易良 fb6637f0d3 chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard (#9008) ... * chore(ci): add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and scorecard workflows * chore(ci): pin TruffleHog scanner version and drop invalid path input * fix(ci): close security workflow review gaps * fix(ci): fail package audit on install errors * test(ci): pin security workflow guardrails * fix(ci): pin security workflow test assertions for SHA refs, status edges, and push trigger * test(ci): pin security workflow edge guards * test(ci): pin security workflow contracts * test(ci): pin secret-scan push guard * fix(ci): quote secret-scan condition * fix(ci): audit workspace package locks directly * fix(ci): scope security checks concurrency * docs(ci): explain mobile audit skip * test(ci): link trufflehog version pin		2026-08-14 01:22:53 +00:00
..
ai-release-notes-workflow.test.js	fix(release): keep notes anchored and cap the release body (#8199)	2026-07-31 09:55:38 +00:00
audit-runtime-critical.test.js	ci: run Windows merge queue tests on ECS (#8386)	2026-08-05 12:14:42 +00:00
build-and-publish-image-workflow.test.js	ci(autofix): restore sandbox image flow (#6261)	2026-07-03 15:30:58 +00:00
capture-tmux-ci.test.js	ci: install tmux and zip tooling on the Linux test lane, and pin it (#8792)	2026-08-11 05:47:39 +00:00
check-build-status.test.js	fix(review): report what the transcripts prove; build the roster in one call (#7033)	2026-07-18 00:43:57 +00:00
check-i18n.test.ts	fix(cli): localize approval mode UI labels (#6592)	2026-07-11 00:07:03 +00:00
check-voice-guard-sync.test.js	feat(voice): support trusted private ASR base URLs (#8350)	2026-08-06 14:04:57 +00:00
chrome-extension-package.test.js	fix(ci): cover release integration regressions (#5994)	2026-06-29 11:54:11 +00:00
ci-flaky-rerun-workflow.test.js	fix(ci): stop a slow patrol classifier from killing every flaky rerun (#7358)	2026-07-21 02:33:51 +00:00
ci-flaky-rerun.test.js	feat(ci): auto-open a deflake fix issue for confirmed flaky tests (#7231)	2026-07-19 16:49:29 +00:00
clean-package-build-artifacts.test.js	test(core): stabilize file history eviction test (#6637)	2026-07-10 06:39:52 +00:00
cli-entry.test.js	fix(cli): preserve Qwen Review startup version in footers (#8431)	2026-08-04 14:58:56 +00:00
comment-attachment-guard-workflow.test.js	ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502)	2026-08-04 03:48:24 +00:00
desktop-oss-workflow.test.js	fix(desktop): harden release pipeline (#9009)	2026-08-12 16:38:12 +00:00
dev.test.js	fix(review): report what the transcripts prove; build the roster in one call (#7033)	2026-07-18 00:43:57 +00:00
e2e-workflow.test.js	fix(ci): keep the post-merge E2E signal on main alive (#7795)	2026-07-28 11:54:52 +00:00
generate-changelog.test.js	feat(release): generate AI-assisted release notes (#6756)	2026-07-12 13:00:22 +00:00
generate-release-notes.test.js	ci: run Windows merge queue tests on ECS (#8386)	2026-08-05 12:14:42 +00:00
get-release-version-python-sdk.test.js	feat(sdk-python): add network timeouts to release version helper (#3833)	2026-05-05 19:25:00 +08:00
get-release-version.test.js	fix(release): bump preview base past published stable (#7978)	2026-07-29 23:21:00 +00:00
install-script.test.js	fix(install): avoid Get-FileHash for Windows checksums (#9112)	2026-08-14 01:12:08 +00:00
integration-vitest-config.test.ts	fix(tests): apply integration worker limits to forks (#8689)	2026-08-08 00:53:33 +00:00
issue-triage-ownership-workflow.test.js	ci: remove broken legacy scheduled PR triage workflow (#8434)	2026-08-03 10:20:42 +00:00
lint.test.js	fix(ci): cache downloaded linters on ECS runners (#9001)	2026-08-13 05:13:23 +00:00
live-host-oss-workflow.test.js	fix(ci): restore Live Host release mirroring (#8917)	2026-08-11 07:08:26 +00:00
main-ci-failure-issue-workflow.test.js	fix(ci): keep the post-merge E2E signal on main alive (#7795)	2026-07-28 11:54:52 +00:00
