openclaw/.github/codeql
Peter Steinberger b9c6789560
feat(secrets): authenticated egress substitution proxy with destination binding (#123216)
* feat(secrets): add authenticated egress substitution proxy

* feat(secrets): bind egress substitution to hosts

* ci(codeql): classify egress proxy bypass tunnel in network boundary query

* refactor(proxy-capture): use the canonical IP parser instead of node:net

* fix(secrets): compare proxy tokens with a process-keyed MAC
2026-08-13 20:49:31 -07:00
..
openclaw-boundary feat(secrets): authenticated egress substitution proxy with destination binding (#123216) 2026-08-13 20:49:31 -07:00
codeql-actions-critical-security.yml
codeql-agent-runtime-boundary-critical-quality.yml
codeql-android-critical-security.yml
codeql-channel-runtime-boundary-critical-quality.yml refactor(qqbot): install plugin from Tencent package (#107295) 2026-08-11 15:10:27 -07:00
codeql-channel-runtime-boundary-critical-security.yml
codeql-config-boundary-critical-quality.yml
codeql-core-auth-secrets-critical-quality.yml
codeql-core-auth-secrets-critical-security.yml
codeql-gateway-runtime-boundary-critical-quality.yml
codeql-macos-critical-security.yml
codeql-mcp-process-runtime-boundary-critical-quality.yml
codeql-mcp-process-tool-boundary-critical-security.yml refactor(agents): split message-tool into concept modules (#121901) 2026-08-11 00:31:14 -07:00
codeql-memory-runtime-boundary-critical-quality.yml refactor(memory)!: remove the QMD backend; builtin is the only memory engine (#120936) 2026-08-09 03:05:47 -07:00
codeql-network-runtime-boundary-critical-quality.yml feat(secrets): authenticated egress substitution proxy with destination binding (#123216) 2026-08-13 20:49:31 -07:00
codeql-network-ssrf-boundary-critical-security.yml fix(security): unify secret-redaction and SSRF policy ownership (#121335) 2026-08-09 22:40:58 -07:00
codeql-plugin-boundary-critical-quality.yml
codeql-plugin-sdk-package-contract-critical-quality.yml
codeql-plugin-sdk-reply-runtime-critical-quality.yml
codeql-plugin-trust-boundary-critical-security.yml
codeql-process-exec-boundary-critical-security.yml refactor(memory)!: remove the QMD backend; builtin is the only memory engine (#120936) 2026-08-09 03:05:47 -07:00
codeql-provider-runtime-boundary-critical-quality.yml
codeql-session-diagnostics-boundary-critical-quality.yml
codeql-ui-control-plane-critical-quality.yml
codeql-web-media-runtime-boundary-critical-quality.yml refactor(packages): DM-policy contract suite, dead routes, package folds (#114776) 2026-07-27 20:20:13 -04:00