vrr/openclaw
2
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-20 09:17:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 18
openclaw/.github/workflows
History
Tak Hoffman 06a39015f2
fix(ci): authenticate proof verdict markers (#83692) 
Summary:
- The branch restricts exact-head ClawSweeper proof markers to GitHub App-authored comments, adds read-only issue-comment token fallback for the proof workflow, and adds focused regression tests plus a changelog entry.
- Reproducibility: yes. Source inspection of current main shows any issue comment body with a matching `clawsw ...  SHA is accepted without author/App authentication; the PR adds focused negative tests for forged comments.

Automerge notes:
- PR branch already contained follow-up commit before automerge: fix(ci): authenticate proof verdict markers

Validation:
- ClawSweeper review passed for head f4c375eaa7.
- Required merge gates passed before the squash merge.

Prepared head SHA: f4c375eaa7
Review: https://github.com/openclaw/openclaw/pull/83692#issuecomment-4479843682

Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com>
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
Co-authored-by: clawsweeper[bot] <274271284+clawsweeper[bot]@users.noreply.github.com>
Approved-by: takhoffman
Co-authored-by: takhoffman <781889+takhoffman@users.noreply.github.com>
2026-05-18 17:42:10 +00:00
..
auto-response.yml Require real behavior proof for external PRs (#77622) 2026-05-05 05:45:30 +01:00
ci-build-artifacts-testbox.yml ci: verify and sync website installers (#80067) 2026-05-09 23:48:49 -04:00
ci-check-testbox.yml ci: make testbox session shutdown non-blocking 2026-05-13 13:50:44 +01:00
ci.yml ci: consolidate short CI shards 2026-05-18 06:29:14 +01:00
clawsweeper-dispatch.yml ci: keep ClawSweeper comment dispatch best effort 2026-05-11 11:02:00 +01:00
codeql-android-critical-security.yml ci: schedule android codeql shard (#73430) 2026-04-28 01:54:57 -07:00
codeql-critical-quality.yml chore(channels): remove bluebubbles bundled surface 2026-05-07 12:52:48 -07:00
codeql-macos-critical-security.yml ci: split macos codeql shard 2026-04-28 03:14:07 -07:00
codeql.yml chore(ci): widen CodeQL PR guard 2026-04-29 20:06:50 -07:00
control-ui-locale-refresh.yml fix(qa-lab): refresh parity model targets 2026-05-17 23:12:26 +08:00
crabbox-hydrate.yml test(e2e): fix kitchen sink crabbox coverage (#76287) 2026-05-02 18:39:26 -07:00
dependency-change-awareness.yml ci: grant dependency awareness pull request writes 2026-05-13 11:45:33 +01:00
docker-release.yml feat: support alpha releases 2026-05-02 18:29:13 +01:00
docs-agent.yml fix(ci): harden workflow checkouts 2026-04-28 01:37:00 -07:00
docs-sync-publish.yml build: align node version floor 2026-05-18 06:28:14 +01:00
docs-translate-trigger-release.yml ci: dispatch aggregate docs translations 2026-05-06 20:24:03 +01:00
docs.yml ci: consolidate short CI shards 2026-05-18 06:29:14 +01:00
duplicate-after-merge.yml ci: add duplicate PR cleanup workflow 2026-04-23 18:41:32 +01:00
full-release-validation.yml ci: make Tideclaw alpha long gates advisory 2026-05-18 01:40:37 +01:00
install-smoke.yml ci(release): use hosted runners for manual release gates 2026-05-15 17:25:32 +01:00
labeler.yml chore: Update active PR limit to 20 2026-05-03 19:15:55 -05:00
live-media-runner-image.yml chore(deps): bump actions group 2026-04-29 21:48:30 -07:00
macos-release.yml ci(pnpm): use pnpm 11 in workflows 2026-05-11 00:48:14 +01:00
maintainer-command-reactions.yml ci: rename clawsweeper automation labels 2026-04-29 10:18:57 +01:00
mantis-discord-smoke.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
mantis-discord-status-reactions.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
mantis-discord-thread-attachment.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
mantis-scenario.yml ci(mantis): add agentic telegram desktop proof 2026-05-11 08:15:34 +05:30
mantis-slack-desktop-smoke.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
mantis-telegram-desktop-proof.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
mantis-telegram-live.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
npm-telegram-beta-e2e.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
openclaw-cross-os-release-checks-reusable.yml ci: make Tideclaw alpha long gates advisory 2026-05-18 01:40:37 +01:00
openclaw-live-and-e2e-checks-reusable.yml ci: make Tideclaw alpha long gates advisory 2026-05-18 01:40:37 +01:00
openclaw-npm-release.yml ci: allow Tideclaw alpha release workflows 2026-05-17 07:00:53 +01:00
openclaw-performance.yml ci: update performance artifact action 2026-05-18 10:46:26 +01:00
openclaw-release-checks.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
openclaw-release-publish.yml ci: allow Tideclaw alpha release workflows 2026-05-17 07:00:53 +01:00
openclaw-scheduled-live-checks.yml fix(ci): unblock scheduled and publish checks 2026-05-15 07:52:01 +01:00
opengrep-precise-full.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
opengrep-precise.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
package-acceptance.yml ci: make Tideclaw alpha long gates advisory 2026-05-18 01:40:37 +01:00
plugin-clawhub-release.yml ci: allow Tideclaw alpha release workflows 2026-05-17 07:00:53 +01:00
plugin-npm-release.yml ci: allow Tideclaw alpha release workflows 2026-05-17 07:00:53 +01:00
plugin-prerelease.yml ci(release): use hosted runners for manual release gates 2026-05-15 17:25:32 +01:00
qa-live-transports-convex.yml ci: use node24 artifact action tags 2026-05-18 10:45:59 +01:00
real-behavior-proof.yml fix(ci): authenticate proof verdict markers (#83692) 2026-05-18 17:42:10 +00:00
sandbox-common-smoke.yml chore: clean up root clutter 2026-05-03 12:20:52 +01:00
stale.yml fix(ci): bound manual stale closure backfill 2026-04-30 03:52:23 -07:00
test-performance-agent.yml chore: move swabble into apps 2026-05-03 13:10:25 +01:00
update-migration.yml test: add update migration package gate 2026-05-02 00:34:33 +01:00
website-installer-sync.yml fix(ci): unblock scheduled and publish checks 2026-05-15 07:52:01 +01:00
windows-blacksmith-testbox.yml ci: preserve Windows Testbox phone-home POST 2026-05-03 22:28:30 -07:00
windows-testbox-probe.yml ci: expand Windows WSL probe runners 2026-05-03 21:32:35 -07:00
workflow-sanity.yml ci: skip changelog-only workflow runs (#83215) 2026-05-17 19:29:45 -07:00