Zohaib Hassnain c2d550efde fix(ci): ignore upstream accelerate vulnerability in security scan ...

Add GHSA-4j2p-28q2-5m79 to IGNORED_VULN_IDS in security-scan.yml.

accelerate<=1.14.0 has an open path traversal advisory (GHSA-4j2p-28q2-5m79) in load_checkpoint_in_model. 1.14.0 is currently the latest available release on PyPI, so no upstream patch exists yet. Semantica does not expose or call sharded checkpoint loading, making this non-actionable. Re-evaluate once an updated accelerate release is published.

2026-09-09 05:47:11 +05:00

..

benchmark.yml

fix(ci): drop unpinnable benchmarks/requirements.txt install (#1345)

2026-08-31 18:57:28 +05:30

ci.yml

fix(deps): address review feedback on slim core dependencies (#1513)

2026-09-07 20:32:00 +05:00

codeql.yml

fix(security): resolve Scorecard vulnerability and token-permission alerts (#1280)

2026-08-30 20:58:39 +05:30

container-scan.yml

fix(docker): revert runtime base image to python:3.13-slim (#1509)

2026-09-07 15:29:41 +05:30

defender-for-devops.yml

fix(ci): stop checkov's suppressed checks from reopening as new alerts (#1346)

2026-08-31 19:29:24 +05:30

docs.yml

fix(ci): update actions/deploy-pages pin to current v5 (v5.0.1) (#1387)

2026-09-02 13:59:42 +05:00

install-matrix.yml

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

release.yml

fix(ci): run pypi-publish before Sigstore signing writes to dist/

2026-09-05 19:25:51 +05:30

scorecard.yml

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

security-scan.yml

fix(ci): ignore upstream accelerate vulnerability in security scan

2026-09-09 05:47:11 +05:00

verify-action-pins.yml

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30