CodeQL

Workflow runs for CodeQL

• FIX: update the Gemini model in .env_example to a current one

  requires action with the application:
  CodeQL#2786:Pull request#3694synchronizebyromanlutz
  pcbeingused333:fix/env-example-gemini-model

  Nov 1, 2026Action required
  More actions for workflow run 2786

• CodeQL

  currently running:
  CodeQL#2785:Merge group checks requested
  Nov 1, 2026In progress
  More actions for workflow run 2785

• FIX: Reject explicitly supplied --config-file paths that do not exist

  currently running:
  CodeQL#2784:Pull request#3767synchronizebyromanlutz
  Kiddo4993:fix/issue-3706

  Nov 1, 2026In progress
  More actions for workflow run 2784

• FIX: Reject explicitly supplied --config-file paths that do not exist

  requires action with the application:
  CodeQL#2783:Pull request#3767synchronizebyromanlutz
  Kiddo4993:fix/issue-3706

  Nov 1, 2026Action required
  More actions for workflow run 2783

• FEAT: Browse Scenario result parents and children in the GUI (#3602)

  completed successfully:
  CodeQL#2782:Pull request#3611synchronizebyromanlutz
  FazeelUsmani:gui-scenario-result-hierarchy

  Nov 1, 20261m 36s
  More actions for workflow run 2782

• FIX Detect postgresql://, mongodb+srv://, rediss:// and amqps:// connection strings in CredentialLeakScorer

  completed successfully:
  CodeQL#2781:Pull request#3639synchronizebyromanlutz
  ShivamSharma43:fix/credential-leak-connection-schemes

  Nov 1, 20261m 30s
  More actions for workflow run 2781

• FIX: reject a stale cursor in the scorer list (#3635)

  completed successfully:
  CodeQL#2780:Commit5a683d2pushedbyromanlutz
  main

  Nov 1, 20264m 4s
  More actions for workflow run 2780

• FIX: Show an explicit empty converted value in the HTML scenario report

  requires action with the application:
  CodeQL#2779:Pull request#3771openedbyVISHNU0906
  VISHNU0906:fix-html-empty-converted-value

  Nov 1, 2026Action required
  More actions for workflow run 2779

• FEAT: Browse Scenario result parents and children in the GUI (#3602)

  completed successfully:
  CodeQL#2778:Pull request#3611synchronizebyromanlutz
  FazeelUsmani:gui-scenario-result-hierarchy

  Nov 1, 20261m 36s
  More actions for workflow run 2778

• FIX Detect postgresql://, mongodb+srv://, rediss:// and amqps:// connection strings in CredentialLeakScorer

  completed successfully:
  CodeQL#2777:Pull request#3639synchronizebyromanlutz
  ShivamSharma43:fix/credential-leak-connection-schemes

  Nov 1, 20261m 20s
  More actions for workflow run 2777

• TEST: Assert Registry.get_registry_singleton return types (P311-04)

  requires action with the application:
  CodeQL#2776:Pull request#3770synchronizebyWaqarAnwar
  WaqarAnwar:test/registry-singleton-assert-type

  Nov 1, 2026Action required
  More actions for workflow run 2776

• FIX: Reread recently modified scorer metrics instead of caching them

  requires action with the application:
  CodeQL#2775:Pull request#3697synchronizebyWaqarAnwar
  WaqarAnwar:fix/scenario-progress-racy-metrics-cache

  Nov 1, 2026Action required
  More actions for workflow run 2775

• FIX: Make ShellCommandOutputScorer destructive-shell regex linear time

  requires action with the application:
  CodeQL#2774:Pull request#3702synchronizebyWaqarAnwar
  WaqarAnwar:fix/shell-scorer-regex-backtracking

  Nov 1, 2026Action required
  More actions for workflow run 2774

• FEAT: Browse Scenario result parents and children in the GUI (#3602)

  requires action with the application:
  CodeQL#2773:Pull request#3611synchronizebyromanlutz
  FazeelUsmani:gui-scenario-result-hierarchy

  Nov 1, 2026Action required
  More actions for workflow run 2773

• FIX: Detect obfuscated SQL injection and javascript: payloads in output scorers

  completed successfully:
  CodeQL#2772:Pull request#3640synchronizebyshashank03-dev
  shashank03-dev:fix/sql-xss-scorer-obfuscation

  Nov 1, 20261m 20s
  More actions for workflow run 2772

• FIX: Keep the pending prompt's metadata when reopening Edit Conversat…

  completed successfully:
  CodeQL#2771:Commitb9f9bf2pushedbyromanlutz
  main

  Nov 1, 20266m 17s
  More actions for workflow run 2771

• FIX Detect postgresql://, mongodb+srv://, rediss:// and amqps:// connection strings in CredentialLeakScorer

  completed successfully:
  CodeQL#2770:Pull request#3639synchronizebyromanlutz
  ShivamSharma43:fix/credential-leak-connection-schemes

  Nov 1, 20265m 27s
  More actions for workflow run 2770

• FIX: report unknown planned for an empty count combination (#3637)

  completed successfully:
  CodeQL#2769:Commit265d6cdpushedbygithub-merge-queue[bot]Bot
  main

  Nov 1, 20266m 18s
  More actions for workflow run 2769

• FIX: restart finding evidence pagination on each opening

  completed successfully:
  CodeQL#2768:Pull request#3633synchronizebyManoharPaturi
  ManoharPaturi:fix/finding-evidence-dialog-stale-offset

  Nov 1, 20261m 43s
  More actions for workflow run 2768

• FEAT: Browse Scenario result parents and children in the GUI (#3602)

  completed successfully:
  CodeQL#2767:Pull request#3611synchronizebyromanlutz
  FazeelUsmani:gui-scenario-result-hierarchy

  Nov 1, 20261m 36s
  More actions for workflow run 2767

• TEST: Assert Registry.get_registry_singleton return types (P311-04)

  requires action with the application:
  CodeQL#2766:Pull request#3770synchronizebyWaqarAnwar
  WaqarAnwar:test/registry-singleton-assert-type

  Nov 1, 2026Action required
  More actions for workflow run 2766

• FIX: Make ShellCommandOutputScorer destructive-shell regex linear time

  requires action with the application:
  CodeQL#2765:Pull request#3702synchronizebyWaqarAnwar
  WaqarAnwar:fix/shell-scorer-regex-backtracking

  Nov 1, 2026Action required
  More actions for workflow run 2765

• FIX: Reread recently modified scorer metrics instead of caching them

  requires action with the application:
  CodeQL#2764:Pull request#3697synchronizebyWaqarAnwar
  WaqarAnwar:fix/scenario-progress-racy-metrics-cache

  Nov 1, 2026Action required
  More actions for workflow run 2764

• CodeQL

  completed successfully:
  CodeQL#2763:Merge group checks requested
  Nov 1, 20265m 12s
  More actions for workflow run 2763

• TEST: Assert Registry.get_registry_singleton return types (P311-04)

  requires action with the application:
  CodeQL#2762:Pull request#3770openedbyWaqarAnwar
  WaqarAnwar:test/registry-singleton-assert-type

  Nov 1, 2026Action required
  More actions for workflow run 2762