mirror of
https://github.com/openclaw/openclaw.git
synced 2026-05-09 09:58:38 +02:00
Harden the macOS CodeQL SARIF filter to drop only findings whose primary location is SwiftPM build output. Verified with workflow sanity, local jq filtering, full PR CI, and profile=macos-security branch proof in 18m44s.