Skip to content

Actions: github/github-mcp-server

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
code-scanning.yml
2,500+ workflow runs
2,500+ workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Always enable MCP Apps UI; remove remote_mcp_ui_apps flag gate CodeQL #10664: Pull request #3348 synchronize by SamMorrowDrums
2m 23s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
2m 23s
Omit app-only tools for clients without MCP Apps support CodeQL #10663: Commit d8d2c71 pushed by SamMorrowDrums
2m 25s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
2m 25s
Always enable MCP Apps UI; remove remote_mcp_ui_apps flag gate CodeQL #10662: Pull request #3348 synchronize by SamMorrowDrums
2m 4s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
2m 4s
Remove unused Inventory.checkFeatureFlag CodeQL #10661: Commit 55a343f pushed by SamMorrowDrums
2m 4s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
2m 4s
Always enable MCP Apps UI; remove remote_mcp_ui_apps flag gate CodeQL #10660: Pull request #3348 opened by SamMorrowDrums
1m 47s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
1m 47s
Always enable MCP Apps UI; remove remote_mcp_ui_apps flag gate CodeQL #10659: Commit 19e2515 pushed by SamMorrowDrums
1m 58s sammorrowdrums-remove-ui-apps-flag-gate
sammorrowdrums-remove-ui-apps-flag-gate
1m 58s
build(deps): bump github/codeql-action from 4.37.9 to 4.38.2 CodeQL #10658: Pull request #3343 opened by dependabot Bot
2m 16s dependabot/github_actions/github/codeql-action-4.38.2
dependabot/github_actions/github/codeql-action-4.38.2
2m 16s
build(deps): bump github/codeql-action from 4.37.9 to 4.38.2 CodeQL #10657: Commit e74f9ab pushed by dependabot Bot
2m 18s dependabot/github_actions/github/codeql-action-4.38.2
dependabot/github_actions/github/codeql-action-4.38.2
2m 18s
build(deps): bump golang from cf6fca6 to 8a5910f CodeQL #10656: Pull request #3342 opened by dependabot Bot
2m 5s dependabot/docker/golang-8a5910f
dependabot/docker/golang-8a5910f
2m 5s
build(deps): bump golang from cf6fca6 to 8a5910f CodeQL #10655: Commit a57a5a9 pushed by dependabot Bot
2m 40s dependabot/docker/golang-8a5910f
dependabot/docker/golang-8a5910f
2m 40s
Preserve versioned STDIO API user agents across MCP protocols CodeQL #10654: Pull request #3323 synchronize by jidicula
1m 29s jidicula/graphql-user-agent-mcp-stdio
jidicula/graphql-user-agent-mcp-stdio
1m 29s
Escape MCP client metadata and preserve revision provenance CodeQL #10653: Commit 1e16b58 pushed by jidicula
1m 57s jidicula/graphql-user-agent-mcp-stdio
jidicula/graphql-user-agent-mcp-stdio
1m 57s
Expose review decision and CI rollup in PR lists CodeQL #10652: Pull request #3335 synchronize by dawNotPoi
Action required dawNotPoi:fix/pr-list-review-ci-3287
dawNotPoi:fix/pr-list-review-ci-3287
Action required
https://github.com/microsoft/vscode-azurevirtualmachines/blob/main/src%2Fcommands%2FcreateVirtualMachine%2FVirtualMachineNameStep.ts CodeQL #10651: Pull request #3339 synchronize by AVODAH-ADMINISTRATOR
Action required AVODAH-ADMINISTRATOR:main
AVODAH-ADMINISTRATOR:main
Action required
https://github.com/microsoft/vscode-azurevirtualmachines/blob/main/src%2Fcommands%2FcreateVirtualMachine%2FVirtualMachineNameStep.ts CodeQL #10650: Pull request #3339 opened by AVODAH-ADMINISTRATOR
Action required AVODAH-ADMINISTRATOR:main
AVODAH-ADMINISTRATOR:main
Action required
Pin GitHub Actions to commit SHAs CodeQL #10649: Pull request #3259 synchronize by mrecachinas
1m 38s pinner/actions-sha-pins-2026-09-10
pinner/actions-sha-pins-2026-09-10
1m 38s
Merge branch 'main' into pinner/actions-sha-pins-2026-09-10 CodeQL #10648: Commit af8c3ec pushed by mrecachinas
2m 34s pinner/actions-sha-pins-2026-09-10
pinner/actions-sha-pins-2026-09-10
2m 34s
Reject unsupported pagination params in pull_request_read CodeQL #10647: Pull request #3336 opened by muhammadumer-waheed
Action required muhammadumer-waheed:fix/pr-read-pagination-param-validation
muhammadumer-waheed:fix/pr-read-pagination-param-validation
Action required
Preserve versioned STDIO API user agents across MCP protocols CodeQL #10646: Pull request #3323 synchronize by jidicula
1m 49s jidicula/graphql-user-agent-mcp-stdio
jidicula/graphql-user-agent-mcp-stdio
1m 49s
Escape MCP client metadata and preserve revision provenance CodeQL #10645: Commit 56d11f5 pushed by jidicula
1m 51s jidicula/graphql-user-agent-mcp-stdio
jidicula/graphql-user-agent-mcp-stdio
1m 51s
Expose review decision and CI rollup in PR lists CodeQL #10644: Pull request #3335 opened by dawNotPoi
Action required dawNotPoi:fix/pr-list-review-ci-3287
dawNotPoi:fix/pr-list-review-ci-3287
Action required
Carry merge_commit_sha through to MinimalPullRequest CodeQL #10643: Pull request #3333 opened by sean-park-funda
23h 59m 19s sean-park-funda:fix/pull-request-read-merge-commit-sha
sean-park-funda:fix/pull-request-read-merge-commit-sha
23h 59m 19s
Reject pull_request_read pagination the method cannot honour CodeQL #10642: Pull request #3332 opened by sean-park-funda
1d 5h 57m 19s sean-park-funda:fix/pull-request-read-pagination-guard
sean-park-funda:fix/pull-request-read-pagination-guard
1d 5h 57m 19s
test(tooldiscovery): add search ranking benchmark CodeQL #10641: Pull request #3331 opened by aniruddhaadak80
Action required aniruddhaadak80:test/tool-search-benchmark
aniruddhaadak80:test/tool-search-benchmark
Action required
fix(http): bind to loopback by default CodeQL #10640: Pull request #3330 opened by aniruddhaadak80
Action required aniruddhaadak80:fix/http-loopback-default
aniruddhaadak80:fix/http-loopback-default
Action required