openclaw

46388 commits 1809 branches 220 tags 9.6 GiB

Author SHA1 Message Date

Author	SHA1	Message	Date
Vincent Koc	6e73101df3	chore(ci): widen CodeQL PR guard Runs the PR CodeQL security guard as high-confidence high/critical security coverage and adds the initial plugin/package-contract quality guard.	2026-04-29 20:06:50 -07:00
Vincent Koc	71ab341f46	chore(ci): rename CodeQL auth security shard Renames the default auth/secrets CodeQL security category from the generic javascript-typescript label to core-auth-secrets. Proof: - Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25134871512 passed on `1d9f727bfd`. - Core auth/secrets analysis 1200412263 returned 0 results. - Branch open CodeQL alerts: none. - Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed. Scope is label/config only: same paths, query pack, filters, timeout, and runner.	2026-04-29 14:32:34 -07:00

Vincent Koc

6e73101df3

chore(ci): widen CodeQL PR guard

Runs the PR CodeQL security guard as high-confidence high/critical security coverage and adds the initial plugin/package-contract quality guard.

2026-04-29 20:06:50 -07:00

Vincent Koc

71ab341f46

chore(ci): rename CodeQL auth security shard

Renames the default auth/secrets CodeQL security category from the generic javascript-typescript label to core-auth-secrets.

Proof:
- Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25134871512 passed on 1d9f727bfd.
- Core auth/secrets analysis 1200412263 returned 0 results.
- Branch open CodeQL alerts: none.
- Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed.

Scope is label/config only: same paths, query pack, filters, timeout, and runner.

2026-04-29 14:32:34 -07:00

Renamed from .github/codeql/codeql-javascript-typescript-critical-security.yml (Browse further)

2 commits