codeql

Workflow runs for codeql

• build: accept a C11 construct reached through a system header

  completed successfully:
  codeql#413:Commit74aba17pushedbybcoles
  master

  Nov 13, 20262m 57s
  More actions for workflow run 413

• build: move the cross-build zlib pin to 1.4

  completed successfully:
  codeql#412:Commit0348a19pushedbybcoles
  master

  Nov 13, 20262m 16s
  More actions for workflow run 412

• components: pin timing probes to the current core

  completed successfully:
  codeql#411:Commitb9cfa9cpushedbybcoles
  master

  Nov 13, 20261m 49s
  More actions for workflow run 411

• codeql

  completed successfully:
  codeql#410:Scheduled
  master

  Nov 9, 20262m 20s
  More actions for workflow run 410

• codeql

  completed successfully:
  codeql#409:Scheduled
  master

  Nov 2, 20262m 32s
  More actions for workflow run 409

• codeql

  completed successfully:
  codeql#408:Scheduled
  master

  Oct 26, 20262m 8s
  More actions for workflow run 408

• codeql

  completed successfully:
  codeql#407:Scheduled
  master

  Oct 19, 20261m 46s
  More actions for workflow run 407

• codeql

  completed successfully:
  codeql#406:Scheduled
  master

  Oct 12, 20262m 23s
  More actions for workflow run 406

• render: leave the confirmed-mitigations list uncoloured

  completed successfully:
  codeql#405:Commit147f5e8pushedbybcoles
  master

  Oct 11, 20262m 24s
  More actions for workflow run 405

• render: credit a capability only where the kernel's check accepts it

  completed successfully:
  codeql#404:Commit995489dpushedbybcoles
  master

  Oct 11, 20262m 23s
  More actions for workflow run 404

• render: credit a privileged kernel log read as exempt, not a bypass

  completed successfully:
  codeql#403:Commit94fea88pushedbybcoles
  master

  Oct 10, 20262m 21s
  More actions for workflow run 403

• arch: say what is invariant about the MIPS direct-map base

  completed successfully:
  codeql#402:Commitf890759pushedbybcoles
  master

  Oct 9, 20262m 13s
  More actions for workflow run 402

• s390: establish the module band's anchor rather than asserting it

  completed successfully:
  codeql#401:Commit800e839pushedbybcoles
  master

  Oct 7, 20262m 31s
  More actions for workflow run 401

• replay: reject a named fixture that matches nothing

  completed successfully:
  codeql#400:Commit7f23123pushedbybcoles
  master

  Oct 6, 20261m 38s
  More actions for workflow run 400

• tests: fail test-cross when a named target does not run

  completed successfully:
  codeql#399:Commit2141cc2pushedbybcoles
  master

  Oct 6, 20261m 51s
  More actions for workflow run 399

• arm64: a base no seed placed is a 2 MiB window, not the un-slid edge

  completed successfully:
  codeql#398:Commitd401394pushedbybcoles
  master

  Oct 5, 20262m 19s
  More actions for workflow run 398

• tests: compare the verbose and hardening markdown reports with json

  completed successfully:
  codeql#397:Commit7e58673pushedbybcoles
  master

  Oct 5, 20262m 27s
  More actions for workflow run 397

• tests: cover the wire parser's record rejection paths

  completed successfully:
  codeql#396:Commitb28af72pushedbybcoles
  master

  Oct 5, 20261m 43s
  More actions for workflow run 396

• tests: cover the ELF section reader against malformed headers

  completed successfully:
  codeql#395:Commit7126f27pushedbybcoles
  master

  Oct 5, 20262m 29s
  More actions for workflow run 395

• tests: report the union of the two coverage runs

  completed successfully:
  codeql#394:Commit1b3be58pushedbybcoles
  master

  Oct 5, 20262m 35s
  More actions for workflow run 394

• extra: treat a captured bundle's fields as untrusted input

  completed successfully:
  codeql#393:Commit962bec8pushedbybcoles
  master

  Oct 5, 20262m 47s
  More actions for workflow run 393

• arm64: read a visible FDT kaslr-seed as a KASLR-off signal

  completed successfully:
  codeql#392:Commit552f423pushedbybcoles
  master

  Oct 5, 20262m 30s
  More actions for workflow run 392

• codeql

  completed successfully:
  codeql#391:Scheduled
  master

  Oct 5, 20262m 20s
  More actions for workflow run 391

• rules: drop the max-offset ceiling, which measures from the link address

  completed successfully:
  codeql#390:Commita0accc5pushedbybcoles
  master

  Oct 4, 20262m 8s
  More actions for workflow run 390

• cleanup: give the component count as a bound rather than an exact figure

  completed successfully:
  codeql#389:Commit4d49ad3pushedbybcoles
  master

  Oct 4, 20262m 27s
  More actions for workflow run 389