Skip to content

Actions: modelcontextprotocol/python-sdk

Actions

GitHub Actions Security Analysis

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
zizmor.yml
2,147 workflow runs
2,147 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(client/auth): tolerate comma-separated scope strings GitHub Actions Security Analysis #2156: Pull request #3568 opened by dgilman-perplexity
20s dgilman-perplexity:fix/comma-separated-scopes
dgilman-perplexity:fix/comma-separated-scopes
20s
fix(client/auth): preserve an authorization endpoint's existing query parameters GitHub Actions Security Analysis #2155: Pull request #3567 opened by dgilman-perplexity
27s dgilman-perplexity:fix/auth-url-existing-query
dgilman-perplexity:fix/auth-url-existing-query
27s
Add Skills extension GitHub Actions Security Analysis #2154: Pull request #3485 synchronize by vijaydeepsinha
31s vijaydeepsinha:sep-2640-python-sdk-support
vijaydeepsinha:sep-2640-python-sdk-support
31s
Bump httpx2 from 2.10.0 to 2.12.0 GitHub Actions Security Analysis #2153: Pull request #3481 synchronize by dependabot Bot
55s dependabot/uv/httpx2-2.12.0
dependabot/uv/httpx2-2.12.0
55s
Bump anyio from 4.10.0 to 4.14.2 GitHub Actions Security Analysis #2152: Pull request #3547 synchronize by dependabot Bot
24s dependabot/uv/anyio-4.14.2
dependabot/uv/anyio-4.14.2
24s
Bump httpcore2 from 2.5.0 to 2.10.0 (#3482) GitHub Actions Security Analysis #2151: Commit f1b6589 pushed by Kludex
21s main
main
21s
Bump httpcore2 from 2.5.0 to 2.10.0 GitHub Actions Security Analysis #2150: Pull request #3482 synchronize by Kludex
27s dependabot/uv/httpcore2-2.10.0
dependabot/uv/httpcore2-2.10.0
27s
feat: add protocol version override support for client session initialization GitHub Actions Security Analysis #2149: Pull request #2652 synchronize by STiFLeR7
31s STiFLeR7:feat/client-protocol-version-override
STiFLeR7:feat/client-protocol-version-override
31s
Allow FastMCP SSE servers to exit cleanly on SIGINT after serving traffic GitHub Actions Security Analysis #2148: Pull request #3564 opened by 00200200
27s 00200200:fix/sse-shutdown-close-streams
00200200:fix/sse-shutdown-close-streams
27s
fix(mcpserver): catch KeyboardInterrupt and SystemExit gracefully on stdio transport GitHub Actions Security Analysis #2147: Pull request #3561 opened by HirthikBalaji
19s HirthikBalaji:fix/stdio-server-sigint-handling
HirthikBalaji:fix/stdio-server-sigint-handling
19s
fix(server): answer a non-Request body with INVALID_REQUEST, not INVALID_PARAMS GitHub Actions Security Analysis #2146: Pull request #3558 opened by siye566
32s siye566:fix/invalid-request-code-for-non-request-body
siye566:fix/invalid-request-code-for-non-request-body
32s
feat(client): support HTTP auth in ClientSessionGroup GitHub Actions Security Analysis #2145: Pull request #3516 synchronize by musi22
27s musi22:feat/session-group-httpx-auth
musi22:feat/session-group-httpx-auth
27s
fix(auth): forward User-Agent header to OAuth discovery and flow requests (#3531) GitHub Actions Security Analysis #2144: Pull request #3553 opened by Theater-ahyeon
28s Theater-ahyeon:fix/oauth-request-user-agent
Theater-ahyeon:fix/oauth-request-user-agent
28s
fix(client): treat HTTP 202 Accepted as valid session termination (#3546) GitHub Actions Security Analysis #2143: Pull request #3552 opened by teddiesloco
30s teddiesloco:fix/streamable-http-accept-202-delete
teddiesloco:fix/streamable-http-accept-202-delete
30s
Add Skills extension GitHub Actions Security Analysis #2142: Pull request #3485 synchronize by vijaydeepsinha
26s vijaydeepsinha:sep-2640-python-sdk-support
vijaydeepsinha:sep-2640-python-sdk-support
26s
fix(server/auth): fall back to Basic header for client_id under client_secret_basic GitHub Actions Security Analysis #2141: Pull request #3550 opened by ege-arhan
22s ege-arhan:fix/server-basic-header-client-id
ege-arhan:fix/server-basic-header-client-id
22s
fix(client): treat any 2xx as successful session termination GitHub Actions Security Analysis #2140: Pull request #3548 opened by deadczarvc
22s deadczarvc:fix/termination-2xx
deadczarvc:fix/termination-2xx
22s
Bump anyio from 4.10.0 to 4.14.2 GitHub Actions Security Analysis #2139: Pull request #3547 opened by dependabot Bot
20s dependabot/uv/anyio-4.14.2
dependabot/uv/anyio-4.14.2
20s
Close client SSE iterators explicitly when supported GitHub Actions Security Analysis #2138: Pull request #3543 opened by Kludex
27s close-client-sse-iterators
close-client-sse-iterators
27s
Bound direct subscription cleanup without delaying remote exits GitHub Actions Security Analysis #2137: Pull request #3542 opened by Kludex
21s bound-subscription-cleanup
bound-subscription-cleanup
21s
Buffer replay before network delivery and preserve the live handoff GitHub Actions Security Analysis #2136: Pull request #3541 opened by Kludex
19s buffer-replay-before-network-delivery
buffer-replay-before-network-delivery
19s
Preserve request-stream ownership during server cleanup GitHub Actions Security Analysis #2135: Pull request #3540 opened by Kludex
27s preserve-request-stream-ownership
preserve-request-stream-ownership
27s
Run the test suite on both AnyIO backends GitHub Actions Security Analysis #2134: Pull request #3511 synchronize by Kludex
25s restore-trio-support
restore-trio-support
25s
Reject variadic tool parameters GitHub Actions Security Analysis #2133: Pull request #3539 opened by Mohammedib24
20s Mohammedib24:fix-tool-variadic-params
Mohammedib24:fix-tool-variadic-params
20s
Reject variadic tool parameters GitHub Actions Security Analysis #2132: Pull request #3538 opened by Mohammedib24
25s Mohammedib24:fix-tool-variadic-params
Mohammedib24:fix-tool-variadic-params
25s