Netflix / lemur

75%

main: %

LAST BUILD ON BRANCH codeql-update

branch: codeql-update

CHANGE BRANCH

x

Reset

• codeql-update
• 0.5.0
• 0.5.1
• 0.6.0
• 0.7.0
• 0.8.0
• 0.8.1
• 1.5.0-release-prep
• 2636-config-ignore
• 422-elb-rotate
• AD-problem
• ADCS-plugin
• CRYP-606-2
• CRYP-606-3
• CRYPTO-3522
• CRYPTO-606
• CommonNameAutoAdditionAsDNS
• PS-5783
• PS-5783-allow-disable-with-destination
• PS-5783-edit-callback
• PS-5783-extend-ignore
• PS-6842-reissue-filter
• acme
• acme-authority-validity-range-error
• acme-bug
• acme-client-setup-retrial
• acme-eab
• acme-fixed-attempts
• acme-preferred-chain
• acme-remaining-validation
• acme_clinet_sign_alg
• acme_domain_suffix
• acme_nsone_provider
• acmev2
• add-Content-Type-to-docs
• add-ca-cert-notifications
• add-issuer-id-sns-notification
• add-match-metric-deployed-cert-check
• add-pending-certificate-upload
• add-ping-oauth2-url-param
• add-python3.9-testing
• add-remove-certs-for-notification
• add-rotation-defaults
• add-update-owner-endpoint
• add_metrics_reissue_rotate
• add_reissue_notifications
• adding-package-lock
• admin-authz
• admin-issuer
• admin-only-authority-creation
• aid_openid_roles_provider_integration
• allow-cert-deletion
• allow-disable-security-expiration-emails
• allow-duplicate-s3-destinations
• allow-excluded-destinations
• angular-file-server
• apikey-typo
• async-notifications
• async-optional-cn
• audit
• audit-message
• aut0mate-bump-version
• authorities_error_handling
• authority-roles
• authority_validation_LE_errors
• authz-warmup
• auto-release-doc
• avoid-duplicate-roles
• aws-plugin-resiliancy
• aws-pluging-S3-remove-acme-token
• aws_acm_plugin
• azure-plugin
• bandit-positional-error
• better-error-handling-dyn
• better-metrics-endpoints
• better-string-formatting
• better_dns_autodetection
• better_dnsprovider_handling
• better_sentry
• black-052019
• bobmshannon-patch-1
• booleans
• bootswatch-fix
• bs/bump_future_version
• bs/bump_hvac
• bs/fix_directory_acme
• bs/fix_metrics_reporting_task
• bs/fix_typo
• bs/google_people_api_v2
• bs/hotfix_multi_cert_elb
• bs/lemur_govcloud
• bs/reduce_strictness_vault_url
• bs/rotate_duplicate_endpoint_name
• bugfix
• bugfix-out-of-index
• bugfix/acme-revoke
• bugfix/celery-documentation
• bugfix/dns-providers-list
• bugfix/group-lookup-fix-referral
• bugfix_typo_username
• bump-flake-8
• cab_compliant
• cache-parsed-cert
• cancel_pending_cert_failures
• castrapel-patch-1
• castrapel-patch-2
• castrapel-patch-3
• cdanger-patch-1
• celery-timeouts-LE-validation
• celery-update
• celery_092018
• celery_metrics
• celery_pending
• celery_tasks_sync
• celery_time_limit_sync
• cert-revoke
• cert-rotation-region-by-region
• cert-sync-endpoint-find-by-hash
• cert-year-validity
• certificate_associations-port-column
• certificates-for-notification-fix
• cfii-consistency
• cfssl-key-fix
• cfssl_authsign
• cfssl_error_msg
• change-load-to-resolve
• change-log-0.8.1
• change-resolve-to-load
• changelog-0.9.0
• changelog-1.2.0
• charhate-patch-2
• check-revoke-revised
