mirror of
https://github.com/QwenLM/qwen-code.git
synced 2026-08-26 09:04:37 +00:00
fb6637f0d3
* chore(ci): add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and scorecard workflows * chore(ci): pin TruffleHog scanner version and drop invalid path input * fix(ci): close security workflow review gaps * fix(ci): fail package audit on install errors * test(ci): pin security workflow guardrails * fix(ci): pin security workflow test assertions for SHA refs, status edges, and push trigger * test(ci): pin security workflow edge guards * test(ci): pin security workflow contracts * test(ci): pin secret-scan push guard * fix(ci): quote secret-scan condition * fix(ci): audit workspace package locks directly * fix(ci): scope security checks concurrency * docs(ci): explain mobile audit skip * test(ci): link trufflehog version pin
17 lines
625 B
Text
17 lines
625 B
Text
# ============================================================
|
|
# Qwen Code CODEOWNERS
|
|
# ============================================================
|
|
|
|
# --- CODEOWNERS file itself ---
|
|
/.github/CODEOWNERS @pomelo-nwu @wenshao
|
|
|
|
# --- Primary npm release workflows require core maintainer approval ---
|
|
/.github/workflows/release.yml @pomelo-nwu @wenshao
|
|
/.github/workflows/finalize-release.yml @pomelo-nwu @wenshao
|
|
|
|
# --- Core package ---
|
|
/packages/core/ @wenshao @tanzhenxin @yiliang114 @LaZzyMan @doudouOUC
|
|
|
|
# --- CUA Driver & Mobile MCP ---
|
|
/packages/cua-driver/ @LaZzyMan
|
|
/packages/mobile-mcp/ @LaZzyMan
|