Update github/codeql-action digest to 33d7b85 (renovate[bot])
https://github.com/mastodon/mastodon/pull/41577
https://github.com/mastodon/mastodon/pull/41577
Update github/codeql-action digest to 33d7b85 by renovate[bot] · Pull Request #41577 · mastodon/mastodon
This PR contains the following updates: Package Type Update Change github/codeql-action (changelog) action digest 9b32540 → 33d7b85 Configuration 📅 Schedule: (UTC) Branch creation At a...
github.com
November 9, 2026 at 8:29 AM
Update github/codeql-action digest to 33d7b85 (renovate[bot])
https://github.com/mastodon/mastodon/pull/41577
https://github.com/mastodon/mastodon/pull/41577
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.4 with query accuracy improvements across several… The post CodeQL 2.27.4 improves accuracy and query metadata appeared first on The GitHub Blog.
github.blog
November 4, 2026 at 8:40 PM
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves accuracy and query metadata
https://github.blog/changelog/2026-11-04-codeql-2-27-4-improves-accuracy-and-query-metadata
https://github.blog/changelog/2026-11-04-codeql-2-27-4-improves-accuracy-and-query-metadata
November 4, 2026 at 10:50 PM
CodeQL 2.27.4 improves accuracy and query metadata
https://github.blog/changelog/2026-11-04-codeql-2-27-4-improves-accuracy-and-query-metadata
https://github.blog/changelog/2026-11-04-codeql-2-27-4-improves-accuracy-and-query-metadata
CodeQL 2.27.4 landed with better accuracy and query metadata improvements. Anything that makes static analysis more reliable is a win for catching security issues before they ship. Developers rejoice! 🛠️ #CodeQL #DevSecOps
November 4, 2026 at 11:14 PM
CodeQL 2.27.4 landed with better accuracy and query metadata improvements. Anything that makes static analysis more reliable is a win for catching security issues before they ship. Developers rejoice! 🛠️ #CodeQL #DevSecOps
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3. It supports new Python 3.15 language… The post CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions appeared first on The GitHub Blog.
github.blog
November 3, 2026 at 3:53 PM
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
That reminds me I need to get contacts from you about some very glaringly obvious codeql security false positives. 😂
November 2, 2026 at 4:12 AM
That reminds me I need to get contacts from you about some very glaringly obvious codeql security false positives. 😂
CodeQL 2.27.4 improves query accuracy across several languages, adds stronger pack bundling/publishing security checks, and corrects query metadata; it will also be included in the GHES 3.24 release.
https://agxsearch.ai/t/nnjstr?utm_source=bluesky&utm_medium=social
https://agxsearch.ai/t/nnjstr?utm_source=bluesky&utm_medium=social
November 5, 2026 at 3:57 AM
CodeQL 2.27.4 improves query accuracy across several languages, adds stronger pack bundling/publishing security checks, and corrects query metadata; it will also be included in the GHES 3.24 release.
https://agxsearch.ai/t/nnjstr?utm_source=bluesky&utm_medium=social
https://agxsearch.ai/t/nnjstr?utm_source=bluesky&utm_medium=social
AI開発・セキュリティ日報｜2026年11月5日号
PyPI dbt-adapterの悪性版、GitHub Secret scanningの検出変更、CodeQL 2.27.4の運用上の影響を整理。
https://naojun.jp/ai-dev/daily/2026-11-05/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-05
PyPI dbt-adapterの悪性版、GitHub Secret scanningの検出変更、CodeQL 2.27.4の運用上の影響を整理。
https://naojun.jp/ai-dev/daily/2026-11-05/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-05
AI開発・セキュリティ日報｜2026年11月5日号
AI開発・セキュリティ日報｜2026年11月5日号
PyPI dbt-adapterの悪性版、GitHub Secret scanningの検出変更、CodeQL 2.27.4の運用上の影響を整理。
naojun.jp
November 8, 2026 at 12:46 AM
AI開発・セキュリティ日報｜2026年11月5日号
PyPI dbt-adapterの悪性版、GitHub Secret scanningの検出変更、CodeQL 2.27.4の運用上の影響を整理。
https://naojun.jp/ai-dev/daily/2026-11-05/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-05
PyPI dbt-adapterの悪性版、GitHub Secret scanningの検出変更、CodeQL 2.27.4の運用上の影響を整理。
https://naojun.jp/ai-dev/daily/2026-11-05/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-05
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
https://github.blog/changelog/2026-11-03-codeql-2-27-3-adds-python-3-15-features-and-json-data-extensions
https://github.blog/changelog/2026-11-03-codeql-2-27-3-adds-python-3-15-features-and-json-data-extensions
November 3, 2026 at 5:22 PM
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
https://github.blog/changelog/2026-11-03-codeql-2-27-3-adds-python-3-15-features-and-json-data-extensions
https://github.blog/changelog/2026-11-03-codeql-2-27-3-adds-python-3-15-features-and-json-data-extensions
GitHub: CodeQL 2.27.3 adds Python 3.15 features, JSON data extensions, and opt-in AI threat model
November 3, 2026 at 3:30 PM
GitHub: CodeQL 2.27.3 adds Python 3.15 features, JSON data extensions, and opt-in AI threat model
CodeQL 2274 Strengthens Code Scanning Accuracy, Reduces False Positives, and Improves Security + Video
Introduction: More Accurate Security Analysis Across Multiple Programming Languages GitHub has released CodeQL 2.27.4, introducing improvements to its static application security testing (SAST)…
Introduction: More Accurate Security Analysis Across Multiple Programming Languages GitHub has released CodeQL 2.27.4, introducing improvements to its static application security testing (SAST)…
CodeQL 2274 Strengthens Code Scanning Accuracy, Reduces False Positives, and Improves Security + Video
Introduction: More Accurate Security Analysis Across Multiple Programming Languages GitHub has released CodeQL 2.27.4, introducing improvements to its static application security testing (SAST) engine. The update focuses on reducing false positives, improving vulnerability detection accuracy, strengthening package security checks, and correcting Common Weakness Enumeration (CWE) metadata. The release covers Java, Kotlin, Rust, C/C++, JavaScript, TypeScript, Python, Ruby, Swift, and C. It also introduces improvements to the CodeQL CLI, particularly when handling machine-readable output and packaging security.