no-ak-integration-ci.test.js	fix(ci): reduce ENOSPC and load-sensitive test flakes (#8982)	2026-08-13 16:44:39 +00:00
package-assets.test.js	chore(deps): bump sharp to ^0.35.0 to resolve GHSA-f88m-g3jw-g9cj (#8952)	2026-08-13 06:56:10 +00:00
package-scripts.test.js	fix(tests): apply integration worker limits to forks (#8689)	2026-08-08 00:53:33 +00:00
pr-force-push-reminder-workflow.test.js	ci(autofix): run agents on dedicated ECS runners (#6207)	2026-07-03 07:40:07 +00:00
pr-self-report-label.test.js	fix(ci): route workflow label mutations through REST (#8761)	2026-08-09 15:05:15 +00:00
qwen-autofix-fork-bridge-workflow.test.js	feat(autofix): bridge fork-PR reviews into the credentialed review lane (#8676)	2026-08-07 16:11:48 +00:00
qwen-autofix-workflow.test.js	fix(ci): reduce ENOSPC and load-sensitive test flakes (#8982)	2026-08-13 16:44:39 +00:00
qwen-fleet-shepherd-workflow.test.js	feat(autofix): bridge fork-PR reviews into the credentialed review lane (#8676)	2026-08-07 16:11:48 +00:00
qwen-pr-review-workflow.test.js	perf(ci): tighten the automatic review kill switch for micro diffs (#8774)	2026-08-10 04:01:36 +00:00
qwen-repo-hygiene-workflow.test.js	fix(ci): route workflow label mutations through REST (#8761)	2026-08-09 15:05:15 +00:00
qwen-resolve-workflow.test.js	fix(ci): keep the review workflow under the expression-length limit (#8720)	2026-08-08 05:53:35 +00:00
qwen-triage-finalize-workflow.test.js	fix(ci): rename triage status marker to avoid duplicate-guard collision (#7723)	2026-07-26 15:51:22 +00:00
qwen-triage-workflow.test.js	perf(ci): make the triage budget operator-tunable and raise it (#8810)	2026-08-10 12:40:21 +00:00
release-helpers.test.js	refactor: extract shared release helper utilities (#3834)	2026-05-05 10:15:17 +08:00
release-sdk-workflow.test.js	fix(ci): skip empty SDK release PR (#6861)	2026-07-14 13:19:42 +00:00
release-workflow.test.js	feat(review): say so when the bundle is older than the review it runs (#8390)	2026-08-07 03:21:26 +00:00
review-source-digest.test.ts	feat(review): say so when the bundle is older than the review it runs (#8390)	2026-08-07 03:21:26 +00:00
review-worktree-cleanup-workflow.test.js	fix(ci): clean review worktrees after cancellation (#8474)	2026-08-05 02:39:36 +00:00
sandbox-command.test.js	fix(scripts): avoid shell injection in sandbox command detection (#6108)	2026-07-01 16:20:40 +08:00
sdk-java-workflow.test.js	ci: route trusted-author fork PRs and no-checkout jobs to the ECS pool (#8502)	2026-08-04 03:48:24 +00:00
sdk-node-exporter-stub.test.js	perf(telemetry): lazy-load the SDK and split OTLP exporter chains by protocol (#7276)	2026-07-21 07:35:30 +00:00
security-workflows.test.js	chore(ci): Add security hygiene: CODEOWNERS for release workflows, least-privilege permissions, security checks and Scorecard (#9008)	2026-08-14 01:22:53 +00:00
serve-fast-path-bundle-check.test.js	feat(ci): fail the startup bundle check when the CLI entry is hoisted into a chunk (#8203)	2026-07-31 08:57:57 +00:00
start.test.js	fix(review): report what the transcripts prove; build the roster in one call (#7033)	2026-07-18 00:43:57 +00:00
test-setup.ts	feat(installer): add standalone archive installation (#3776)	2026-05-11 13:25:48 +08:00
update-ecs-runner-qwen-workflow.test.js	fix(ci): reconcile ECS runner updater on workflow changes (#8373)	2026-08-02 09:25:17 +00:00
upload-aliyun-oss-assets.test.js	feat(installer): add standalone hosted install and uninstall flow (#3828)	2026-05-21 11:57:10 +08:00
verify-capture.test.js	fix(ci): avoid verify capture color conflict (#8236)	2026-07-31 14:15:40 +00:00
vitest.config.ts	ci: run Windows merge queue tests on ECS (#8386)	2026-08-05 12:14:42 +00:00
workflow-helpers.js	ci: run Windows merge queue tests on ECS (#8386)	2026-08-05 12:14:42 +00:00
workspaces.test.js	feat(desktop): Add desktop app package with Qwen ACP SDK integration (#3778)	2026-06-11 21:57:20 +08:00