CodeQL Analysis

Workflow runs for CodeQL Analysis

• Add a post on ML-DSA support in TUF

  completed successfully:
  CodeQL Analysis#2371:Pull request#2999synchronizebyjku
  jku:blog

  Oct 15, 20261m 7s
  More actions for workflow run 2371

• Test the trusted metadata chain with DSSE envelopes

  requires action with the application:
  CodeQL Analysis#2370:Pull request#3032openedbyHarshil-1603
  Harshil-1603:test/dsse-trusted-metadata

  Oct 14, 2026Action required
  More actions for workflow run 2370

• Merge pull request #3029 from theupdateframework/dependabot/pip/test-…

  completed successfully:
  CodeQL Analysis#2369:Commit2c771a0pushedbyjku
  develop

  Oct 14, 20261m 15s
  More actions for workflow run 2369

• Merge pull request #3030 from theupdateframework/dependabot/pip/depen…

  completed successfully:
  CodeQL Analysis#2368:Commitb9f1a72pushedbyjku
  develop

  Oct 14, 20261m 8s
  More actions for workflow run 2368

• Merge pull request #3031 from theupdateframework/dependabot/github_ac…

  completed successfully:
  CodeQL Analysis#2367:Commitafed8f2pushedbyjku
  develop

  Oct 14, 202658s
  More actions for workflow run 2367

• build(deps): bump the action-dependencies group with 2 updates

  completed successfully:
  CodeQL Analysis#2366:Pull request#3031openedbydependabot[bot]Bot
  dependabot/github_actions/action-dependencies-b2576794da

  Oct 14, 202656s
  More actions for workflow run 2366

• build(deps): bump cryptography from 50.0.1 to 50.0.2 in the dependencies group

  completed successfully:
  CodeQL Analysis#2365:Pull request#3030openedbydependabot[bot]Bot
  dependabot/pip/dependencies-cddbe02dfc

  Oct 14, 202650s
  More actions for workflow run 2365

• build(deps): bump the test-and-lint-dependencies group with 2 updates

  completed successfully:
  CodeQL Analysis#2364:Pull request#3029openedbydependabot[bot]Bot
  dependabot/pip/test-and-lint-dependencies-09417404bc

  Oct 14, 20261m 3s
  More actions for workflow run 2364

• CodeQL Analysis

  completed successfully:
  CodeQL Analysis#2363:Scheduled
  develop

  Oct 13, 20261m 16s
  More actions for workflow run 2363

• Make updater configuration immutable

  requires action with the application:
  CodeQL Analysis#2362:Pull request#3028openedbyHarshil-1603
  Harshil-1603:fix/immutable-updater-config

  Oct 12, 2026Action required
  More actions for workflow run 2362

• Merge pull request #3026 from theupdateframework/dependabot/pip/test-…

  completed successfully:
  CodeQL Analysis#2361:Commitff0ff78pushedbyjku
  develop

  Oct 6, 20261m 18s
  More actions for workflow run 2361

• Merge pull request #3027 from theupdateframework/dependabot/github_ac…

  completed successfully:
  CodeQL Analysis#2360:Commit866d9a9pushedbyjku
  develop

  Oct 6, 20261m 5s
  More actions for workflow run 2360

• CodeQL Analysis

  completed successfully:
  CodeQL Analysis#2359:Scheduled
  develop

  Oct 6, 202652s
  More actions for workflow run 2359

• build(deps): bump github/codeql-action from 4.38.1 to 4.38.2 in the action-dependencies group

  completed successfully:
  CodeQL Analysis#2358:Pull request#3027openedbydependabot[bot]Bot
  dependabot/github_actions/action-dependencies-a63e66b24a

  Oct 5, 20261m 2s
  More actions for workflow run 2358

• build(deps): bump the test-and-lint-dependencies group with 2 updates

  completed successfully:
  CodeQL Analysis#2357:Pull request#3026openedbydependabot[bot]Bot
  dependabot/pip/test-and-lint-dependencies-463cfe50e6

  Oct 5, 20261m 0s
  More actions for workflow run 2357

• tests: Add end-to-end test for the examples

  completed successfully:
  CodeQL Analysis#2356:Pull request#2948synchronizebyarpitjain099
  arpitjain099:test/examples-e2e

  Sep 29, 20261m 8s
  More actions for workflow run 2356

• Reject delegated role names that match a top-level role in any case

  completed successfully:
  CodeQL Analysis#2355:Pull request#3011synchronizebyarpitjain099
  arpitjain099:fix/delegated-role-name-case-collision

  Sep 29, 20261m 4s
  More actions for workflow run 2355

• Merge pull request #3022 from theupdateframework/dependabot/pip/build…

  completed successfully:
  CodeQL Analysis#2354:Commit1db1526pushedbylukpueh
  develop

  Sep 29, 20261m 11s
  More actions for workflow run 2354

• Merge pull request #3023 from theupdateframework/dependabot/pip/test-…

  completed successfully:
  CodeQL Analysis#2353:Commit58c2205pushedbylukpueh
  develop

  Sep 29, 20261m 10s
  More actions for workflow run 2353

• Merge pull request #3024 from theupdateframework/dependabot/pip/depen…

  completed successfully:
  CodeQL Analysis#2352:Commit5c5d754pushedbylukpueh
  develop

  Sep 29, 20261m 48s
  More actions for workflow run 2352

• Merge pull request #3025 from theupdateframework/dependabot/github_ac…

  completed successfully:
  CodeQL Analysis#2351:Commit4c433b1pushedbylukpueh
  develop

  Sep 29, 20261m 14s
  More actions for workflow run 2351

• CodeQL Analysis

  completed successfully:
  CodeQL Analysis#2350:Scheduled
  develop

  Sep 29, 20261m 12s
  More actions for workflow run 2350

• build(deps): bump github/codeql-action from 4.38.0 to 4.38.1 in the action-dependencies group

  completed successfully:
  CodeQL Analysis#2349:Pull request#3025openedbydependabot[bot]Bot
  dependabot/github_actions/action-dependencies-71fcf20ecc

  Sep 28, 202658s
  More actions for workflow run 2349

• build(deps): bump urllib3 from 2.7.0 to 2.8.0 in the dependencies group

  completed successfully:
  CodeQL Analysis#2348:Pull request#3024openedbydependabot[bot]Bot
  dependabot/pip/dependencies-2a4a739b48

  Sep 28, 202655s
  More actions for workflow run 2348

• build(deps): bump ruff from 0.16.7 to 0.16.8 in the test-and-lint-dependencies group

  completed successfully:
  CodeQL Analysis#2347:Pull request#3023openedbydependabot[bot]Bot
  dependabot/pip/test-and-lint-dependencies-564d0085cf

  Sep 28, 20261m 4s
  More actions for workflow run 2347