Skip to content

Actions: microsoft/onnxruntime

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Remove old custom EP load infrastructure CodeQL #48207: Pull request #28095 synchronize by skottmckay
6m 29s skottmckay/RemoveCustomEpLibraryLoad
skottmckay/RemoveCustomEpLibraryLoad
6m 29s
Remove old custom EP load infrastructure CodeQL #48206: Pull request #28095 synchronize by skottmckay
6m 43s skottmckay/RemoveCustomEpLibraryLoad
skottmckay/RemoveCustomEpLibraryLoad
6m 43s
Add telemetry support for ONNX Runtime Web (JS/WASM) CodeQL #48205: Pull request #27978 synchronize by bmehta001
5m 55s bhamehta/web-telemetry
bhamehta/web-telemetry
5m 55s
Remove old custom EP load infrastructure CodeQL #48204: Pull request #28095 opened by skottmckay
6m 15s skottmckay/RemoveCustomEpLibraryLoad
skottmckay/RemoveCustomEpLibraryLoad
6m 15s
Update global-agent comments to use version-agnostic GitHub URL (#28061) CodeQL #48203: Commit b7804b0 pushed by skottmckay
5m 57s main
main
5m 57s
[CI] fix: use internal feed for NPM on ADO CodeQL #48202: Pull request #28079 synchronize by eserscor
6m 23s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
6m 23s
fix(ml): use SafeInt checked arithmetic in ML operator coefficient size validation CodeQL #48201: Pull request #28001 synchronize by tianleiwu
6m 20s tlwu/20260407/fix_linear_classifier
tlwu/20260407/fix_linear_classifier
6m 20s
Fix CoreML EP issue with external weight path handling. CodeQL #48200: Pull request #28062 synchronize by skottmckay
7m 11s skottmckay/GH28043
skottmckay/GH28043
7m 11s
fix(security): add SafeInt overflow protection in Expand and constant folding output size limit CodeQL #48199: Pull request #28055 synchronize by tianleiwu
6m 51s tlwu/safe_const_folding
tlwu/safe_const_folding
6m 51s
[CI] fix: use internal feed for NPM on ADO CodeQL #48198: Pull request #28079 synchronize by eserscor
6m 21s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
6m 21s
[CI] fix: use internal feed for NPM on ADO CodeQL #48197: Pull request #28079 synchronize by eserscor
5m 31s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
5m 31s
Replace unsafe reinterpret_cast with C API calls in include/onnxruntime/ep/adapter/op_kernel_info.h CodeQL #48196: Pull request #28081 synchronize by edgchen1
5m 46s edgchen1/fix_plugin_ep_adapter_cast_issue
edgchen1/fix_plugin_ep_adapter_cast_issue
5m 46s
[CI] fix: use internal feed for NPM on ADO CodeQL #48195: Pull request #28079 synchronize by eserscor
5m 49s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
5m 49s
[CI] fix: use internal feed for NPM on ADO CodeQL #48194: Pull request #28079 synchronize by eserscor
5m 58s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
5m 58s
[WebGPU EP] Reduce forward declaration boilerplate in kernel registra… CodeQL #48193: Commit eb7a1bf pushed by edgchen1
6m 6s main
main
6m 6s
Add LabelEncoder CUDA execution provider for numeric types CodeQL #48192: Pull request #28045 synchronize by tianleiwu
6m 6s copilot/add-labelencoder-on-cuda-provider
copilot/add-labelencoder-on-cuda-provider
6m 6s
Bump picomatch from 2.3.1 to 2.3.2 in /js/common CodeQL #48191: Pull request #27847 synchronize by dependabot bot
6m 52s dependabot/npm_and_yarn/js/common/picomatch-2.3.2
dependabot/npm_and_yarn/js/common/picomatch-2.3.2
6m 52s
Bump picomatch from 2.3.1 to 2.3.2 in /js/react_native/e2e CodeQL #48190: Pull request #27849 synchronize by dependabot bot
6m 57s dependabot/npm_and_yarn/js/react_native/e2e/picomatch-2.3.2
dependabot/npm_and_yarn/js/react_native/e2e/picomatch-2.3.2
6m 57s
Bump picomatch from 2.3.1 to 2.3.2 in /js/web CodeQL #48189: Pull request #27850 synchronize by dependabot bot
6m 32s dependabot/npm_and_yarn/js/web/picomatch-2.3.2
dependabot/npm_and_yarn/js/web/picomatch-2.3.2
6m 32s
Bump picomatch from 2.3.1 to 2.3.2 in /js CodeQL #48188: Pull request #27846 synchronize by dependabot bot
6m 4s dependabot/npm_and_yarn/js/picomatch-2.3.2
dependabot/npm_and_yarn/js/picomatch-2.3.2
6m 4s
Fix heap OOB write in MaxPoolGrad via indices bounds validation (#27903) CodeQL #48187: Commit 0e73535 pushed by vraspar
6m 17s main
main
6m 17s
Do not create numpy on top of Tensor non-owning buffer CodeQL #48186: Pull request #28088 synchronize by yuslepukhin
6m 10s yuslepukhin/fix_numpy_zero_copy
yuslepukhin/fix_numpy_zero_copy
6m 10s
Agent instructions - refine ort-build skill CodeQL #48185: Pull request #28082 synchronize by edgchen1
5m 53s edgchen1/update_agent_instructions
edgchen1/update_agent_instructions
5m 53s
Add telemetry support for ONNX Runtime Web (JS/WASM) CodeQL #48184: Pull request #27978 synchronize by bmehta001
6m 27s bhamehta/web-telemetry
bhamehta/web-telemetry
6m 27s
[CI] fix: use internal feed for NPM on ADO CodeQL #48183: Pull request #28079 synchronize by eserscor
5m 56s dev/sanaahamel/ci-npm-authenticate
dev/sanaahamel/ci-npm-authenticate
5m 56s