot/pip/backend/pydantic-gte-2.14.1-and-lt-3

  Oct 26, 202655s
  More actions for workflow run 41

• security(http): reject ambiguous duplicate Host headers

  completed successfully:
  CodeQL security analysis#40:Pull request#41openedbyharshitethic
  security/reject-ambiguous-host-headers-20261025

  Oct 25, 202657s
  More actions for workflow run 40

• chore(deps): update uvicorn requirement from <1,>=0.35 to >=0.54.0,<1 in /backend

  completed successfully:
  CodeQL security analysis#39:Pull request#36synchronizebydependabot[bot]Bot
  dependabot/pip/backend/uvicorn-gte-0.54.0-and-lt-1

  Oct 23, 202642s
  More actions for workflow run 39

• chore(deps): update httpx requirement in /backend (#35)

  completed successfully:
  CodeQL security analysis#38:Commitb695fd4pushedbyharshitethic
  main

  Oct 23, 202658s
  More actions for workflow run 38

• docs(readme): link contributor setup and review checklist

  completed successfully:
  CodeQL security analysis#37:Commit255e169pushedbyharshitethic
  main

  Oct 23, 202657s
  More actions for workflow run 37

• docs(contributing): publish contributor tests and security expectations

  completed successfully:
  CodeQL security analysis#36:Commit0b98b4fpushedbyharshitethic
  main

  Oct 23, 20261m 1s
  More actions for workflow run 36

• docs: invite independent reproducible engineering reviews (#39)

  completed successfully:
  CodeQL security analysis#35:Commita9f2a47pushedbyharshitethic
  main

  Oct 23, 202653s
  More actions for workflow run 35

• docs: invite independent reproducible engineering reviews

  completed successfully:
  CodeQL security analysis#34:Pull request#39openedbyharshitethic
  docs/independent-review-kit

  Oct 23, 202657s
  More actions for workflow run 34

• CodeQL security analysis

  completed successfully:
  CodeQL security analysis#33:Scheduled
  main

  Oct 20, 20261m 8s
  More actions for workflow run 33

• chore: prepare GitHub Sponsors funding configuration

  completed successfully:
  CodeQL security analysis#32:Commit0e11e92pushedbyharshitethic
  main

  Oct 19, 202611m 50s
  More actions for workflow run 32

• chore(deps): bump actions/checkout from 4 to 7

  completed successfully:
  CodeQL security analysis#31:Pull request#38openedbydependabot[bot]Bot
  dependabot/github_actions/actions/checkout-7

  Oct 19, 202659s
  More actions for workflow run 31

• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in the safe-minor-and-patch group across 1 directory

  completed successfully:
  CodeQL security analysis#30:Pull request#37openedbydependabot[bot]Bot
  dependabot/github_actions/safe-minor-and-patch-dc5ed02c9f

  Oct 19, 20261m 26s
  More actions for workflow run 30

• chore(deps): update uvicorn requirement from <1,>=0.35 to >=0.54.0,<1 in /backend

  completed successfully:
  CodeQL security analysis#29:Pull request#36openedbydependabot[bot]Bot
  dependabot/pip/backend/uvicorn-gte-0.54.0-and-lt-1

  Oct 19, 202644s
  More actions for workflow run 29

• chore(deps): update httpx requirement from <1,>=0.28 to >=0.28.1,<1 in /backend

  completed successfully:
  CodeQL security analysis#28:Pull request#35openedbydependabot[bot]Bot
  dependabot/pip/backend/httpx-gte-0.28.1-and-lt-1

  Oct 19, 202649s
  More actions for workflow run 28

• PatchPilot: bounded Git output and process group cleanup (#33)

  completed successfully:
  CodeQL security analysis#27:Commit582c157pushedbyharshitethic
  main

  Oct 16, 20261m 3s
  More actions for workflow run 27

• Bound host Git output and clean up timed-out process groups

  completed successfully:
  CodeQL security analysis#26:Pull request#33openedbyharshitethic
  hardening/bounded-host-git-output

  Oct 16, 20261m 2s
  More actions for workflow run 26

• fix(ui): clear stale run results and verify browser failure states (#32)

  completed successfully:
  CodeQL security analysis#25:Commitb0017d9pushedbyharshitethic
  main

  Oct 15, 202644s
  More actions for workflow run 25

• Clear stale results on new/failed runs; add real Chromium regressions

  completed successfully:
  CodeQL security analysis#24:Pull request#32openedbyharshitethic
  test/browser-workflow-demo

  Oct 15, 20261m 0s
  More actions for workflow run 24

• Close repair-prompt credential leaks (#31)

  completed successfully:
  CodeQL security analysis#23:Commit59f3828pushedbyharshitethic
  main

  Oct 15, 202657s
  More actions for workflow run 23

• Close repair-prompt credential leaks through Git diffs and test output

  completed successfully:
  CodeQL security analysis#22:Pull request#31openedbyharshitethic
  fix/repair-context-privacy

  Oct 15, 202654s
  More actions for workflow run 22

• fix(provider): bound transfers and verify agent failure recovery (#30)

  completed successfully:
  CodeQL security analysis#21:Commitd05bd36pushedbyharshitethic
  main

  Oct 15, 20261m 1s
  More actions for workflow run 21

• Bound model-provider transfers and verify agent failure recovery

  completed successfully:
  CodeQL security analysis#20:Pull request#30openedbyharshitethic
  reliability/bounded-model-transport

  Oct 15, 202658s
  More actions for workflow run 20