Vincent Koc 8aed80d2fa chore(ci): add CodeQL PR security guard ...

Runs the narrow CodeQL critical-security matrix on non-draft pull requests for code and workflow security-boundary changes.

2026-04-29 19:19:45 -07:00

..

auto-response.yml

…

ci-build-artifacts-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci-check-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci.yml

ci(dup): guard duplicate scan coverage

2026-04-29 23:24:57 +01:00

clawsweeper-dispatch.yml

fix(ci): stop ClawSweeper dispatch PAT fallback

2026-04-29 13:26:02 -07:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

chore(ci): add provider runtime CodeQL quality shard

2026-04-29 16:15:38 -07:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

chore(ci): add CodeQL PR security guard

2026-04-29 19:19:45 -07:00

control-ui-locale-refresh.yml

feat(i18n): align docs and ui locales

2026-04-29 10:25:47 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

…

docs-translate-trigger-release.yml

feat(i18n): align docs and ui locales

2026-04-29 10:25:47 -07:00

docs.yml

…

duplicate-after-merge.yml

…

full-release-validation.yml

ci: shard install smoke release checks

2026-04-29 22:25:55 +01:00

install-smoke.yml

ci: shard install smoke release checks

2026-04-29 22:25:55 +01:00

labeler.yml

fix(ci): exempt automation PRs from Barnacle PR limit

2026-04-29 13:58:06 -07:00

live-media-runner-image.yml

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

macos-release.yml

…

maintainer-command-reactions.yml

ci: rename clawsweeper automation labels

2026-04-29 10:18:57 +01:00

npm-telegram-beta-e2e.yml

ci: harden npm telegram artifact upload

2026-04-27 22:13:21 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: use same-run release package artifacts

2026-04-29 16:06:02 +01:00

openclaw-live-and-e2e-checks-reusable.yml

fix: Found two release-validation regressions in the new focused live- (#74562)

2026-04-29 14:08:45 -07:00

openclaw-npm-release.yml

…

openclaw-release-checks.yml

ci: shard install smoke release checks

2026-04-29 22:25:55 +01:00

openclaw-scheduled-live-checks.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

opengrep-precise-full.yml

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

opengrep-precise.yml

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

package-acceptance.yml

ci: use same-run release package artifacts

2026-04-29 16:06:02 +01:00

parity-gate.yml

fix: normalize QA model refs for parity gates

2026-04-28 23:01:58 +01:00

plugin-clawhub-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-npm-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-prerelease.yml

fix(ci): gate plugin prerelease docker suite

2026-04-29 01:06:57 -07:00

qa-live-transports-convex.yml

ci: reduce release runner queue pressure

2026-04-29 17:45:53 +01:00

sandbox-common-smoke.yml

…

stale.yml

…

test-performance-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

workflow-sanity.yml

…