• check-revoke-robustness
• check-revoked
• check_last_updated_5_min
• checkin-lockfile
• cleanup_chain
• clear_passphrase_memory
• cli-repair-query
• cloudfront
• cloudfront-2
• cloudfront-cert-sync
• cloudfront-cli-source-migrate
• cloudfront-no-items
• cloudfront-source-sync
• cname_01
• cname_metrics
• codeowners
• compare_cert_hashes
• config-disable-notification-plugins
• confimation
• correct-owner-role-update-cert-owner
• correct-reissue-cli-arg
• cors-update
• count_accurate
• crt-sh-link
• csine_add_db_indexes
• csine_ca_defaults
• csine_dependabot_updates
• csine_domains_dedup_01
• csine_generate_hashes
• csine_revoke_rem_ext_id
• custom-email-subjects
• dash_in_aws_name
• date-created
• db_cert_filtering
• db_cert_filtering_2
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/download-artifact-5
• dependabot/github_actions/actions/download-artifact-6
• dependabot/github_actions/actions/download-artifact-7
• dependabot/github_actions/actions/setup-node-5
• dependabot/github_actions/actions/setup-node-6
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/upload-artifact-5
• dependabot/github_actions/actions/upload-artifact-6
• dependabot/github_actions/astral-sh/setup-uv-6
• dependabot/github_actions/dependabot/fetch-metadata-2
• dependabot/github_actions/github/codeql-action-4
• dependabot/pip/acme-2.10.0
• dependabot/pip/acme-3.2.0
• dependabot/pip/bandit-1.8.3
• dependabot/pip/bandit-1.8.5
• dependabot/pip/bandit-1.8.6
• dependabot/pip/black-24.2.0
• dependabot/pip/black-24.3.0
• dependabot/pip/boto3-1.34.74
• dependabot/pip/boto3-1.34.79
• dependabot/pip/boto3-1.34.84
• dependabot/pip/boto3-1.36.21
• dependabot/pip/boto3-1.37.18
• dependabot/pip/boto3-1.37.23
• dependabot/pip/boto3-1.37.28
• dependabot/pip/boto3-1.37.33
• dependabot/pip/boto3-1.37.37
• dependabot/pip/boto3-1.37.9
• dependabot/pip/boto3-1.38.13
• dependabot/pip/boto3-1.38.18
• dependabot/pip/boto3-1.38.23
• dependabot/pip/boto3-1.38.3
• dependabot/pip/boto3-1.38.36
• dependabot/pip/boto3-1.38.8
• dependabot/pip/boto3-1.39.14
• dependabot/pip/boto3-1.39.4
• dependabot/pip/boto3-1.39.9
• dependabot/pip/boto3-1.40.1
• dependabot/pip/boto3-1.40.17
• dependabot/pip/boto3-1.40.18
• dependabot/pip/boto3-1.40.24
• dependabot/pip/boto3-1.40.30
• dependabot/pip/boto3-1.40.6
• dependabot/pip/botocore-1.34.64
• dependabot/pip/botocore-1.34.74
• dependabot/pip/botocore-1.34.79
• dependabot/pip/botocore-1.36.21
• dependabot/pip/botocore-1.36.26
• dependabot/pip/botocore-1.37.18
• dependabot/pip/botocore-1.37.23
• dependabot/pip/botocore-1.38.13
• dependabot/pip/botocore-1.38.32
• dependabot/pip/botocore-1.38.36
• dependabot/pip/botocore-1.38.41
• dependabot/pip/botocore-1.38.46
• dependabot/pip/botocore-1.40.16
• dependabot/pip/botocore-1.40.17
• dependabot/pip/botocore-1.40.18
• dependabot/pip/botocore-1.40.24
• dependabot/pip/botocore-1.40.25
• dependabot/pip/botocore-1.40.30
• dependabot/pip/certbot-3.2.0
• dependabot/pip/certbot-3.3.0
• dependabot/pip/certifi-2025.1.31
• dependabot/pip/certifi-2025.4.26
