Vincent Koc 6e77c10c6c fix(ci): harden macOS CodeQL SARIF filtering ...

Harden the macOS CodeQL SARIF filter to drop only findings whose primary location is SwiftPM build output. Verified with workflow sanity, local jq filtering, full PR CI, and profile=macos-security branch proof in 18m44s.

2026-04-27 15:25:38 -07:00

..

auto-response.yml

fix(triage): extract barnacle workflow

2026-04-25 17:43:08 -07:00

ci-build-artifacts-testbox.yml

ci(testbox): save build artifact cache before wait

2026-04-26 21:07:02 -07:00

ci-check-testbox.yml

ci: increase checkout retry budget

2026-04-23 17:48:21 +01:00

ci.yml

ci: add full release validation workflow

2026-04-27 02:02:34 +01:00

codeql.yml

fix(ci): harden macOS CodeQL SARIF filtering

2026-04-27 15:25:38 -07:00

control-ui-locale-refresh.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

style: format repository

2026-04-26 05:47:12 +01:00

docs-sync-publish.yml

ci: rebase docs sync with source preference

2026-04-24 18:58:53 +01:00

docs-translate-trigger-release.yml

feat(docs): add Thai translation support

2026-04-23 06:23:02 +01:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

ci: record package proof in release evidence

2026-04-27 22:00:03 +01:00

install-smoke.yml

ci: allow installer smoke baseline override

2026-04-27 00:31:30 +01:00

labeler.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00

macos-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

npm-telegram-beta-e2e.yml

ci: harden npm telegram artifact upload

2026-04-27 22:13:21 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: harden cross-os release harness on Windows

2026-04-27 10:03:38 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: split release validation slow shards

2026-04-27 20:30:17 +01:00

openclaw-npm-release.yml

ci(release): use github runner for npm release gate

2026-04-23 16:49:53 +01:00

openclaw-release-checks.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

openclaw-scheduled-live-checks.yml

ci: run full docker checks daily

2026-04-23 14:32:30 +01:00

package-acceptance.yml

ci: match package Telegram harness to release ref

2026-04-27 14:06:05 +01:00

parity-gate.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

plugin-clawhub-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

plugin-npm-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

qa-live-transports-convex.yml

ci: keep release checks compatible with stable refs

2026-04-27 13:59:49 +01:00

sandbox-common-smoke.yml

Revert "ci: use Blacksmith checkout cache"

2026-04-21 03:21:48 +01:00

stale.yml

Adjust message for stale workflow

2026-04-26 20:31:00 -05:00

test-performance-agent.yml

style: format repository

2026-04-26 05:47:12 +01:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00