From c4083e32f55cb89bc5980a44a197b7794d474a9f Mon Sep 17 00:00:00 2001 From: Vincent Koc Date: Sat, 4 Jul 2026 09:34:54 +0200 Subject: [PATCH] fix(ci): allow jsonl socket boundary helper --- .../queries/raw-socket-callsite-classification.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/codeql/openclaw-boundary/queries/raw-socket-callsite-classification.ql b/.github/codeql/openclaw-boundary/queries/raw-socket-callsite-classification.ql index 311f7fced146..2360cabd1382 100644 --- a/.github/codeql/openclaw-boundary/queries/raw-socket-callsite-classification.ql +++ b/.github/codeql/openclaw-boundary/queries/raw-socket-callsite-classification.ql @@ -64,7 +64,7 @@ predicate allowedRawSocketClientCall(Expr call) { or allowedOwnerScope(call, "src/infra/gateway-lock.ts", "checkPortFree") or - allowedOwnerScope(call, "src/infra/jsonl-socket.ts", "requestJsonlSocket") + allowedOwnerScope(call, "src/infra/jsonl-socket.ts", "requestJsonlSocketWithMaxLineBytes") or allowedOwnerScope(call, "src/infra/net/http-connect-tunnel.ts", "connectToProxy") or