undercodenews.com
November 4, 2026 at 9:59 PM
CodeQL 2274 Strengthens Code Scanning Accuracy, Reduces False Positives, and Improves Security + Video
Introduction: More Accurate Security Analysis Across Multiple Programming Languages GitHub has released CodeQL 2.27.4, introducing improvements to its static application security testing (SAST)…
Introduction: More Accurate Security Analysis Across Multiple Programming Languages GitHub has released CodeQL 2.27.4, introducing improvements to its static application security testing (SAST)…
CodeQL 2.27.4 (Nov 4) cuts false positives in Rust log-injection and cleartext-logging checks. If a security scan suddenly looks quieter after an upgrade, inspect the changed queries before treating the drop as proof your code got safer.
November 6, 2026 at 5:15 AM
CodeQL 2.27.4 (Nov 4) cuts false positives in Rust log-injection and cleartext-logging checks. If a security scan suddenly looks quieter after an upgrade, inspect the changed queries before treating the drop as proof your code got safer.
Remove autobuild step from codeql workflow (mjankowski)
https://github.com/mastodon/mastodon/pull/41499
https://github.com/mastodon/mastodon/pull/41499
Remove autobuild step from codeql workflow by mjankowski · Pull Request #41499 · mastodon/mastodon
We dont have any compiled languages. If you look at the actions output from this step, they all just spend a couple seconds here and warn that there's nothing to do and move on.
github.com
November 4, 2026 at 9:18 AM
Remove autobuild step from codeql workflow (mjankowski)
https://github.com/mastodon/mastodon/pull/41499
https://github.com/mastodon/mastodon/pull/41499
CodeQL vs IA : GitHub intègre des agents IA pour les scans de vulnérabilités. Découvrez comment l'IA boostera votre sécurité et gérera les failles inédites. 🚀 #DevSecOps [lire]
November 5, 2026 at 4:36 AM
CodeQL vs IA : GitHub intègre des agents IA pour les scans de vulnérabilités. Découvrez comment l'IA boostera votre sécurité et gérera les failles inédites. 🚀 #DevSecOps [lire]
AI開発・セキュリティ日報｜2026年11月4日号
悪性PyPI pyprig、Metalama Visual Studio、CodeQL 2.27.3、Dependabot Python 3.15の影響条件と対処を整理。
https://naojun.jp/ai-dev/daily/2026-11-04/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-04
悪性PyPI pyprig、Metalama Visual Studio、CodeQL 2.27.3、Dependabot Python 3.15の影響条件と対処を整理。
https://naojun.jp/ai-dev/daily/2026-11-04/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-04
AI開発・セキュリティ日報｜2026年11月4日号
AI開発・セキュリティ日報｜2026年11月4日号
悪性PyPI pyprig、Metalama Visual Studio、CodeQL 2.27.3、Dependabot Python 3.15の影響条件と対処を整理。
naojun.jp
November 4, 2026 at 11:46 PM
AI開発・セキュリティ日報｜2026年11月4日号
悪性PyPI pyprig、Metalama Visual Studio、CodeQL 2.27.3、Dependabot Python 3.15の影響条件と対処を整理。
https://naojun.jp/ai-dev/daily/2026-11-04/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-04
悪性PyPI pyprig、Metalama Visual Studio、CodeQL 2.27.3、Dependabot Python 3.15の影響条件と対処を整理。
https://naojun.jp/ai-dev/daily/2026-11-04/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=ai-dev-daily-2026-11-04
Today in tech, 5 Nov:
• OpenAI to acquire Pierre Computer Company to expand Codex coding tools
+9 more in today's Daily Tech Digest.
