Merge pull request #2147 from ContextualWisdomLab/fix/sast-semgrep-ga…

7f07029

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

CodeQL - Code Quality on: dynamic

Analyze (javascript-typescript)

Strix Security Scan on: push 1

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Secret Scan on: push 4

gitleaks (secret scan)

Scorecard analysis on: push

Scorecard analysis

SBOM Generation on: push

generate-sbom

SAST Semgrep on: push

Semgrep (multi-language SAST)

Python Security on: push 1

Detect Python

Bandit (Python SAST)

pip-audit (Python dependency audit)

Required PR Review Merge Scheduler on: push

scan-pr-queue

Scheduled Security Scan on: push

Detect CodeQL languages

Trivy filesystem (periodic)

CodeQL periodic (actions)

CodeQL periodic (python)

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Strix Security Scan on: pull_request_target 2

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Security Scan on: pull_request

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

Strix Security Scan on: pull_request_target

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

SAST Semgrep on: pull_request

Semgrep (multi-language SAST)

Required Noema Review on: pull_request_target

admit-current-head

cancel-closed-pr-runs

noema-review

CodeQL PR on: pull_request

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

Strix Security Scan on: pull_request_target 2

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Strix Security Scan on: pull_request_target

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

SAST Semgrep on: pull_request

Semgrep (multi-language SAST)

Required Noema Review on: pull_request_target

admit-current-head

cancel-closed-pr-runs

noema-review

CodeQL PR on: pull_request

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Security Scan on: pull_request

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Strix Security Scan on: pull_request_target 2

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required Noema Review on: pull_request_target

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Strix Security Scan on: pull_request_target

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

SAST Semgrep on: pull_request

Semgrep (multi-language SAST)

CodeQL PR on: pull_request

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Security Scan on: pull_request

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

SAST Semgrep on: pull_request 2

Semgrep (multi-language SAST)

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Security Scan on: pull_request 3

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

CodeQL PR on: pull_request 2

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required Noema Review on: pull_request_target

admit-current-head

cancel-closed-pr-runs

noema-review

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Strix Security Scan on: pull_request_target

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Security Scan on: pull_request

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

SAST Semgrep on: pull_request

Semgrep (multi-language SAST)

CodeQL PR on: pull_request

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Code scanning results

Gitleaks

Scorecard

Semgrep OSS

Trivy

Strix Security Scan on: pull_request_target 3

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required Noema Review on: pull_request_target 2

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target 2

scan-pr-queue

Required OpenCode Review on: pull_request_target 2

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

Required Noema Review on: pull_request_target

admit-current-head

cancel-closed-pr-runs

noema-review

Required PR Review Merge Scheduler on: pull_request_target

scan-pr-queue

Strix Security Scan on: pull_request_target

Detect changed scope

Admit current pull request head

cancel-superseded-pr-runs

strix

publish-manual-pr-evidence-status

Required OpenCode Review on: pull_request_target

required-workflow-bootstrap

cancel-superseded-opencode-review-runs

admit-current-head

coverage-source-tree

coverage-evidence

opencode-review

SAST Semgrep on: pull_request

Semgrep (multi-language SAST)

Security Scan on: pull_request

Detect changed scope

gitleaks (secret scan)

osv-scan

dependency-review

trivy-fs

scorecard

CodeQL PR on: pull_request

Detect CodeQL languages

CodeQL compatibility analysis (${{ matrix.language }})

Dispatch current-head CodeQL scan

Merge pull request #2147 from ContextualWisdomLab/fix/sast-semgrep-ga…

Uh oh!

Select a check to view from the sidebar