Skip to content

Actions: browserstack/enigma

Actions

Semgrep

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
semgrep.yml
66 workflow runs
66 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Semgrep Semgrep #1033: Scheduled
58s main
main
58s
Semgrep Semgrep #1032: Scheduled
54s main
main
54s
Semgrep Semgrep #1031: Scheduled
54s main
main
54s
fix(dev): bootstrap config.json + secrets and unblock test container Semgrep #1030: Pull request #323 opened by KrishnaSuravarapu
56s fix/local-dev-test-bootstrap
fix/local-dev-test-bootstrap
56s
security(hardening): CSP, secrets untrack, DB loopback, non-root app, OAuth log redaction, image provenance Semgrep #1029: Pull request #322 synchronize by KrishnaSuravarapu
1m 1s security/chain-remediation-infra-hardening
security/chain-remediation-infra-hardening
1m 1s
security(hardening): CSP, secrets untrack, DB loopback, non-root app, OAuth log redaction, image provenance Semgrep #1028: Pull request #322 synchronize by KrishnaSuravarapu
58s security/chain-remediation-infra-hardening
security/chain-remediation-infra-hardening
58s
Semgrep Semgrep #1027: Scheduled
58s main
main
58s
security(hardening): CSP, secrets untrack, DB loopback, non-root app, OAuth log redaction, image provenance Semgrep #1026: Pull request #322 opened by KrishnaSuravarapu
53s security/chain-remediation-infra-hardening
security/chain-remediation-infra-hardening
53s
security(supply-chain): access-module clone hardening — path traversal + integrity pin (F-019/021/023) Semgrep #1025: Pull request #319 synchronize by KrishnaSuravarapu
59s security/enigma-path-traversal-clone
security/enigma-path-traversal-clone
59s
deps: Django 4.2.30 SQLi fix (F-011) + consolidated Dependabot bumps Semgrep #1024: Pull request #318 synchronize by KrishnaSuravarapu
1m 1s security/enigma-django-sqli-f011
security/enigma-django-sqli-f011
1m 1s
security(supply-chain): access-module clone hardening — path traversal + integrity pin (F-019/021/023) Semgrep #1023: Pull request #319 synchronize by KrishnaSuravarapu
57s security/enigma-path-traversal-clone
security/enigma-path-traversal-clone
57s
security(races): serialize approval transitions with select_for_update + idempotency guard (F-027/028/029) Semgrep #1022: Pull request #321 opened by KrishnaSuravarapu
58s security/enigma-races
security/enigma-races
58s
security(xss): DOM-safe rendering in access list + pending requests (F-024/F-025) Semgrep #1021: Pull request #320 opened by KrishnaSuravarapu
58s security/enigma-dom-xss
security/enigma-dom-xss
58s
security(supply-chain): access-module clone hardening — path traversal + integrity pin (F-019/021/023) Semgrep #1020: Pull request #319 opened by KrishnaSuravarapu
1m 1s security/enigma-path-traversal-clone
security/enigma-path-traversal-clone
1m 1s
deps: Django 4.2.30 SQLi fix (F-011) + consolidated Dependabot bumps Semgrep #1019: Pull request #318 opened by KrishnaSuravarapu
1m 0s security/enigma-django-sqli-f011
security/enigma-django-sqli-f011
1m 0s
security(authz): mark_revoked requires ALLOW_USER_OFFBOARD not read perm (F-006, CTO-4858) Semgrep #1018: Pull request #317 opened by KrishnaSuravarapu
1m 5s security/enigma-idor-mark-revoked
security/enigma-idor-mark-revoked
1m 5s
security(auth): require login on 4 unauthenticated state-changing views (F-002/003/004/005) Semgrep #1017: Pull request #316 opened by KrishnaSuravarapu
1m 2s security/enigma-auth-login-required
security/enigma-auth-login-required
1m 2s
Merge pull request #313 from browserstack/security/enigma-ci-workflow… Semgrep #1016: Commit 0de6b78 pushed by vedharish
52s main
main
52s
Potential fix for code scanning alert no. 84: DOM text reinterpreted as HTML Semgrep #1015: Pull request #315 opened by KrishnaSuravarapu
57s alert-autofix-84
alert-autofix-84
57s
security(ci): SHA-pin GitHub Actions + add permissions blocks (F-014/F-015, CTO-4862/4863) Semgrep #1014: Pull request #313 synchronize by KrishnaSuravarapu
57s security/enigma-ci-workflow-hardening
security/enigma-ci-workflow-hardening
57s
security(docker): .dockerignore, drop sudo/C_FORCE_ROOT, no-new-privileges (F-012/013/016/017, CTO-4860/4861/4864/4865) Semgrep #1013: Pull request #314 synchronize by KrishnaSuravarapu
1m 8s security/enigma-docker-hardening
security/enigma-docker-hardening
1m 8s
build(deps): bump soupsieve from 2.0.1 to 2.8.4 Semgrep #1012: Pull request #310 synchronize by dependabot Bot
1s dependabot/pip/soupsieve-2.8.4
dependabot/pip/soupsieve-2.8.4
1s
Merge pull request #264 from rahul-bs/patch-1 Semgrep #1011: Commit 86055f1 pushed by vedharish
1m 2s main
main
1m 2s
fix(deps): patch cryptography/msgpack/PyJWT/urllib3 CVEs + drop Py3.9 from CI (CTO-4968/4990/4969/4807) Semgrep #1010: Pull request #311 synchronize by KrishnaSuravarapu
1d 0h 0m 2s security/enigma-dep-cve-bumps
security/enigma-dep-cve-bumps
1d 0h 0m 2s
fix(deps): patch cryptography/msgpack/PyJWT/urllib3 CVEs + drop Py3.9 from CI (CTO-4968/4990/4969/4807) Semgrep #1009: Pull request #311 synchronize by KrishnaSuravarapu
1d 0h 0m 1s security/enigma-dep-cve-bumps
security/enigma-dep-cve-bumps
1d 0h 0m 1s