2 Commits

Author	SHA1	Message	Date
Vincent Koc	6e73101df3	chore(ci): widen CodeQL PR guard ... Runs the PR CodeQL security guard as high-confidence high/critical security coverage and adds the initial plugin/package-contract quality guard.	2026-04-29 20:06:50 -07:00
Vincent Koc	71ab341f46	chore(ci): rename CodeQL auth security shard ... Renames the default auth/secrets CodeQL security category from the generic javascript-typescript label to core-auth-secrets. Proof: - Branch CodeQL security run https://github.com/openclaw/openclaw/actions/runs/25134871512 passed on 1d9f727bfd. - Core auth/secrets analysis 1200412263 returned 0 results. - Branch open CodeQL alerts: none. - Workflow Sanity, Blacksmith Testbox, Blacksmith Build Artifacts Testbox, and OpenGrep PR Diff passed. Scope is label/config only: same paths, query pack, filters, timeout, and runner.	2026-04-29 14:32:34 -07:00