mirror of
https://github.com/openclaw/openclaw.git
synced 2026-09-03 06:38:40 +00:00
Cross-check published advisories from verified public upstream repositories with bounded requests and explicit partial coverage. Keep the zero-install hook npm-only, preserve per-lock severity policy, and retain evidence when a release gate blocks. Reuse the existing release job token and timeout owner without changing dependency pins or SDK behavior. |
||
|---|---|---|
| .. | ||
| filter-staged-files.mjs | ||
| format-staged.sh | ||
| guard-staged-content.mjs | ||
| pnpm-audit-prod.mjs | ||
| run-node-tool.sh | ||