Skip to content

Actions: ChelseaKR/ledger

Actions

semgrep

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
semgrep.yml
74 workflow runs
74 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Harden PyPI and GitHub release trust semgrep #74: Pull request #105 opened by ChelseaKR
38s agent/harden-release-trust
agent/harden-release-trust
38s
ci: bump actions/checkout from 7.0.0 to 7.0.1 semgrep #73: Pull request #104 opened by dependabot Bot
1m 0s dependabot/github_actions/actions/checkout-7.0.1
dependabot/github_actions/actions/checkout-7.0.1
1m 0s
ci: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 semgrep #72: Pull request #103 opened by dependabot Bot
44s dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.1
dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.1
44s
ci: bump actions/setup-python from 6.3.0 to 7.0.0 semgrep #71: Pull request #102 opened by dependabot Bot
38s dependabot/github_actions/actions/setup-python-7.0.0
dependabot/github_actions/actions/setup-python-7.0.0
38s
ci: bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.2 semgrep #70: Pull request #101 opened by dependabot Bot
37s dependabot/github_actions/github/codeql-action/upload-sarif-4.37.2
dependabot/github_actions/github/codeql-action/upload-sarif-4.37.2
37s
ci: bump step-security/harden-runner from 2.9.1 to 2.20.0 semgrep #69: Pull request #100 opened by dependabot Bot
39s dependabot/github_actions/step-security/harden-runner-2.20.0
dependabot/github_actions/step-security/harden-runner-2.20.0
39s
semgrep semgrep #68: Scheduled
44s main
main
44s
docs: add ledger evaluation path semgrep #67: Pull request #98 opened by ChelseaKR
37s agent/ledger-evaluation-path
agent/ledger-evaluation-path
37s
ci: bump github/codeql-action/init from 4.36.3 to 4.37.0 semgrep #66: Pull request #92 synchronize by ChelseaKR
41s dependabot/github_actions/github/codeql-action/init-4.37.0
dependabot/github_actions/github/codeql-action/init-4.37.0
41s
ci: lean Actions per CI-CD-STANDARD §11 — drop redundant CodeQL push:main (§11e) semgrep #65: Pull request #97 opened by ChelseaKR
39s gha/lean-actions-2026-07-17
gha/lean-actions-2026-07-17
39s
ci: bump ossf/scorecard-action from 2.4.2 to 2.4.3 semgrep #64: Pull request #96 opened by dependabot Bot
52s dependabot/github_actions/ossf/scorecard-action-2.4.3
dependabot/github_actions/ossf/scorecard-action-2.4.3
52s
ci: bump github/codeql-action/analyze from 4.36.3 to 4.37.0 semgrep #63: Pull request #95 opened by dependabot Bot
39s dependabot/github_actions/github/codeql-action/analyze-4.37.0
dependabot/github_actions/github/codeql-action/analyze-4.37.0
39s
ci: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 semgrep #62: Pull request #94 opened by dependabot Bot
41s dependabot/github_actions/github/codeql-action/upload-sarif-4.37.0
dependabot/github_actions/github/codeql-action/upload-sarif-4.37.0
41s
ci: bump actions/setup-node from 4.4.0 to 7.0.0 semgrep #61: Pull request #93 opened by dependabot Bot
40s dependabot/github_actions/actions/setup-node-7.0.0
dependabot/github_actions/actions/setup-node-7.0.0
40s
ci: bump github/codeql-action/init from 4.36.3 to 4.37.0 semgrep #60: Pull request #92 opened by dependabot Bot
52s dependabot/github_actions/github/codeql-action/init-4.37.0
dependabot/github_actions/github/codeql-action/init-4.37.0
52s
feat(ingest): prompt for a description at authoring time (RM8) semgrep #59: Pull request #91 opened by ChelseaKR
37s claude/project-code-review-merge-jz4qwg
claude/project-code-review-merge-jz4qwg
37s
semgrep semgrep #58: Scheduled
46s main
main
46s
fix: harden archival state boundaries semgrep #57: Pull request #90 synchronize by ChelseaKR
47s agent/harden-archival-state-boundaries
agent/harden-archival-state-boundaries
47s
fix: harden archival state boundaries semgrep #56: Pull request #90 opened by ChelseaKR
38s agent/harden-archival-state-boundaries
agent/harden-archival-state-boundaries
38s
docs: sync architecture module tree with current src/ledger layout semgrep #55: Pull request #89 opened by ChelseaKR
53s docs/fix-architecture-diagram
docs/fix-architecture-diagram
53s
Fix missing production stylesheet semgrep #54: Pull request #88 opened by ChelseaKR
46s agent/static-css-deployment
agent/static-css-deployment
46s
Stop cloud-init from tracing demo secrets semgrep #53: Pull request #87 opened by ChelseaKR
43s agent/cloud-init-secret-tracing
agent/cloud-init-secret-tracing
43s
Align ledger with portfolio standards semgrep #52: Pull request #85 opened by ChelseaKR
43s agent/portfolio-standards-conformance
agent/portfolio-standards-conformance
43s
Eliminate record-ID path construction semgrep #51: Pull request #77 opened by ChelseaKR
42s remediate/codeql-path-selection
remediate/codeql-path-selection
42s
Complete default-branch CodeQL remediation semgrep #50: Pull request #76 opened by ChelseaKR
39s remediate/codeql-complete
remediate/codeql-complete
39s