Vincent Koc
02597caa8b
chore(ci): add agent CodeQL PR quality guard
...
Promotes the existing agent-runtime quality shard to PR/manual selection and documents the expanded twelve-shard PR quality set.
2026-04-30 00:01:12 -07:00
Vincent Koc
e0c75cd0bd
chore(ci): cover bundled channels in CodeQL PR guard
...
Extends the channel CodeQL quality shard to bundled channel plugin source directories and documents the scoped PR guard coverage.
2026-04-29 23:28:18 -07:00
Vincent Koc
423f6df5b1
chore(ci): add config CodeQL PR quality guard
...
Adds the config-boundary quality shard to the PR CodeQL guard and documents the expanded eleven-shard PR quality set.
2026-04-29 23:15:58 -07:00
Vincent Koc
3031726905
chore(ci): add auth CodeQL PR quality guard
...
Adds the core-auth-secrets quality shard to the PR CodeQL guard and documents the expanded ten-shard PR quality set.
2026-04-29 23:06:02 -07:00
Vincent Koc
e9d4cb2bb6
chore(ci): add memory CodeQL PR quality guard
...
Adds the memory runtime quality shard to the PR CodeQL guard while preserving provider/plugin overlap only for the memory files that share those contracts.
2026-04-29 22:54:37 -07:00
Vincent Koc
c500b26bb6
chore(ci): add plugin SDK reply CodeQL PR guard
...
Adds the Plugin SDK reply runtime quality shard to the PR CodeQL guard while keeping reply runtime changes on the existing plugin and package-contract shards.
2026-04-29 22:43:24 -07:00
Vincent Koc
a34ba362c6
chore(ci): add session CodeQL PR quality guard
...
Adds the session diagnostics quality shard to the PR CodeQL guard while keeping diagnostics and delivery queue analysis path-sharded by surface.
2026-04-29 22:27:27 -07:00
Vincent Koc
4fc0981a52
chore(ci): add process CodeQL PR quality guard
...
Adds the MCP/process runtime quality shard to the PR CodeQL guard and keeps non-security quality analysis path-sharded by surface.
2026-04-29 22:15:17 -07:00
Vincent Koc
6308d2a1dc
chore(ci): add channel CodeQL PR quality guard
...
Adds the channel runtime quality shard to the PR CodeQL guard and keeps non-security quality analysis path-sharded by surface.
2026-04-29 22:00:55 -07:00
Vincent Koc
8dc99feb50
chore(ci): add provider CodeQL PR quality guard
...
Adds the provider runtime quality shard to the PR CodeQL guard, keeps PR quality analysis path-sharded by surface, and fixes selector overlap for Plugin SDK/package-contract paths.
2026-04-29 21:47:17 -07:00
Vincent Koc
eea964330c
chore(ci): add gateway CodeQL PR quality guard
...
Adds the gateway runtime quality shard to the PR CodeQL guard, keeps PR quality analysis path-sharded by surface, and documents the shard selector behavior.
2026-04-29 21:26:03 -07:00
Vincent Koc
6e73101df3
chore(ci): widen CodeQL PR guard
...
Runs the PR CodeQL security guard as high-confidence high/critical security coverage and adds the initial plugin/package-contract quality guard.
2026-04-29 20:06:50 -07:00
Vincent Koc
845dd2a7d5
chore(ci): add provider runtime CodeQL quality shard
...
Adds a focused non-security CodeQL quality shard for provider runtime and model catalog contracts.
2026-04-29 16:15:38 -07:00
Vincent Koc
847d8fa0e1
chore(ci): add Plugin SDK reply CodeQL quality shard
...
Adds a focused non-security CodeQL quality shard for Plugin SDK reply/session delivery runtime contracts.
2026-04-29 15:56:41 -07:00
Vincent Koc
8f50920c45
chore(ci): add session diagnostics CodeQL quality shard
...
Adds a focused non-security CodeQL quality shard for session diagnostics, delivery queues, and related diagnostic contracts.
2026-04-29 15:29:03 -07:00
Mason Huang
7108414009
ci: add codeql quality profile input ( #74348 )
...
* ci: add codeql quality profile input
* ci: gate codeql quality profiles
* ci: ignore spec files in codeql shard
2026-04-29 22:39:54 +08:00
Mason Huang
dda765c445
ci: add plugin sdk package contract codeql quality shard ( #74342 )
2026-04-29 21:33:11 +08:00
Vincent Koc
6a3310bbda
chore(ci): add memory CodeQL quality shard
...
Adds a narrow CodeQL Critical Quality shard for the memory host/runtime boundary.
2026-04-29 00:18:30 -07:00
Vincent Koc
1d87d757e9
ci: add mcp process codeql quality shard
2026-04-28 23:36:34 -07:00
Vincent Koc
6186ed2c07
ci: rename codeql quality baseline shard
2026-04-28 22:52:55 -07:00
Vincent Koc
2f04731a48
ci: shard web media codeql quality
2026-04-28 22:18:21 -07:00
Vincent Koc
e53c45ba94
ci: shard control ui codeql quality
...
Adds a narrow CodeQL Critical Quality shard for the Control UI/control-plane surface and fixes the custom-theme font-family ReDoS finding discovered by the new shard.
2026-04-28 20:24:19 -07:00
Vincent Koc
09e2cf1103
ci: right-size codeql quality runners
...
Run CodeQL Critical Quality on 4 vCPU Blacksmith runners.
2026-04-28 19:26:45 -07:00
Vincent Koc
9c9dcd4d5d
ci: shard agent runtime codeql quality
...
Add the agent runtime boundary to the CodeQL Critical Quality workflow.
2026-04-28 16:18:33 -07:00
Vincent Koc
bb0461b682
ci: shard channel codeql quality
...
Add a narrow channel-runtime CodeQL critical-quality shard and document it.
2026-04-28 11:52:54 -07:00
Vincent Koc
e476523082
ci: shard gateway codeql quality
...
Add a narrow gateway/runtime CodeQL critical-quality shard and document it.
2026-04-28 11:16:48 -07:00
Vincent Koc
e10f493160
ci: shard config codeql quality
...
Split config quality CodeQL results into a separate category while keeping the default quality bucket narrow.
2026-04-28 04:00:14 -07:00
Vincent Koc
5820a48fca
ci: add plugin boundary codeql quality shard ( #73447 )
2026-04-28 02:30:33 -07:00
Vincent Koc
dbab162abd
ci: split codeql quality workflow ( #73404 )
2026-04-28 01:04:59 -07:00