vultr/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-05-06 09:40:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: add plugin sdk package contract codeql quality shard (#74342)

Browse Source
This commit is contained in:
Mason Huang
2026-04-29 21:33:11 +08:00
committed by GitHub
parent 5605b31375
commit dda765c445
3 changed files with 59 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
docs/ci.md
View File

@@ -307,7 +307,10 @@ understanding, image-generation, and media-generation runtime contracts under
the separate `/codeql-critical-quality/web-media-runtime-boundary` category. The
plugin-boundary job scans loader, registry, public-surface, and Plugin SDK
entrypoint contracts under a separate `/codeql-critical-quality/plugin-boundary`
category. Keep the workflow separate from security so quality findings can be
category. The plugin-sdk-package-contract job scans the published package-side
Plugin SDK source and plugin package contract helpers under the separate
`/codeql-critical-quality/plugin-sdk-package-contract` category. Keep the
workflow separate from security so quality findings can be
scheduled, measured, disabled, or expanded without obscuring security signal.
Swift, Python, and bundled-plugin CodeQL expansion should be added back as
scoped or sharded follow-up work only after the narrow profiles have stable