Vincent Koc 3ae69498e2 ci: shard channel codeql security ...

Add a narrow channel-runtime CodeQL critical-security shard and document it.

2026-04-28 12:46:44 -07:00

..

auto-response.yml

fix(triage): extract barnacle workflow

2026-04-25 17:43:08 -07:00

ci-build-artifacts-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci-check-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

clawsweeper-dispatch.yml

ci: narrow ClawSweeper dispatch cancellation

2026-04-28 11:53:06 +01:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

ci: shard channel codeql quality

2026-04-28 11:52:54 -07:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

ci: shard channel codeql security

2026-04-28 12:46:44 -07:00

control-ui-locale-refresh.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

ci: rebase docs sync with source preference

2026-04-24 18:58:53 +01:00

docs-translate-trigger-release.yml

feat(docs): add Thai translation support

2026-04-23 06:23:02 +01:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

ci: keep full release validation children pinned

2026-04-28 20:43:39 +01:00

install-smoke.yml

ci: allow installer smoke baseline override

2026-04-27 00:31:30 +01:00

labeler.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00

macos-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

npm-telegram-beta-e2e.yml

ci: harden npm telegram artifact upload

2026-04-27 22:13:21 +01:00

openclaw-cross-os-release-checks-reusable.yml

fix(ci): stabilize full release validation

2026-04-28 20:14:14 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: speed up full release validation

2026-04-28 09:02:57 +01:00

openclaw-npm-release.yml

ci(release): use github runner for npm release gate

2026-04-23 16:49:53 +01:00

openclaw-release-checks.yml

ci: keep full release validation children pinned

2026-04-28 20:43:39 +01:00

openclaw-scheduled-live-checks.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

package-acceptance.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

parity-gate.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-clawhub-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-npm-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

qa-live-transports-convex.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

sandbox-common-smoke.yml

Revert "ci: use Blacksmith checkout cache"

2026-04-21 03:21:48 +01:00

stale.yml

Adjust message for stale workflow

2026-04-26 20:31:00 -05:00

test-performance-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00