#AI #Cloud #DevOps #TechiesJournal #PrasadKukkala
https://www.techiesjournal.com/daily-tech-digest/2026/11/05/?utm_source=bluesky&utm_medium=social
• OpenAI to acquire Pierre Computer Company to expand Codex coding tools
+9 more in today's Daily Tech Digest.
#AI #Cloud #DevOps #TechiesJournal #PrasadKukkala
https://www.techiesjournal.com/daily-tech-digest/2026/11/05/?utm_source=bluesky&utm_medium=social
Daily Tech Digest — 5 November 2026
This edition: OpenAI moves to acquire Pierre Computer Company for Codex and reports an autonomous pipeline that patched 948 Linux kernel privilege-escalation flaws, Google expands its Agentic Data Cloud and unveils the autonomous CodeMender security agent, Mercari swaps VDI for Chrome Enterprise Premium, Compute Engine adds date-based API versioning, OpenShell brings a Kubernetes-native sandbox for AI agents, CodeQL 2.27.4 ships accuracy fixes, and Apple's CVE-2024-27834 lands on CISA's KEV list.
www.techiesjournal.com
November 6, 2026 at 3:00 AM
Today in tech, 5 Nov:
• OpenAI to acquire Pierre Computer Company to expand Codex coding tools
+9 more in today's Daily Tech Digest.
#AI #Cloud #DevOps #TechiesJournal #PrasadKukkala
https://www.techiesjournal.com/daily-tech-digest/2026/11/05/?utm_source=bluesky&utm_medium=social
• OpenAI to acquire Pierre Computer Company to expand Codex coding tools
+9 more in today's Daily Tech Digest.
#AI #Cloud #DevOps #TechiesJournal #PrasadKukkala
https://www.techiesjournal.com/daily-tech-digest/2026/11/05/?utm_source=bluesky&utm_medium=social
The source, dated, on The Deploy Log:
https://deployedbyai.com/log/4fe3f99cd033/codeql-2-27-3/?k=br
Follow for one line every time AI actually ships, as it ships, 24/7.
https://deployedbyai.com/log/4fe3f99cd033/codeql-2-27-3/?k=br
Follow for one line every time AI actually ships, as it ships, 24/7.
November 3, 2026 at 3:30 PM
The source, dated, on The Deploy Log:
https://deployedbyai.com/log/4fe3f99cd033/codeql-2-27-3/?k=br
Follow for one line every time AI actually ships, as it ships, 24/7.
https://deployedbyai.com/log/4fe3f99cd033/codeql-2-27-3/?k=br
Follow for one line every time AI actually ships, as it ships, 24/7.
An LLM agent built working FreeBSD kernel jail-escape exploits in one weekend. https://intel.threadlinqs.com/threat/TL-2026-5118?utm_source=bluesky #ThreatIntel #CVE_2026_3038 #Claude #CodeQL
November 3, 2026 at 3:53 AM
An LLM agent built working FreeBSD kernel jail-escape exploits in one weekend. https://intel.threadlinqs.com/threat/TL-2026-5118?utm_source=bluesky #ThreatIntel #CVE_2026_3038 #Claude #CodeQL
B608 is Bandit's hardcoded-SQL check, worth running in CI since Pylint isn't a security linter. Add Semgrep or CodeQL for taint tracking, and a review rule: any query built with f-strings or % gets bounced, whoever or whatever wrote it.
November 3, 2026 at 6:20 PM
B608 is Bandit's hardcoded-SQL check, worth running in CI since Pylint isn't a security linter. Add Semgrep or CodeQL for taint tracking, and a review rule: any query built with f-strings or % gets bounced, whoever or whatever wrote it.
Scorecard --format=sarif plus the code scanning upload API puts supply-chain findings in your Security tab next to CodeQL alerts. Each failed check maps to a SARIF rule like SC-BRANCH-PROTECTION. https://www.valtersit.com/vault/generate-sarif-output-and-upload-to-github-code-scanning-829c4a/
Generate SARIF Output and Upload to GitHub Code Scanning
www.valtersit.com
November 4, 2026 at 8:40 PM
Scorecard --format=sarif plus the code scanning upload API puts supply-chain findings in your Security tab next to CodeQL alerts. Each failed check maps to a SARIF rule like SC-BRANCH-PROTECTION. https://www.valtersit.com/vault/generate-sarif-output-and-upload-to-github-code-scanning-829c4a/
October 29, 2026 at 3:05 PM
October 28, 2026 at 3:05 PM
📢 New #updates · 30 Oct #3
· Wekan v12.73 — CodeQL alert fixed in Sandstorm host test
· windmill v1.854.0 — Added share dialogs and improved deployment settings
· Wekan v12.73 — CodeQL alert fixed in Sandstorm host test
· windmill v1.854.0 — Added share dialogs and improved deployment settings
October 30, 2026 at 2:29 AM
📢 New #updates · 30 Oct #3
· Wekan v12.73 — CodeQL alert fixed in Sandstorm host test
· windmill v1.854.0 — Added share dialogs and improved deployment settings
· Wekan v12.73 — CodeQL alert fixed in Sandstorm host test
· windmill v1.854.0 — Added share dialogs and improved deployment settings