Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
trailofbits
fickling
Repository navigation
Code
Issues
8
(8)
Pull requests
12
(12)
Actions
Security and quality
18
(18)
Insights
More
items
Actions: trailofbits/fickling
Actions
All workflows
Workflows
CodeQL
CodeQL
Dependabot Updates
Dependabot Updates
Dependency Graph
Dependency Graph
Lint
Lint
Publish to PyPI
Publish to PyPI
Scan dependencies for vulnerabilities with pip-audit
Scan dependencies for vulnerabilities with pip-audit
tests
tests
Show more workflows...
Management
Caches
Deployments
tests
tests
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
tests.yml
will be ignored since log searching is not yet available
454 workflow runs
454 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
Bump astral-sh/setup-uv (#318)
tests
#844:
Commit
5854e56
pushed by
thomas-chauchefoin-tob
1m 44s
master
master
1m 44s
View workflow file
Bump astral-sh/setup-uv from 9.0.0 to 10.2.0 in the all group across 1 directory
tests
#843:
Pull request
#318
synchronize by
dependabot
Bot
1m 29s
dependabot/github_actions/all-fa3bf1173d
dependabot/github_actions/all-fa3bf1173d
1m 29s
View #318
View workflow file
Bump the all group across 1 directory with 5 updates
tests
#842:
Pull request
#326
synchronize by
dependabot
Bot
11m 42s
dependabot/uv/all-ec6c7b2467
dependabot/uv/all-ec6c7b2467
11m 42s
View #326
View workflow file
Bump anyio from 4.12.1 to 4.14.2 (#327)
tests
#841:
Commit
3764861
pushed by
thomas-chauchefoin-tob
4m 0s
master
master
4m 0s
View workflow file
Make stdlib-membership checks independent of the scanner's Python version
tests
#840:
Pull request
#328
opened by
Varshith-Kali
Action required
Varshith-Kali:fix/stdlib-check-version-independence
Varshith-Kali:fix/stdlib-check-version-independence
Action required
View #328
View workflow file
Bump anyio from 4.12.1 to 4.14.2
tests
#839:
Pull request
#327
opened by
dependabot
Bot
1m 31s
dependabot/uv/anyio-4.14.2
dependabot/uv/anyio-4.14.2
1m 31s
View #327
View workflow file
Bump the all group across 1 directory with 5 updates
tests
#838:
Pull request
#326
opened by
dependabot
Bot
11m 2s
dependabot/uv/all-ec6c7b2467
dependabot/uv/all-ec6c7b2467
11m 2s
View #326
View workflow file
fix(polyglot): bound recursive archive extraction and unify error handling
tests
#837:
Pull request
#325
opened by
feiiiiii5
30d 0h 3m 29s
feiiiiii5:fix/polyglot-extraction-limits
feiiiiii5:fix/polyglot-extraction-limits
30d 0h 3m 29s
View #325
View workflow file
Implement the four missing pickle opcodes (FLOAT, BYTEARRAY8, NEXT_BUFFER, READONLY_BUFFER)
tests
#836:
Pull request
#324
opened by
feiiiiii5
30d 0h 0m 54s
feiiiiii5:fix/implement-missing-opcodes
feiiiiii5:fix/implement-missing-opcodes
30d 0h 0m 54s
View #324
View workflow file
Updated whitelist and Python Environment checking
tests
#835:
Pull request
#323
opened by
ShadowPickle-Bench
30d 0h 5m 18s
ShadowPickle-Bench:weights_only_whitelist_patch
ShadowPickle-Bench:weights_only_whitelist_patch
30d 0h 5m 18s
View #323
View workflow file
fix: recognize stdlib modules across all supported Python versions (closes #311)
tests
