Skip to content

Actions: makeplane/plane

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: order legacy filter date range by parsed datetime instead of string comparison CodeQL #15166: Pull request #9569 opened by eeshsaxena
Action required eeshsaxena:fix-date-range-string-ordering
eeshsaxena:fix-date-range-string-ordering
Action required
Fix module segment headers in analytics export CodeQL #15165: Pull request #9206 synchronize by miachillgood
Action required miachillgood:fix/module-segment-export-headers
miachillgood:fix/module-segment-export-headers
Action required
Fix dummy issue parent assignments CodeQL #15164: Pull request #9207 synchronize by miachillgood
Action required miachillgood:fix/dummy-parent-assignments
miachillgood:fix/dummy-parent-assignments
Action required
fix(filters): order date range by parsed datetime, not string comparison CodeQL #15163: Pull request #9568 synchronize by Badri467
Action required Badri467:fix/legacy-filter-date-range-ordering
Badri467:fix/legacy-filter-date-range-ordering
Action required
fix(filters): order date range by parsed datetime, not string comparison CodeQL #15162: Pull request #9568 opened by Badri467
-1s Badri467:fix/legacy-filter-date-range-ordering
Badri467:fix/legacy-filter-date-range-ordering
-1s
[SECUR-245] fix(security): guard PDF image srcs and authenticate /convert-document/ CodeQL #15161: Pull request #9540 synchronize by mguptahub
1m 39s secur-245/live-pre-auth-ssrf
secur-245/live-pre-auth-ssrf
1m 39s
[WEB-8103] fix: stop leaking webhook HMAC secret_key on reads CodeQL #15160: Pull request #9382 synchronize by mguptahub
2m 16s web-8103/webhook-secret-key-scope
web-8103/webhook-secret-key-scope
2m 16s
[WEB-8110] fix: sanitize page list order_by against an allowlist CodeQL #15159: Pull request #9387 synchronize by mguptahub
2m 7s web-8110/page-order-by-allowlist
web-8110/page-order-by-allowlist
2m 7s
[WEB-8289] fix: scope draft-to-issue conversion to the draft owner CodeQL #15158: Pull request #9443 synchronize by mguptahub
2m 21s web-8289/draft-to-issue-owner-scope
web-8289/draft-to-issue-owner-scope
2m 21s
[WEB-8291] fix: gate project invitation list/retrieve/destroy to project admins CodeQL #15157: Pull request #9444 synchronize by mguptahub
1m 25s web-8291/project-invite-list-admin-scope
web-8291/project-invite-list-admin-scope
1m 25s
[WEB-8332] fix(security): block workspace-member mass-assignment CodeQL #15156: Pull request #9460 synchronize by mguptahub
1m 21s web-8332/workspace-member-mass-assignment
web-8332/workspace-member-mass-assignment
1m 21s
[WEB-8333] fix(security): guard undecorated viewset routes with project-membership check CodeQL #15155: Pull request #9461 synchronize by mguptahub
1m 30s web-8333/undecorated-route-idor
web-8333/undecorated-route-idor
1m 30s
[WEB-8352] fix(security): scope SubIssuesEndpoint to the URL project CodeQL #15154: Pull request #9466 synchronize by mguptahub
1m 30s web-8352/sub-issue-cross-project-scope
web-8352/sub-issue-cross-project-scope
1m 30s
[SECUR-243] fix(security): scope issue comment + relation endpoints to the URL project CodeQL #15153: Pull request #9531 synchronize by mguptahub
1m 27s secur-243/issue-subresource-idor
secur-243/issue-subresource-idor
1m 27s
[WEB-8372] fix(security): restrict StateViewSet.partial_update to project admins CodeQL #15152: Pull request #9473 synchronize by mguptahub
1m 30s web-8372/state-partial-update-admin-only
web-8372/state-partial-update-admin-only
1m 30s
[WEB-8374] fix(security): scope ProjectMemberPreferenceEndpoint to the caller CodeQL #15151: Pull request #9474 synchronize by mguptahub
1m 22s web-8374/member-preference-idor
web-8374/member-preference-idor
1m 22s
[WEB-8382][WEB-8383] fix(security): external-API issue comment + attachment authz CodeQL #15150: Pull request #9475 synchronize by mguptahub
1m 31s web-8375/external-api-issue-authz
web-8375/external-api-issue-authz
1m 31s
[WEB-8400] fix(security): scope DeployBoardViewSet queryset to the URL workspace/project CodeQL #15149: Pull request #9481 synchronize by mguptahub
1m 25s web-8400/deploy-board-cross-workspace-idor
web-8400/deploy-board-cross-workspace-idor
1m 25s
[WEB-8401] fix(security): scope public Space asset mutations to the creator CodeQL #15148: Pull request #9483 synchronize by mguptahub
1m 22s web-8401/space-asset-mutation-authz
web-8401/space-asset-mutation-authz
1m 22s
[WEB-8283] fix: bind Spaces board object IDs to the anchor's project CodeQL #15147: Pull request #9442 synchronize by mguptahub
1m 40s web-8283/spaces-board-object-id-scope
web-8283/spaces-board-object-id-scope
1m 40s
[WEB-8353] fix(security): enforce guest issue visibility on attachments + activity CodeQL #15146: Pull request #9467 synchronize by mguptahub
1m 30s web-8353/guest-issue-subresource-scope
web-8353/guest-issue-subresource-scope
1m 30s
[SECUR-245] fix(security): guard PDF image srcs and authenticate /convert-document/ CodeQL #15145: Pull request #9540 synchronize by mguptahub
1m 25s secur-245/live-pre-auth-ssrf
secur-245/live-pre-auth-ssrf
1m 25s
release: v1.4.1 #9545 CodeQL #15144: Commit 5662b76 pushed by sriramveeraghanta
2m 31s master
master
2m 31s
fix: date range filter validation always allowed invalid ranges CodeQL #15143: Pull request #9566 opened by okxint
2m 12s okxint:fix/date-filter-modal-range-validation
okxint:fix/date-filter-modal-range-validation
2m 12s
feat(web): allow attaching multiple files at once to a work item CodeQL #15142: Pull request #9560 synchronize by Syed-Ali-Abbas-Zaidi
Action required Syed-Ali-Abbas-Zaidi:feat/9544-attach-multiple-files
Syed-Ali-Abbas-Zaidi:feat/9544-attach-multiple-files
Action required