Patrick Erichsen d4a9bbbe87 ci(testbox): provision pinned TruffleHog (#112482) ...

* ci(testbox): provision pinned TruffleHog

* fix(ci): preserve existing TruffleHog bin directory

* test(ci): cover TruffleHog target routing

2026-07-21 20:14:58 -07:00

..

android-release.yml

refactor(ci): share Android toolchain setup (#108855)

2026-07-16 03:38:31 -07:00

auto-response.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

ci-build-artifacts-testbox.yml

ci(testbox): provision pinned TruffleHog (#112482)

2026-07-21 20:14:58 -07:00

ci-check-arm-testbox.yml

ci(testbox): provision pinned TruffleHog (#112482)

2026-07-21 20:14:58 -07:00

ci-check-testbox.yml

ci(testbox): provision pinned TruffleHog (#112482)

2026-07-21 20:14:58 -07:00

ci.yml

ci: scan pull requests with TruffleHog (#111935)

2026-07-20 17:08:41 -07:00

clawsweeper-dispatch.yml

fix(ci): filter ClawSweeper comment dispatches before token minting (#95308)

2026-06-21 19:05:08 +08:00

codeql-android-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql-critical-quality.yml

fix(ci): classify proxied APNs TLS tunnel (#110480)

2026-07-18 16:18:29 +01:00

codeql-macos-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql.yml

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

control-ui-locale-refresh.yml

fix: control UI locale PRs fail to arm auto-merge (#110809)

2026-07-18 17:45:27 +01:00

crabbox-hydrate.yml

fix(ci): prevent AWS Crabbox pnpm exit hang (#104710)

2026-07-11 14:25:19 -07:00

dependency-guard.yml

feat(ci): autoscrub dependency lockfile-only PR changes (#87796)

2026-05-29 19:37:16 -07:00

docker-release.yml

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

docs-agent.yml

fix(ci): bound docs-agent git fetch operations with timeout (#110026)

2026-07-17 17:40:14 -07:00

docs-sync-publish.yml

fix(ci): bound docs-sync publish repo git clone (#109173)

2026-07-17 17:39:45 -07:00

docs-translate-trigger-release.yml

…

docs.yml

ci: pin ClawHub docs checkout branch

2026-07-05 08:17:32 -04:00

duplicate-after-merge.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

full-release-validation.yml

ci(release): enforce reusable permission ceiling (#110353)

2026-07-18 04:07:42 +01:00

install-smoke-reusable.yml

fix(ci): preserve QA package intent boundaries (#104207)

2026-07-11 00:51:57 -07:00

install-smoke.yml

fix(ci): preserve QA package intent boundaries (#104207)

2026-07-11 00:51:57 -07:00

ios-periphery-comment.yml

ci(macos): add enforced periphery dead-code lane and delete the 12 current findings (#105743)

2026-07-12 16:39:15 -07:00

ios-periphery.yml

fix(ci): skip Periphery scans for unrelated PR changes (#107991)

2026-07-19 16:52:44 +08:00

labeler.yml

ci: gate PR edit automation by changed field (#95010)

2026-07-16 00:42:14 -07:00

linux-app-release.yml

fix(ci): bound linux-app-release git fetch with timeout (#110027)

2026-07-17 17:40:04 -07:00

linux-app.yml

feat(onboarding): offer detected Claude Code/Codex/Hermes memory imports across CLI, macOS, and Linux onboarding (#108977)

2026-07-16 10:10:01 -07:00

live-media-runner-image.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

macos-periphery.yml

fix(ci): skip Periphery scans for unrelated PR changes (#107991)

2026-07-19 16:52:44 +08:00

macos-release.yml

fix(ci): bound macos-release git fetch with timeout (#109174)

2026-07-17 17:39:53 -07:00

maintainer-command-reactions.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

mantis-discord-smoke.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-discord-status-reactions.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-discord-thread-attachment.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-scenario.yml

fix(ci): repair Mantis desktop scenario dispatch (#109505)

2026-07-16 18:50:57 -07:00

mantis-slack-desktop-smoke.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-telegram-desktop-proof.yml

fix(ci): run mantis codex proof on node 24 (#100237)

2026-07-16 18:33:51 -07:00

mantis-telegram-live.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-web-ui-chat-proof.yml

ci(mantis): add web UI chat proof lane (#100472)

2026-07-07 10:54:35 +01:00

maturity-scorecard.yml

fix(ci): forward live QA credentials to maturity generation (#112201)

2026-07-21 16:57:39 +09:00

native-app-locale-refresh.yml

ci(i18n): publish Wear locale artifacts

2026-07-21 17:36:49 +08:00

node22-compat.yml

perf(ci): persist Node 22 build cache artifacts (#109780)

