Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Developer articles
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
CAOShurong
vulnfuse
Repository navigation
Code
Issues
Pull requests
9
(9)
Discussions
Actions
Security and quality
Insights
More
items
Actions: CAOShurong/vulnfuse
Actions
All workflows
Workflows
CI
CI
CodeQL
CodeQL
Dependabot Updates
Dependabot Updates
Pages
Pages
Release
Release
Show more workflows...
Management
Caches
Deployments
Lockfile
Release
Release
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
release.yml
will be ignored since log searching is not yet available
29 workflow runs
29 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
fix: preserve Trivy SARIF image identity
Release
#29:
Commit
8c30588
pushed by
CAOShurong
1m 2s
v0.4.24
v0.4.24
1m 2s
View workflow file
fix: make report identity portable (#70)
Release
#28:
Commit
d2c7dd0
pushed by
CAOShurong
58s
v0.4.23
v0.4.23
58s
View workflow file
feat: anchor locationless SARIF explicitly (#67)
Release
#27:
Commit
875350c
pushed by
CAOShurong
1m 2s
v0.4.22
v0.4.22
1m 2s
View workflow file
Merge pull request #64 from CAOShurong/codex/bound-sarif-host-text
Release
#26:
Commit
81c7356
pushed by
CAOShurong
55s
v0.4.21
v0.4.21
55s
View workflow file
Merge pull request #61 from CAOShurong/codex/bound-sarif-rule-tags
Release
#25:
Commit
db770a9
pushed by
CAOShurong
57s
v0.4.20
v0.4.20
57s
View workflow file
Merge pull request #58 from CAOShurong/codex/correct-provenance-verif…
Release
#24:
Commit
b815bb3
pushed by
CAOShurong
54s
v0.4.19
v0.4.19
54s
View workflow file
Merge pull request #56 from CAOShurong/codex/release-integrity-verifi…
Release
#23:
Commit
5a6d0fe
pushed by
CAOShurong
1m 0s
v0.4.18
v0.4.18
1m 0s
View workflow file
Merge pull request #53 from CAOShurong/codex/sarif-analysis-category-…
Release
#22:
Commit
fc6df81
pushed by
CAOShurong
58s
v0.4.17
v0.4.17
58s
View workflow file
Expose embedded scanner version drift (#50)
Release
#21:
Commit
beac48e
pushed by
CAOShurong
59s
v0.4.16
v0.4.16
59s
View workflow file
Merge pull request #47 from CAOShurong/codex/cyclonedx-xml
Release
#20:
Commit
c1679ad
pushed by
CAOShurong
1m 1s
v0.4.15
v0.4.15
1m 1s
View workflow file
Resolve portable SARIF URI-base paths (#44)
Release
#19:
Commit
9bf728c
pushed by
CAOShurong
52s
v0.4.14
v0.4.14
52s
View workflow file
Detect incomplete SARIF runs without losing partial evidence (#41)
Release
#18:
Commit
fabb4aa
pushed by
CAOShurong
52s
v0.4.13
v0.4.13
52s
View workflow file
feat: ingest standalone OpenVEX evidence (#38)
Release
#17:
Commit
7550c91
pushed by
CAOShurong
1m 10s
v0.4.12
v0.4.12
1m 10s
View workflow file
feat: support CycloneDX BOM-Link PURLs (#35)
Release
#16:
Commit
4c22765
pushed by
CAOShurong
58s
v0.4.11
v0.4.11
58s
View workflow file
Handle non-finding SARIF result kinds (#32)
Release
#15:
Commit
1058588
pushed by
CAOShurong
54s
v0.4.10
v0.4.10
54s
View workflow file
Preserve SARIF suppression disposition without losing evidence (#29)
Release
#14:
Commit
8d25909
pushed by
CAOShurong
46s
v0.4.9
v0.4.9
46s
View workflow file
Warn when baseline scan coverage changes (#26)
Release
#13:
Commit
4e1e08c
pushed by
CAOShurong
45s
v0.4.8
v0.4.8
45s
View workflow file
Expand report globs across shells (#23)
Release
#12:
Commit
60db2cf
pushed by
CAOShurong
49s
v0.4.7
v0.4.7
49s
View workflow file
Write Action reports atomically (#19)
Release
#11:
Commit
bc18517
pushed by
CAOShurong
46s
v0.4.6
v0.4.6
46s
View workflow file
Bound report reads before allocation (#16)
Release
#10:
Commit
07450bd
pushed by
CAOShurong
42s
v0.4.5
v0.4.5
42s
View workflow file
Print concise CLI runtime errors (#12)
Release
#9:
Commit
72a1d00
pushed by
CAOShurong
46s
v0.4.4
v0.4.4
46s
View workflow file
Prevent unsafe transitive merges (#9)
Release
#8:
Commit
3ffa409
pushed by
CAOShurong
44s
v0.4.3
v0.4.3
44s
View workflow file
Merge pull request #7 from CAOShurong/fix/windows-json-bom
Release
#7:
Commit
b021815
pushed by
CAOShurong
38s
v0.4.2
v0.4.2
38s
View workflow file
Merge pull request #6 from CAOShurong/fix/multi-tool-report-attribution
Release
#6:
Commit
ac7d9c0
pushed by
CAOShurong
41s
v0.4.1
v0.4.1
41s
View workflow file
feat: quantify scanner coverage and overlap (#5)
Release
#5:
Commit
e9cb37a
pushed by
CAOShurong
43s
v0.4.0
v0.4.0
43s
View workflow file
Previous
1
2
Next
You can’t perform that action at this time.