Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
OWASP
/
cve-lite-cli
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
141
Star
693
Code
Issues
27
Pull requests
4
Discussions
Actions
Projects
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights
Actions: OWASP/cve-lite-cli
Actions
All workflows
Workflows
CI
CI
CodeQL
CodeQL
Copilot
Copilot
Copilot code review
Copilot code review
Docs Site
Docs Site
pages-build-deployment
pages-build-deployment
Release
Release
Self Fix
Self Fix
Self Scan
Self Scan
Show more workflows...
Management
Caches
Deployments
CodeQL
CodeQL
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
codeql.yml
will be ignored since log searching is not yet available
1,728 workflow runs
1,728 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
fix(pd001,pd002): resolve imports per workspace member and ignore type-only imports
CodeQL
#1773:
Pull request
#1114
opened by
osfv
1m 18s
osfv:fix/issue-966-pd-phantom-false-positives
osfv:fix/issue-966-pd-phantom-false-positives
1m 18s
View #1114
View workflow file
fix(remediation): stop parent-update targets merging into install targets
CodeQL
#1772:
Pull request
#1113
opened by
osfv
1m 11s
osfv:fix/issue-1007-parent-update-target-merge
osfv:fix/issue-1007-parent-update-target-merge
1m 11s
View #1113
View workflow file
release: v1.34.0 (#1112)
CodeQL
#1771:
Commit
e08b557
pushed by
sonukapoor
1m 44s
main
main
1m 44s
View workflow file
release: v1.34.0
CodeQL
#1770:
Pull request
#1112
opened by
sonukapoor
1m 16s
release/v1.34.0
release/v1.34.0
1m 16s
View #1112
View workflow file
chore(cyclonedx): emit metadata.tools in the 1.6 components form (#1102)
CodeQL
#1769:
Commit
c2ea410
pushed by
sonukapoor
2m 2s
main
main
2m 2s
View workflow file
chore(cyclonedx): emit metadata.tools in the 1.6 components form
CodeQL
#1768:
Pull request
#1102
synchronize by
XiaoZ-0218
1m 13s
XiaoZ-0218:fix/cyclonedx-tools-1097
XiaoZ-0218:fix/cyclonedx-tools-1097
1m 13s
View #1102
View workflow file
fix: upgrade js-yaml to 3.15.2 to resolve GHSA-2883-xcg3-v3hh (#1111)
CodeQL
#1767:
Commit
7067626
pushed by
sonukapoor
1m 55s
main
main
1m 55s
View workflow file
fix: upgrade js-yaml to 3.15.2 to resolve GHSA-2883-xcg3-v3hh
CodeQL
#1766:
Pull request
#1111
opened by
sonukapoor
57s
bugfix/issue-1110-js-yaml-advisory
bugfix/issue-1110-js-yaml-advisory
57s
View #1111
View workflow file
fix: resolve SBOM dependency edges from the lock graph (#1106)
CodeQL
#1765:
Commit
475bd4c
pushed by
sonukapoor
1m 58s
main
main
1m 58s
View workflow file
fix: resolve SBOM dependency edges from the lock graph
CodeQL
#1764:
Pull request
#1106
opened by
sonukapoor
1m 8s
bugfix/sbom-graph-parent-edges
bugfix/sbom-graph-parent-edges
1m 8s
View #1106
View workflow file
chore(cyclonedx): emit metadata.tools in the 1.6 components form
CodeQL
#1763:
Pull request
#1102
synchronize by
XiaoZ-0218
1m 18s
XiaoZ-0218:fix/cyclonedx-tools-1097
XiaoZ-0218:fix/cyclonedx-tools-1097
1m 18s
View #1102
View workflow file
test: pin semver build-metadata precedence and exercise the real vers…
CodeQL
#1762:
Commit
78ad26a
pushed by
sonukapoor
2m 24s
main
main
2m 24s
View workflow file
test: pin semver build-metadata precedence and exercise the real versionMatchesRange path
CodeQL
#1761:
Pull request
#1094
synchronize by
sonukapoor
1m 7s
Retsumdk:test/semver-build-metadata-coverage
Retsumdk:test/semver-build-metadata-coverage
1m 7s
View #1094
View workflow file
docs: add the Open Source Friday demo project and run of show (#1104)
CodeQL
#1760:
Commit
f9dccac
pushed by
sonukapoor
2m 47s
main
main
2m 47s
View workflow file
docs: add the Open Source Friday demo project and run of show
CodeQL
#1759:
Pull request
#1104
synchronize by
sonukapoor
1m 13s
docs/open-source-friday-demo
docs/open-source-friday-demo
1m 13s
View #1104
View workflow file
docs: add the Open Source Friday demo project and run of show
CodeQL
#1758:
Pull request
#1104
synchronize by
sonukapoor
1m 21s
docs/open-source-friday-demo
docs/open-source-friday-demo
1m 21s
View #1104
View workflow file
docs: add the Open Source Friday demo project and run of show
CodeQL
#1757:
Pull request
#1104
opened by
sonukapoor
1m 14s
docs/open-source-friday-demo
docs/open-source-friday-demo
1m 14s
View #1104
View workflow file
fix(remediation): exclude pre-release fix candidates (#1096)
CodeQL
#1756:
Commit
405121b
pushed by
sonukapoor
2m 4s
main
main
2m 4s
View workflow file
test: pin semver build-metadata precedence and exercise the real versionMatchesRange path
CodeQL
#1755:
Pull request
#1094
synchronize by
Retsumdk
1m 0s
Retsumdk:test/semver-build-metadata-coverage
Retsumdk:test/semver-build-metadata-coverage
1m 0s
View #1094
View workflow file
chore(cyclonedx): emit metadata.tools in the 1.6 components form
CodeQL
#1754:
Pull request
#1102
opened by
XiaoZ-0218
1m 6s
XiaoZ-0218:fix/cyclonedx-tools-1097
XiaoZ-0218:fix/cyclonedx-tools-1097
1m 6s
View #1102
View workflow file
fix(remediation): withhold cross-wired suggested fix targets
CodeQL
#1753:
Pull request
#1101
opened by
Ayush7614
1m 17s
Ayush7614:fix/suggested-fix-crosswire-1007
Ayush7614:fix/suggested-fix-crosswire-1007
1m 17s
View #1101
View workflow file
feat(cli): add --scan-timeout guard for large projects
CodeQL
#1752:
Pull request
#1100
opened by
Ayush7614
1m 19s
Ayush7614:feature/scan-timeout-983
Ayush7614:feature/scan-timeout-983
1m 19s
View #1100
View workflow file
feat(action): add sbom input so SPDX output is reachable from the GitHub Action
CodeQL
#1751:
Pull request
#1099
opened by
Ayush7614
1m 5s
Ayush7614:feature/action-sbom-input-1078
Ayush7614:feature/action-sbom-input-1078
1m 5s
View #1099
View workflow file
fix(detection): treat a pre-release of the introduced version as in r…
CodeQL
#1750:
Commit
a2716ca
pushed by
sonukapoor
2m 2s
main
main
2m 2s
View workflow file
fix: treat a pre-release of the introduced version as in range
CodeQL
#1749:
Pull request
#1098
opened by
sonukapoor
1m 4s
bugfix/prerelease-introduced-bound
bugfix/prerelease-introduced-bound
1m 4s
View #1098
View workflow file
Previous
1
2
3
4
5
…
69
70
Next
You can’t perform that action at this time.