2026-07-17 01:04:57 -07:00

npm-telegram-beta-e2e.yml

fix(release): fail fast on flaky beta QA

2026-07-17 21:55:27 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: speed up release preparation

2026-07-17 13:43:12 +01:00

openclaw-live-and-e2e-checks-reusable.yml

fix(ci): restore Z.AI API Platform validation (#112171)

2026-07-21 15:44:41 +09:00

openclaw-npm-release.yml

build(client): make @openclaw/gateway-client publishable to npm (#111707)

2026-07-20 00:23:36 -07:00

openclaw-performance.yml

fix(ci): harden full release validation

2026-07-16 10:26:29 +01:00

openclaw-release-checks.yml

fix(ci): forward live QA credentials to maturity generation (#112201)

2026-07-21 16:57:39 +09:00

openclaw-release-publish.yml

ci: trim release metadata and ClawHub checkouts

2026-07-17 13:43:12 +01:00

openclaw-release-telegram-qa.yml

fix(ci): avoid flaky commit pulls lookup

2026-07-17 00:52:44 +01:00

openclaw-scheduled-live-checks.yml

fix: current-tree package checks support unreleased versions (#104186)

2026-07-10 22:31:42 -07:00

openclaw-stable-main-closeout.yml

fix(release): preserve closeout asset names (#107047)

2026-07-13 21:20:01 -07:00

opengrep-precise-full.yml

fix(ci): bound opengrep installer downloads (#109089)

2026-07-16 23:17:45 -07:00

opengrep-precise.yml

fix(ci): bound opengrep installer downloads (#109089)

2026-07-16 23:17:45 -07:00

package-acceptance.yml

improve: shorten release candidate validation (#110316)

2026-07-18 03:39:03 +01:00

plugin-clawhub-new.yml

fix(ci): allow detached release children after parent success

2026-07-17 09:48:38 +01:00

plugin-clawhub-release.yml

ci: trim release metadata and ClawHub checkouts

2026-07-17 13:43:12 +01:00

plugin-init-scaffold-validation.yml

feat: scaffold provider plugins from init (#94352)

2026-06-26 16:43:51 -07:00

plugin-npm-release.yml

fix(ci): bound plugin-npm-release git fetch and npm publish with timeout (#110279)

2026-07-18 06:06:12 +01:00

plugin-prerelease.yml

improve: shorten release candidate validation (#110316)

2026-07-18 03:39:03 +01:00

pr-ci-sweeper.yml

ci: hourly sweeper re-fires dropped pull_request CI runs (#110889)

2026-07-18 20:18:57 +01:00

qa-live-transports-convex.yml

refactor(qa): route live channel selectors through suite host (#108429)

2026-07-15 13:35:34 -07:00

qa-profile-evidence.yml

fix(qa): run independent evidence channels concurrently (#112008)

2026-07-21 11:25:46 +09:00

real-behavior-proof.yml

ci: gate PR edit automation by changed field (#95010)

2026-07-16 00:42:14 -07:00

sandbox-common-smoke.yml

fix(sandbox): install supported node in common image

2026-06-24 22:54:00 +08:00

security-sensitive-guard.yml

ci: remove security guard rollout floor

2026-07-01 21:21:31 -05:00

shared-openclawkit-periphery.yml

fix(ci): skip Periphery scans for unrelated PR changes (#107991)

2026-07-19 16:52:44 +08:00

stale.yml

fix(ci): avoid stale workflow rate limits (#105117)

2026-07-12 16:03:24 +08:00

sticky-disk-cleanup.yml

improve(ci): preserve complete main validation during merge bursts (#110298)

2026-07-18 03:27:54 +01:00

test-performance-agent.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

update-migration.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

vitest-cache-warm.yml

improve(ci): warm import-heavy Vitest graphs (#110557)

2026-07-18 09:20:14 +01:00

website-installer-sync.yml

ci: pin website checkout branch

2026-07-05 08:37:59 -04:00

windows-blacksmith-testbox.yml

fix(ci): bound Windows Testbox phone-home requests (#108755)

2026-07-16 01:57:53 -07:00

windows-node-release.yml

ci: gate stable releases on Windows companion assets (#92555)

2026-06-13 19:33:33 -07:00

windows-testbox-probe.yml

fix(ci): bound Windows WSL rootfs downloads (#108743)

2026-07-16 01:47:37 -07:00

workflow-sanity.yml

fix(ci): make plugin SDK API manifest mergeable (#110228)

2026-07-18 00:16:39 +01:00