Skip to content

Actions: sigstore/cosign

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
363 workflow runs
363 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
update go-github to v88 (#4887) CodeQL #3637: Commit 5b60399 pushed by cpanato
4m 52s main
main
4m 52s
bump static-debian to static-debian13 (#4888) CodeQL #3636: Commit 29dc88b pushed by cpanato
4m 35s main
main
4m 35s
update builder to use go1.26.3 (#4885) CodeQL #3635: Commit 7465055 pushed by cpanato
4m 25s main
main
4m 25s
bump golangci-lint (#4886) CodeQL #3634: Commit cb68b29 pushed by cpanato
4m 37s main
main
4m 37s
Fix unsafe type assertion in Rego policy evaluation (#4882) CodeQL #3633: Commit da174ac pushed by Hayden-IO
2m 54s main
main
2m 54s
fix: check HTTP status code in LoadFileOrURL (#4877) CodeQL #3632: Commit b4e1761 pushed by Hayden-IO
2m 52s main
main
2m 52s
Use the configured Target Repository more consistently. (#4836) CodeQL #3631: Commit a01e484 pushed by steiza
2m 42s main
main
2m 42s
Deprecate Flags for v4: OCI Referrers (#4804) CodeQL #3630: Commit d3f481e pushed by steiza
2m 36s main
main
2m 36s
Fix crash verifying timestamps when no timestamp was verified (#4881) CodeQL #3629: Commit 6ea2f18 pushed by Hayden-IO
2m 43s main
main
2m 43s
Undo skip setcap for HashiCorp Vault (#4879) CodeQL #3628: Commit 7993b35 pushed by Hayden-IO
2m 31s main
main
2m 31s
Fix impossible status code checks in GitHub provider PutSecret (#4876) CodeQL #3627: Commit cd402b4 pushed by Hayden-IO
4m 24s main
main
4m 24s
chore(deps): bump github.com/open-policy-agent/opa from 1.14.1 to 1.1… CodeQL #3626: Commit f02ee6f pushed by cpanato
3m 6s main
main
3m 6s
chore(deps): bump github.com/go-piv/piv-go/v2 from 2.5.0 to 2.6.0 (#4… CodeQL #3625: Commit cca05a3 pushed by cpanato
5m 19s main
main
5m 19s
chore(deps): bump github.com/in-toto/attestation from 1.1.2 to 1.2.0 … CodeQL #3624: Commit 2d3bebf pushed by cpanato
4m 13s main
main
4m 13s
chore(deps): bump golang from 1.25.6 to 1.25.7 in the all group (#4690) CodeQL #3623: Commit 4df4c13 pushed by cpanato
4m 19s main
main
4m 19s
chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 (#4800) CodeQL #3622: Commit b2cc795 pushed by cpanato
2m 48s main
main
2m 48s
chore(deps): bump github.com/in-toto/in-toto-golang (#4855) CodeQL #3621: Commit e587115 pushed by cpanato
2m 44s main
main
2m 44s
chore(deps): bump the actions group across 1 directory with 6 updates… CodeQL #3620: Commit 4df629e pushed by cpanato
2m 41s main
main
2m 41s
feat(cli): add Rekor v2 flag to cosign signing-config create (#4868) CodeQL #3619: Commit bf57b89 pushed by Hayden-IO
2m 45s main
main
2m 45s
fix: use Header.Set to prevent duplicate Authorization on retry (#4870) CodeQL #3618: Commit 8a86a7c pushed by steiza
2m 43s main
main
2m 43s
fix: close file descriptor leaked in WriteSignedImageIndexImages loop… CodeQL #3617: Commit b33aaac pushed by Hayden-IO
2m 35s main
main
2m 35s
deprecate private-infrastructure and record-creation-timestamp flags … CodeQL #3616: Commit d5891a8 pushed by steiza
4m 9s main
main
4m 9s
Add bundle upgrade command (#4820) CodeQL #3615: Commit a1ec073 pushed by Hayden-IO
2m 56s main
main
2m 56s
Fix typo in map of verify fields unsupported for new bundle format (#… CodeQL #3614: Commit 6a80f22 pushed by Hayden-IO
2m 55s main
main
2m 55s
Deprecate flags bundle (#4838) CodeQL #3613: Commit f15ac75 pushed by steiza
3m 8s main
main
3m 8s