CodeQL

Workflow runs for CodeQL

• fix(ci): select supported Ubuntu for Python 3.9

  completed successfully:
  CodeQL#848:Pull request#387openedbycarloshvp
  python39-runner-compat

  Oct 25, 20262m 34s
  More actions for workflow run 848

• examples-ci: install pyOpenSSL for the model-signing demo

  completed successfully:
  CodeQL#847:Pull request#386openedbypavancharak
  pavancharak:fix-wcm-examples-pyopenssl

  Oct 25, 20261m 16s
  More actions for workflow run 847

• parmana-server: point repository at the Apache-2.0 parmana-core

  completed successfully:
  CodeQL#846:Pull request#385synchronizebypavancharak
  pavancharak:parmana-server-repo-link

  Oct 25, 20261m 24s
  More actions for workflow run 846

• parmana-server: point repository at the Apache-2.0 parmana-core

  completed successfully:
  CodeQL#845:Pull request#385openedbypavancharak
  pavancharak:parmana-server-repo-link

  Oct 25, 20261m 15s
  More actions for workflow run 845

• CodeQL

  completed successfully:
  CodeQL#844:Scheduled
  main

  Oct 25, 20261m 20s
  More actions for workflow run 844

• fix(sovereign-agent-connector): reject boolean GCP claims, invalid validity_seconds, and non-canonical base64url signatures (#379)

  completed successfully:
  CodeQL#843:Pull request#384openedbydrk-ram
  drk-ram:drk-ram-fix-auc-379

  Oct 25, 20264m 24s
  More actions for workflow run 843

• fix(xchk-registry): reject private JWK members, non-canonical base64url, boolean Instant(now), and duplicate JSON keys (#378)

  completed successfully:
  CodeQL#842:Pull request#383openedbydrk-ram
  drk-ram:drk-ram-fix-xchk-378

  Oct 25, 20264m 56s
  More actions for workflow run 842

• fix(parmana-server): enforce canonical 64-byte base64 signatures and guard non-dict fields in parmana_evidence (#377)

  completed successfully:
  CodeQL#841:Pull request#382openedbydrk-ram
  drk-ram:drk-ram-fix-parmana-377

  Oct 25, 20263m 36s
  More actions for workflow run 841

• fix(aeoess-aps): enforce exact int max_age_seconds/clock_skew_seconds and datetime reference_time in verify_aps_action_receipt (#376)

  completed successfully:
  CodeQL#840:Pull request#381openedbydrk-ram
  drk-ram:drk-ram-fix-aeoess-aps-376

  Oct 25, 20265m 1s
  More actions for workflow run 840

• fix(trace-adapters): validate timestamps/counts, require bool signature_verified, and reject private JWKs in build_record (#375)

  completed successfully:
  CodeQL#839:Pull request#380openedbydrk-ram
  drk-ram:drk-ram-fix-trace-adapters-375

  Oct 25, 20264m 15s
  More actions for workflow run 839

• fix: carry #330 forward with Conduit observation checks

  completed successfully:
  CodeQL#838:Pull request#374openedbydinakarjs
  dinakarjs:fix/330-conduit-observation

  Oct 24, 20261m 22s
  More actions for workflow run 838

• feat: reappraise retained synthetic evidence for #199

  completed successfully:
  CodeQL#837:Pull request#334synchronizebydinakarjs
  dinakarjs:docs/199-current-acceptance-profile

  Oct 24, 20261m 15s
  More actions for workflow run 837

• fix(examples): reject duplicate JSON keys, non-finite numbers, and boolean sequences in verify_receipts and verify_purchase (#369)

  completed successfully:
  CodeQL#836:Pull request#373synchronizebydrk-ram
  drk-ram:drk-ram-fix-examples-369

  Oct 23, 20268m 24s
  More actions for workflow run 836

• fix(ramen-ai-cmcp): enforce canonical base64url and reject duplicate JSON keys in _receipt_verify.py (#367)

  completed successfully:
  CodeQL#835:Pull request#372openedbydrk-ram
  drk-ram:drk-ram-fix-ramen-ai-367

  Oct 23, 20267m 21s
  More actions for workflow run 835

• fix(examples): reject duplicate JSON keys, non-finite numbers, and boolean sequences in verify_receipts and verify_purchase (#369)

  requires action with the application:
  CodeQL#834:Pull request#373openedbydrk-ram
  drk-ram:drk-ram-fix-examples-369

  Oct 23, 2026Action required
  More actions for workflow run 834

• fix(trace-adapters): reject boolean capture timestamps and non-canonical base64 signatures in openshell adapters (#368)

  completed successfully:
  CodeQL#833:Pull request#371openedbydrk-ram
  drk-ram:drk-ram-fix-trace-adapters-368

  Oct 23, 20265m 58s
  More actions for workflow run 833

• fix(capture-core): reject duplicate JSON keys and non-finite numbers in load_state/sha_mapping and check seal.alg in check_seal (#366)

  completed successfully:
  CodeQL#832:Pull request#370openedbydrk-ram
  drk-ram:drk-ram-fix-capture-core-366

  Oct 23, 20266m 17s
  More actions for workflow run 832

• docs(litzki-systems-sovp): record maintainer reproduction of 0.2.0

  completed successfully:
  CodeQL#831:Pull request#365openedbylitzki-systems
  litzki-systems:main

  Oct 23, 20261m 1s
  More actions for workflow run 831

• fix(verifiers): enforce canonical base64url, reject private JWKs and duplicate JSON keys in independent_verify and guard request_sha256 in companion_v0

  completed successfully:
  CodeQL#830:Pull request#364openedbydrk-ram
  drk-ram:drk-ram-fix-issue-363-verifier-hardening

  Oct 23, 20261m 21s
  More actions for workflow run 830

• fix(catalog): remove unavailable Nobulex source listing

  completed successfully:
  CodeQL#829:Pull request#357synchronizebydinakarjs
  dinakarjs:fix/unavailable-nobulex-listing

  Oct 22, 20261m 58s
  More actions for workflow run 829

• ci(examples): install pyOpenSSL for model-signing 1.1.1

  completed successfully:
  CodeQL#828:Pull request#362openedbyimran-siddique
  fix/model-signing-pyopenssl

  Oct 22, 20261m 18s
  More actions for workflow run 828

• integrations: MUSUBI trace terms (record-consumer, Level 0, agentrust-trace 0.11.0)

  completed successfully:
  CodeQL#827:Pull request#355synchronizebyogasurfproject-jpg
  ogasurfproject-jpg:horizonshield-musubi-trace-terms

  Oct 22, 20261m 9s
  More actions for workflow run 827

• build(deps): bump certifi from 2026.7.22 to 2026.10.19 in /requirements

  completed successfully:
  CodeQL#826:Pull request#361openedbydependabot[bot]Bot
  dependabot/pip/requirements/certifi-2026.10.19

  Oct 22, 20261m 43s
  More actions for workflow run 826

• integrations: MUSUBI companion for cA2A (community, pinned to ca2a-ru…

  completed successfully:
  CodeQL#825:Commit2fc39d9pushedbyimran-siddique
  main

  Oct 22, 20261m 27s
  More actions for workflow run 825

• fix(ci): declare model-signing OpenSSL dependency

  completed successfully:
  CodeQL#824:Pull request#360synchronizebynoah-ing
  noah-ing:codex/wcm-model-signing-pyopenssl-20261021

  Oct 22, 20261m 17s
  More actions for workflow run 824