CodeQL

Workflow runs for CodeQL

• Bump the all-github group across 1 directory with 4 updates

  completed successfully:
  CodeQL#313:Pull request#110synchronizebydependabot[bot]Bot
  dependabot/github_actions/all-github-f1887bfb33

  Oct 5, 20261m 22s
  More actions for workflow run 313

• prevent symlink-based directory traversal in move_output_files_to (#113)

  completed successfully:
  CodeQL#312:Commit757ea82pushedbyprakashb72
  main

  Sep 28, 20261m 17s
  More actions for workflow run 312

• Insecure world-writable permissions (0o777) on bundled compression bi…

  completed successfully:
  CodeQL#311:Commit8f91a77pushedbyprakashb72
  main

  Sep 28, 20261m 15s
  More actions for workflow run 311

• Fix unbounded recursion (DoS) in UefiParser.parse_firmware_volume via zero-length FV header

  completed successfully:
  CodeQL#310:Pull request#115openedbysys-xmlcli
  sys-xmlcli:PTK0009549

  Sep 25, 20262m 13s
  More actions for workflow run 310

• Fix OS command injection in WinRweAccess via os.system → subprocess.run(shell=False)

  completed successfully:
  CodeQL#309:Pull request#114openedbysys-xmlcli
  sys-xmlcli:PTK0009082

  Sep 25, 20264m 1s
  More actions for workflow run 309

• Fix symlink-based directory traversal (TOCTOU) in move_output_files_to

  completed successfully:
  CodeQL#308:Pull request#113openedbysys-xmlcli
  sys-xmlcli:PTK0009081

  Sep 25, 20261m 43s
  More actions for workflow run 308

• Insecure world-writable permissions (0o777) on bundled compression binaries in setup.py PostInstall

  completed successfully:
  CodeQL#307:Pull request#112openedbysys-xmlcli
  sys-xmlcli:fix1

  Sep 25, 20261m 9s
  More actions for workflow run 307

• Fix WinRWE command injection via filename handling

  completed successfully:
  CodeQL#306:Commit59656abpushedbyprakashb72
  winrwe

  Sep 9, 20261m 14s
  More actions for workflow run 306

• PTK0009079 Restrict compression binary permissions to 0o755

  completed successfully:
  CodeQL#305:Pull request#111openedbyprakashb72
  PTK0009079

  Sep 2, 20261m 34s
  More actions for workflow run 305

• PTK0009079 Restrict compression binary permissions to 0o755

  completed successfully:
  CodeQL#304:Commit18013b0pushedbyprakashb72
  PTK0009079

  Sep 2, 20261m 27s
  More actions for workflow run 304

• Bump the all-github group across 1 directory with 4 updates

  completed successfully:
  CodeQL#303:Pull request#110openedbydependabot[bot]Bot
  dependabot/github_actions/all-github-f1887bfb33

  Jul 27, 20261m 23s
  More actions for workflow run 303