CodeQL Security Analysis

Workflow runs for CodeQL Security Analysis

• build(deps): Bump the actions group across 1 directory with 5 updates

  completed successfully:
  CodeQL Security Analysis#230:Pull request#163openedbydependabot[bot]Bot
  dependabot/github_actions/actions-0f241bcce4

  Oct 27, 20266m 30s
  More actions for workflow run 230

• Correct Joshua Benjamin Jewell attribution for NPC-MCP (#162)

  completed successfully:
  CodeQL Security Analysis#229:Commit2fd1fa3pushedbyhyperpolymath
  main

  Oct 26, 20261m 29s
  More actions for workflow run 229

• CodeQL Security Analysis

  completed successfully:
  CodeQL Security Analysis#228:Scheduled
  main

  Oct 26, 20261m 39s
  More actions for workflow run 228

• CodeQL Security Analysis

  failed at startup:
  CodeQL Security Analysis#227:openedbyJoshuaJewell
  attribution/joshua-benjamin-jewell-2026

  Oct 26, 2026Startup failure
  More actions for workflow run 227

• CodeQL Security Analysis

  completed successfully:
  CodeQL Security Analysis#226:Scheduled
  main

  Oct 19, 20261m 29s
  More actions for workflow run 226

• CodeQL Security Analysis

  completed successfully:
  CodeQL Security Analysis#225:Scheduled
  main

  Oct 12, 20261m 5s
  More actions for workflow run 225

• CodeQL Security Analysis

  failed at startup:
  CodeQL Security Analysis#224:openedbydependabot[bot]Bot
  dependabot/github_actions/actions-0ea35773d6

  Oct 12, 2026Startup failure
  More actions for workflow run 224

• build(deps): Bump hyperpolymath/smtp-notify-action from 0.3.0 to 0.5.…

  completed successfully:
  CodeQL Security Analysis#223:Commit83cd9b7pushedbyhyperpolymath
  main

  Oct 8, 20261m 27s
  More actions for workflow run 223

• build(deps): Bump hyperpolymath/smtp-notify-action from 0.3.0 to 0.5.0 in the actions group across 1 directory

  completed successfully:
  CodeQL Security Analysis#222:Pull request#157synchronizebydependabot[bot]Bot
  dependabot/github_actions/actions-1afb5b2680

  Oct 8, 20261m 1s
  More actions for workflow run 222

• docs(adr): ADR-003 trust tiers as admission gates plus signing (Propo…

  completed successfully:
  CodeQL Security Analysis#221:Commit7dcedb9pushedbyhyperpolymath
  main

  Oct 7, 20261m 55s
  More actions for workflow run 221

• docs(adr): ADR-003 trust tiers as admission gates plus signing (Proposed)

  failed:
  CodeQL Security Analysis#220:Pull request#160openedbyhyperpolymath
  docs/adr-003-trust-tiers

  Oct 7, 20261m 25s
  More actions for workflow run 220

• docs(split): Phase 0 survey and per-cartridge JSON Lines ledger (#159)

  completed successfully:
  CodeQL Security Analysis#219:Commit524e148pushedbyhyperpolymath
  main

  Oct 7, 20261m 14s
  More actions for workflow run 219

• docs(split): Phase 0 survey and per-cartridge JSON Lines ledger

  completed successfully:
  CodeQL Security Analysis#218:Pull request#159openedbyhyperpolymath
  docs/split-phase0-survey

  Oct 7, 202649s
  More actions for workflow run 218

• docs(debt): close D-5, .machine_readable/6a2 removed by #135 (#158)

  completed successfully:
  CodeQL Security Analysis#217:Commitec89045pushedbyhyperpolymath
  main

  Oct 7, 20261m 4s
  More actions for workflow run 217

• docs(debt): close D-5, .machine_readable/6a2 removed by #135

  completed successfully:
  CodeQL Security Analysis#216:Pull request#158openedbyhyperpolymath
  docs/close-debt-d5

  Oct 7, 20261m 10s
  More actions for workflow run 216

• build(deps): Bump hyperpolymath/smtp-notify-action from 0.3.0 to 0.5.0 in the actions group across 1 directory

  completed successfully:
  CodeQL Security Analysis#215:Pull request#157openedbydependabot[bot]Bot
  dependabot/github_actions/actions-1afb5b2680

  Oct 7, 202658s
  More actions for workflow run 215

• docs(handover): record that the leaked Cloudflare token is dead (owne…

  completed successfully:
  CodeQL Security Analysis#214:Commit397ae59pushedbyhyperpolymath
  main

  Oct 6, 20261m 40s
  More actions for workflow run 214

• docs(handover): record that the leaked Cloudflare token is dead (owner ruling 2026-09-14)

  completed successfully:
  CodeQL Security Analysis#213:Pull request#156synchronizebyhyperpolymath
  docs/cloudflare-token-status

  Oct 6, 202652s
  More actions for workflow run 213

• docs(handover): record that the leaked Cloudflare token is dead (owner ruling 2026-09-14)

  completed successfully:
  CodeQL Security Analysis#212:Pull request#156openedbyhyperpolymath
  docs/cloudflare-token-status

  Oct 6, 20261m 1s
  More actions for workflow run 212

• CodeQL Security Analysis

  completed successfully:
  CodeQL Security Analysis#211:Scheduled
  main

  Oct 5, 20261m 32s
  More actions for workflow run 211

• fix(ci): stop gitleaks flagging the estate baseline the scanner stage…

  completed successfully:
  CodeQL Security Analysis#210:Commit4acc637pushedbyhyperpolymath
  main

  Oct 3, 20261m 6s
  More actions for workflow run 210

• fix(ci): stop gitleaks flagging the estate baseline the scanner stages itself

  completed successfully:
  CodeQL Security Analysis#209:Pull request#155synchronizebyhyperpolymath
  fix/gitleaks-self-exclude-estate-baseline

  Oct 2, 20261m 20s
  More actions for workflow run 209

• fix(ci): stop gitleaks flagging the estate baseline the scanner stages itself

  completed successfully:
  CodeQL Security Analysis#208:Pull request#155synchronizebyhyperpolymath
  fix/gitleaks-self-exclude-estate-baseline

  Oct 2, 20261m 3s
  More actions for workflow run 208

• build(deps): Bump the actions group across 1 directory with 4 updates…

  completed successfully:
  CodeQL Security Analysis#207:Commit031c4b1pushedbyhyperpolymath
  main

  Oct 2, 20261m 25s
  More actions for workflow run 207

• CodeQL Security Analysis

  failed at startup:
  CodeQL Security Analysis#206:synchronizebycoderabbitai[bot]Bot
  fix/gitleaks-self-exclude-estate-baseline

  Oct 2, 2026Startup failure
  More actions for workflow run 206