CodeQL Security Scanning

Workflow runs for CodeQL Security Scanning

• feat: harden container with non-root execution and smoke tests

  requires action with the application:
  CodeQL Security Scanning#479:Pull request#201openedbyashhadali10
  ashhadali10:feat/non-root-hardening

  Oct 19, 2026Action required
  More actions for workflow run 479

• CodeQL Security Scanning

  completed successfully:
  CodeQL Security Scanning#478:Scheduled
  main

  Oct 19, 20261m 2s
  More actions for workflow run 478

• CodeQL Security Scanning

  completed successfully:
  CodeQL Security Scanning#477:Scheduled
  main

  Oct 12, 20261m 24s
  More actions for workflow run 477

• Merge pull request #200 from OWASP/hb-subdomain-patch

  completed successfully:
  CodeQL Security Scanning#476:Commit57ea825pushedbyadvaitpatel
  main

  Oct 12, 20261m 23s
  More actions for workflow run 476

• update config and add CNAME

  completed successfully:
  CodeQL Security Scanning#475:Pull request#200openedbyhblankenship
  hb-subdomain-patch

  Oct 7, 20261m 4s
  More actions for workflow run 475

• CodeQL Security Scanning

  completed successfully:
  CodeQL Security Scanning#474:Scheduled
  main

  Oct 5, 20261m 6s
  More actions for workflow run 474

• fix(scanner): scope Trivy config scans to Dockerfile

  requires action with the application:
  CodeQL Security Scanning#473:Pull request#199openedbyPopie52
  Popie52:fix/trivy-single-dockerfile

  Oct 3, 2026Action required
  More actions for workflow run 473

• fix: include vulnerabilities in CycloneDX SBOM

  requires action with the application:
  CodeQL Security Scanning#472:Pull request#198openedbySwaatiR
  SwaatiR:fix/197-sbom-vulnerabilities

  Oct 1, 2026Action required
  More actions for workflow run 472

• CodeQL Security Scanning

  completed successfully:
  CodeQL Security Scanning#471:Scheduled
  main

  Sep 28, 20261m 8s
  More actions for workflow run 471

• redact: mask secrets embedded in URL query strings and connection strings

  requires action with the application:
  CodeQL Security Scanning#470:Pull request#196synchronizebyCyberSunil
  CyberSunil:fix/redact-embedded-url-connstring-secrets

  Sep 23, 2026Action required
  More actions for workflow run 470

• Merge pull request #186 from dhruvatr/patch-1

  completed successfully:
  CodeQL Security Scanning#469:Commit1e80988pushedbyadvaitpatel
  main

  Sep 23, 20261m 15s
  More actions for workflow run 469

• docs: clarify data sent outside the machine

  completed successfully:
  CodeQL Security Scanning#468:Pull request#186synchronizebyadvaitpatel
  dhruvatr:patch-1

  Sep 23, 20261m 18s
  More actions for workflow run 468

• redact: mask secrets embedded in URL query strings and connection strings

  completed successfully:
  CodeQL Security Scanning#467:Pull request#196openedbyCyberSunil
  CyberSunil:fix/redact-embedded-url-connstring-secrets

  Sep 23, 20261m 6s
  More actions for workflow run 467

• Merge pull request #194 from OWASP/docs/dockerhub-and-sarif-fix

  completed successfully:
  CodeQL Security Scanning#466:Commit84c2696pushedbyadvaitpatel
  main

  Sep 21, 20261m 23s
  More actions for workflow run 466

• docs: document Docker Hub image and fix SARIF upload path

  completed successfully:
  CodeQL Security Scanning#465:Pull request#194openedbyadvaitpatel
  docs/dockerhub-and-sarif-fix

  Sep 21, 20261m 2s
  More actions for workflow run 465

• Merge pull request #193 from OWASP/feat/dockerhub-publish

  completed successfully:
  CodeQL Security Scanning#464:Commit7e2433bpushedbyadvaitpatel
  main

  Sep 21, 20261m 25s
  More actions for workflow run 464

• feat: publish container image to Docker Hub alongside GHCR

  completed successfully:
  CodeQL Security Scanning#463:Pull request#193openedbyadvaitpatel
  feat/dockerhub-publish

  Sep 21, 20261m 38s
  More actions for workflow run 463

• CodeQL Security Scanning

  completed successfully:
  CodeQL Security Scanning#462:Scheduled
  main

  Sep 21, 20261m 24s
  More actions for workflow run 462

• Merge pull request #191 from OWASP/feat/website-feedback

  completed successfully:
  CodeQL Security Scanning#461:Commitd97044dpushedbyadvaitpatel
  main

  Sep 21, 20261m 15s
  More actions for workflow run 461

• feat(website): real logo, project attribution, talks and podcasts

  completed successfully:
  CodeQL Security Scanning#460:Pull request#191openedbyadvaitpatel
  feat/website-feedback

  Sep 21, 20261m 18s
  More actions for workflow run 460

• Merge pull request #190 from OWASP/feat/website

  completed successfully:
  CodeQL Security Scanning#459:Commit5d252ffpushedbyadvaitpatel
  main

  Sep 21, 20261m 18s
  More actions for workflow run 459

• feat(website): documentation site with press and tool comparisons

  completed successfully:
  CodeQL Security Scanning#458:Pull request#190synchronizebyadvaitpatel
  feat/website

  Sep 20, 20261m 15s
  More actions for workflow run 458

• feat(website): documentation site with press and tool comparisons

  completed successfully:
  CodeQL Security Scanning#457:Pull request#190synchronizebyadvaitpatel
  feat/website

  Sep 20, 20261m 13s
  More actions for workflow run 457

• feat(website): documentation site with press and tool comparisons

  completed successfully:
  CodeQL Security Scanning#456:Pull request#190openedbyadvaitpatel
  feat/website

  Sep 20, 20261m 4s
  More actions for workflow run 456

• Merge pull request #189 from OWASP/feat/goldens-examples-pr-comments

  completed successfully:
  CodeQL Security Scanning#455:Commit7c2e8d4pushedbyadvaitpatel
  main

  Sep 20, 20261m 23s
  More actions for workflow run 455