• dependabot/pip/certifi-2025.6.15
• dependabot/pip/certifi-2025.7.14
• dependabot/pip/certifi-2025.8.3
• dependabot/pip/coverage-7.10.2
• dependabot/pip/coverage-7.10.3
• dependabot/pip/coverage-7.10.5
• dependabot/pip/coverage-7.10.6
• dependabot/pip/coverage-7.4.4
• dependabot/pip/coverage-7.6.12
• dependabot/pip/coverage-7.7.1
• dependabot/pip/coverage-7.8.0
• dependabot/pip/coverage-7.8.2
• dependabot/pip/coverage-7.9.1
• dependabot/pip/coverage-7.9.2
• dependabot/pip/cryptography-44.0.1
• dependabot/pip/cryptography-44.0.2
• dependabot/pip/cryptography-44.0.3
• dependabot/pip/cryptography-45.0.5
• dependabot/pip/cryptography-45.0.6
• dependabot/pip/cryptography-45.0.7
• dependabot/pip/docutils-0.20.1
• dependabot/pip/faker-24.7.1
• dependabot/pip/faker-24.9.0
• dependabot/pip/faker-36.1.1
• dependabot/pip/faker-37.0.0
• dependabot/pip/faker-37.4.0
• dependabot/pip/faker-37.4.2
• dependabot/pip/faker-37.5.3
• dependabot/pip/faker-37.6.0
• dependabot/pip/fakeredis-2.27.0
• dependabot/pip/fakeredis-2.28.1
• dependabot/pip/fakeredis-2.29.0
• dependabot/pip/fakeredis-2.30.1
• dependabot/pip/fakeredis-2.31.0
• dependabot/pip/fakeredis-2.31.1
• dependabot/pip/flake8-7.1.2
• dependabot/pip/flask-cors-5.0.1
• dependabot/pip/flask-cors-6.0.0
• dependabot/pip/flask-cors-6.0.1
• dependabot/pip/flask-limiter-3.11.0
• dependabot/pip/flask-limiter-3.5.1
• dependabot/pip/freezegun-1.5.2
• dependabot/pip/freezegun-1.5.3
• dependabot/pip/freezegun-1.5.4
• dependabot/pip/future-1.0.0
• dependabot/pip/google-cloud-private-ca-1.14.1
• dependabot/pip/google-cloud-private-ca-1.14.2
• dependabot/pip/google-cloud-private-ca-1.15.0
• dependabot/pip/gunicorn-22.0.0
• dependabot/pip/idna-3.7
• dependabot/pip/mypy-1.16.1
• dependabot/pip/mypy-1.17.0
• dependabot/pip/mypy-1.17.1
• dependabot/pip/mypy-1.18.1
• dependabot/pip/openapi-spec-validator-0.7.2
• dependabot/pip/paramiko-3.5.1
• dependabot/pip/paramiko-4.0.0
• dependabot/pip/pre-commit-3.6.2
• dependabot/pip/pre-commit-4.2.0
• dependabot/pip/pre-commit-4.3.0
• dependabot/pip/protobuf-4.25.7
• dependabot/pip/protobuf-4.25.8
• dependabot/pip/pyopenssl-24.1.0
• dependabot/pip/pyopenssl-25.1.0
• dependabot/pip/pyopenssl-25.2.0
• dependabot/pip/pytest-8.3.5
• dependabot/pip/pytest-8.4.0
• dependabot/pip/pytest-8.4.1
• dependabot/pip/pytest-8.4.2
• dependabot/pip/pytest-mock-3.14.1
• dependabot/pip/pytest-mock-3.15.0
• dependabot/pip/redis-5.3.0
• dependabot/pip/redis-5.3.1
• dependabot/pip/requests-2.32.4
• dependabot/pip/requests-2.32.5
• dependabot/pip/requests-mock-1.12.1
• dependabot/pip/retrying-1.4.0
• dependabot/pip/retrying-1.4.1
• dependabot/pip/retrying-1.4.2
• dependabot/pip/sentry-sdk-1.43.0
• dependabot/pip/sentry-sdk-1.45.0
• dependabot/pip/sentry-sdk-2.22.0
• dependabot/pip/sentry-sdk-2.24.1
• dependabot/pip/sentry-sdk-2.25.1
• dependabot/pip/sentry-sdk-2.26.0
• dependabot/pip/sentry-sdk-2.26.1
• dependabot/pip/sentry-sdk-2.27.0
• dependabot/pip/sentry-sdk-2.28.0
• dependabot/pip/sentry-sdk-2.29.1
• dependabot/pip/sentry-sdk-2.30.0
• dependabot/pip/sentry-sdk-2.33.1
