CodeQL

Workflow runs for CodeQL

• fix(trace,catalog): canonicalize TRACE claims and catalog hashes with RFC 8785 JCS (#837)

  requires action with the application:
  CodeQL#1329:Pull request#838openedbydrk-ram
  drk-ram:fix-jcs-trace-hashes

  Nov 6, 2026Action required
  More actions for workflow run 1329

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#1328:Pull request#824synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Nov 5, 20261m 33s
  More actions for workflow run 1328

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#1327:Pull request#824synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Nov 3, 20261m 50s
  More actions for workflow run 1327

• ci: bump the actions group across 1 directory with 7 updates

  completed successfully:
  CodeQL#1326:Pull request#827synchronizebydependabot[bot]Bot
  dependabot/github_actions/actions-7f0c2409eb

  Nov 2, 20261m 32s
  More actions for workflow run 1326

• ci: bump the python group across 1 directory with 20 updates

  completed successfully:
  CodeQL#1325:Pull request#836openedbydependabot[bot]Bot
  dependabot/pip/python-976834d267

  Nov 2, 20261m 44s
  More actions for workflow run 1325

• ci: bump python from 3.11.17-slim-bookworm to 3.11.18-slim-bookworm

  completed successfully:
  CodeQL#1324:Pull request#835openedbydependabot[bot]Bot
  dependabot/docker/python-3.11.18-slim-bookworm

  Nov 2, 20261m 24s
  More actions for workflow run 1324

• fix(policy,catalog): enforce canonical base64url signatures, strict decimal bundle versions, and duplicate-key rejection (#802)

  requires action with the application:
  CodeQL#1323:Pull request#807synchronizebydrk-ram
  drk-ram:drk-ram-fix-policy-catalog-802

  Nov 2, 2026Action required
  More actions for workflow run 1323

• CodeQL

  completed successfully:
  CodeQL#1322:Scheduled
  main

  Nov 1, 20261m 27s
  More actions for workflow run 1322

• fix(audit): wire gateway response inspection results

  completed successfully:
  CodeQL#1321:Pull request#781synchronizebydinakarjs
  dinakarjs:fix/764-inspection-audit-results

  Nov 1, 20261m 29s
  More actions for workflow run 1321

• docs: register MEASUREMENT_UNAVAILABLE and its recovery boundary

  completed successfully:
  CodeQL#1320:Pull request#809synchronizebydinakarjs
  dinakarjs:docs/measurement-error-registry-20261025

  Nov 1, 20261m 26s
  More actions for workflow run 1320

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#1319:Pull request#824synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Nov 1, 20261m 8s
  More actions for workflow run 1319

• fix(verify/tcg_event_log): reject duplicate algorithm IDs, mismatched digest sizes, and trailing Spec ID header bytes (#812)

  requires action with the application:
  CodeQL#1318:Pull request#817synchronizebydrk-ram
  drk-ram:drk-ram-fix-tcg-event-log-812

  Oct 31, 2026Action required
  More actions for workflow run 1318

• fix(verify/sev_snp,tpm): enforce canonical lowercase hex in measurement checks and validate report_data_hex (#811)

  requires action with the application:
  CodeQL#1317:Pull request#816synchronizebydrk-ram
  drk-ram:drk-ram-fix-snp-tpm-verify-811

  Oct 31, 2026Action required
  More actions for workflow run 1317

• fix(verify): enforce canonical base64url and reject private JWK members in kill_switch and claim verification (#804)

  requires action with the application:
  CodeQL#1316:Pull request#808synchronizebydrk-ram
  drk-ram:drk-ram-fix-verify-kill-switch-804

  Oct 31, 2026Action required
  More actions for workflow run 1316

• fix(policy,catalog): enforce canonical base64url signatures, strict decimal bundle versions, and duplicate-key rejection (#802)

  requires action with the application:
  CodeQL#1315:Pull request#807synchronizebydrk-ram
  drk-ram:drk-ram-fix-policy-catalog-802

  Oct 31, 2026Action required
  More actions for workflow run 1315

• fix(tee/nras): validate NRASClient init parameters, report_data hex, and strict JSON object EAR responses (#814)

  requires action with the application:
  CodeQL#1314:Pull request#819synchronizebydrk-ram
  drk-ram:drk-ram-fix-nras-814

  Oct 31, 2026Action required
  More actions for workflow run 1314

• fix(verify/tdx,embodied_action): enforce hex format in verify_tdx_measurement and guard non-dict inputs in verify_embodied_action_evidence (#803)

  requires action with the application:
  CodeQL#1313:Pull request#806synchronizebydrk-ram
  drk-ram:drk-ram-fix-tdx-embodied-803

  Oct 31, 2026Action required
  More actions for workflow run 1313

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#1312:Pull request#824synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Oct 31, 202657s
  More actions for workflow run 1312

• test(ci): propose generated-lock delta checks

  completed successfully:
  CodeQL#1311:Pull request#824synchronizebydinakarjs
  dinakarjs:test/generated-lock-delta-20261026

  Oct 30, 20261m 11s
  More actions for workflow run 1311

• fix(provenance): reject duplicate JSON keys, private JWKs, and non-dict records in check_server_provenance and validate required_kind in meets() (#813)

  requires action with the application:
  CodeQL#1310:Pull request#818synchronizebydrk-ram
  drk-ram:drk-ram-fix-provenance-813

  Oct 30, 2026Action required
  More actions for workflow run 1310

• fix(verify/azure_cvm): enforce minimal Base64urlUInt, reject private/duplicate HCLAkPub JWKs, and bound TPM quote parsing (#801)

  requires action with the application:
  CodeQL#1309:Pull request#805synchronizebydrk-ram
  drk-ram:drk-ram-fix-azure-cvm-801

  Oct 30, 2026Action required
  More actions for workflow run 1309

• docs: add independent continuity review criteria for #675

  completed successfully:
  CodeQL#1308:Pull request#793synchronizebydinakarjs
  dinakarjs:docs/policy-continuity-review-20261020

  Oct 30, 20263m 59s
  More actions for workflow run 1308

• docs: register MEASUREMENT_UNAVAILABLE and its recovery boundary

  completed successfully:
  CodeQL#1307:Pull request#809synchronizebydinakarjs
  dinakarjs:docs/measurement-error-registry-20261025

  Oct 30, 20264m 25s
  More actions for workflow run 1307

• fix(verify/tdx,embodied_action): enforce hex format in verify_tdx_measurement and guard non-dict inputs in verify_embodied_action_evidence (#803)

  completed successfully:
  CodeQL#1306:Pull request#806synchronizebyrajnisht7
  drk-ram:drk-ram-fix-tdx-embodied-803

  Oct 30, 20261m 28s
  More actions for workflow run 1306

• fix(verify/azure_cvm): enforce minimal Base64urlUInt, reject private/duplicate HCLAkPub JWKs, and bound TPM quote parsing (#801)

  completed successfully:
  CodeQL#1305:Pull request#805synchronizebyrajnisht7
  drk-ram:drk-ram-fix-azure-cvm-801

  Oct 30, 20261m 26s
  More actions for workflow run 1305