#834:
Pull request
#313
reopened by
feiiiiii5
17d 18h 31m 11s
feiiiiii5:fix-stdlib-version-check
feiiiiii5:fix-stdlib-version-check
17d 18h 31m 11s
View #313
View workflow file
Fix AttributeError when encoding an INST opcode
tests
#833:
Pull request
#321
opened by
coldwaterq
30d 0h 5m 1s
coldwaterq:fix-inst-encode-classname
coldwaterq:fix-inst-encode-classname
30d 0h 5m 1s
View #321
View workflow file
fix: recognize stdlib modules across all supported Python versions (closes #311)
tests
#832:
Pull request
#313
synchronize by
feiiiiii5
5d 9h 54m 11s
feiiiiii5:fix-stdlib-version-check
feiiiiii5:fix-stdlib-version-check
5d 9h 54m 11s
View #313
View workflow file
Add BYTEARRAY8 opcode
tests
#831:
Pull request
#320
opened by
rtpt-romankarwacik
30d 0h 3m 19s
rtpt-romankarwacik:bytearray8
rtpt-romankarwacik:bytearray8
30d 0h 3m 19s
View #320
View workflow file
Bump the all group with 3 updates
tests
#830:
Pull request
#319
opened by
dependabot
Bot
1m 39s
dependabot/uv/all-d56fac3e82
dependabot/uv/all-d56fac3e82
1m 39s
View #319
View workflow file
Bump astral-sh/setup-uv from 9.0.0 to 10.2.0 in the all group across 1 directory
tests
#829:
Pull request
#318
opened by
dependabot
Bot
1m 34s
dependabot/github_actions/all-fa3bf1173d
dependabot/github_actions/all-fa3bf1173d
1m 34s
View #318
View workflow file
Add a vibe-drafted fuzzing harness for the scanner
tests
#828:
Pull request
#306
synchronize by
thomas-chauchefoin-tob
1m 24s
fuzz-harness
fuzz-harness
1m 24s
View #306
View workflow file
Bump the all group with 3 updates (#316)
tests
#827:
Commit
854c99a
pushed by
thomas-chauchefoin-tob
1m 40s
master
master
1m 40s
View workflow file
Bump the all group with 3 updates
tests
#826:
Pull request
#316
synchronize by
thomas-chauchefoin-tob
1m 36s
dependabot/uv/all-91c0889251
dependabot/uv/all-91c0889251
1m 36s
View #316
View workflow file
Bump ruff to v0.16.0 and clear the lint ignore backlog (#304)
tests
#825:
Commit
3373c67
pushed by
thomas-chauchefoin-tob
1m 32s
master
master
1m 32s
View workflow file
Bump ruff to v0.16.0 and clear the lint ignore backlog
tests
#824:
Pull request
#304
synchronize by
thomas-chauchefoin-tob
1m 28s
prepare-ruff-0-16-0-bump
prepare-ruff-0-16-0-bump
1m 28s
View #304
View workflow file
Bump ruff to v0.16.0 and clear the lint ignore backlog
tests
#823:
Pull request
#304
synchronize by
thomas-chauchefoin-tob
1m 11s
prepare-ruff-0-16-0-bump
prepare-ruff-0-16-0-bump
1m 11s
View #304
View workflow file
Bump the all group with 3 updates
tests
#822:
Pull request
#316
synchronize by
thomas-chauchefoin-tob
1m 36s
dependabot/uv/all-91c0889251
dependabot/uv/all-91c0889251
1m 36s
View #316
View workflow file
Bump the all group across 1 directory with 4 updates (#314)
tests
#821:
Commit
623dd6f
pushed by
thomas-chauchefoin-tob
1m 35s
master
master
1m 35s
View workflow file
Bump the all group with 3 updates
tests
#820:
Pull request
#316
synchronize by
thomas-chauchefoin-tob
1m 24s
dependabot/uv/all-91c0889251
dependabot/uv/all-91c0889251
1m 24s
View #316
View workflow file
Previous
1
2
3
4
5
…
18
19
Next
You can’t perform that action at this time.