• dependabot/pip/sentry-sdk-2.35.0
• dependabot/pip/sentry-sdk-2.35.1
• dependabot/pip/sentry-sdk-2.37.0
• dependabot/pip/twine-5.0.0
• dependabot/pip/twine-6.2.0
• dependabot/pip/types-deprecated-1.2.15.20250304
• dependabot/pip/types-paramiko-3.4.0.20240311
• dependabot/pip/types-paramiko-3.5.0.20250516
• dependabot/pip/types-paramiko-3.5.0.20250708
• dependabot/pip/types-paramiko-3.5.0.20250801
• dependabot/pip/types-paramiko-4.0.0.20250809
• dependabot/pip/types-paramiko-4.0.0.20250822
• dependabot/pip/types-protobuf-5.29.1.20250403
• dependabot/pip/types-protobuf-6.30.2.20250503
• dependabot/pip/types-protobuf-6.30.2.20250506
• dependabot/pip/types-protobuf-6.30.2.20250516
• dependabot/pip/types-protobuf-6.30.2.20250703
• dependabot/pip/types-protobuf-6.30.2.20250822
• dependabot/pip/types-protobuf-6.30.2.20250914
• dependabot/pip/types-pyopenssl-24.0.0.20240311
• dependabot/pip/types-pyrfc3339-2.0.1.20250825
• dependabot/pip/types-pytz-2025.1.0.20250204
• dependabot/pip/types-pytz-2025.1.0.20250318
• dependabot/pip/types-pytz-2025.2.0.20250326
• dependabot/pip/types-pytz-2025.2.0.20250809
• dependabot/pip/types-setuptools-75.8.2.20250301
• dependabot/pip/types-setuptools-75.8.2.20250305
• dependabot/pip/types-setuptools-76.0.0.20250313
• dependabot/pip/types-setuptools-78.1.0.20250329
• dependabot/pip/types-setuptools-79.0.0.20250422
• dependabot/pip/types-setuptools-80.3.0.20250505
• dependabot/pip/types-setuptools-80.4.0.20250511
• dependabot/pip/types-setuptools-80.9.0.20250801
• dependabot/pip/types-setuptools-80.9.0.20250809
• dependabot/pip/types-setuptools-80.9.0.20250822
• dependabot/pip/types-six-1.17.0.20250304
• dependabot/pip/types-six-1.17.0.20250403
• dependabot/pip/types-six-1.17.0.20250515
• dependabot/pip/validators-0.28.0
• dependabot/pip/validators-0.35.0
• dependabot/pip/werkzeug-3.0.2
• dependabot/pip/xmltodict-1.0.0
• dependabot/uv/docutils-0.22
• dependabot/uv/sqlalchemy-2.0.43
• disable-autorotate-fixups
• enable-coveralls
• fix-gulp-issue
• fix-outdated-pkg-resources-usage
• introduce-pyproject.toml
• jmcrawford45-patch-11
• jmcrawford45-patch-12
• jmcrawford45-patch-13
• jmcrawford45-patch-14
• jmcrawford45-patch-15
• jmcrawford45-patch-16
• jmcrawford45-patch-3
• jmcrawford45-patch-4
• jmcrawford45-patch-5
• jmcrawford45-patch-6
• jmcrawford45-patch-7
• jmcrawford45-patch-8
• jschladen/automatically_enable_autorotate_with_endpoint-handle-exception
• jschladen/fix-tag-check
• jschladen/log-attach-warning
• jtschladen-patch-1
• main
• master
• metric-api-key
• more-validation-hooks
• mz/auth-fix
• postgres-17
• remove-logmatic
• revert-uv-changes
• rm-decorator
• trim-support
• update-deps-and-fix-cloudflare
• update-description-endpoint
• utc
• uv
• v1.6.0
• v1.7.0

Build # 5535919829

Build Type

Pull #4508

github

Committed by web-flow

Commit Message

Merge 59cdf9741 into 36e9737e3

Pull Request Pull Request #4508: Update CodeQL workflow to latest template

Run Details

15345 of 20357 relevant lines covered (75.38%)

4.47 hits per line