LZY3538 085c1d4602 fix(ci): bound Opengrep installer fetch with connect timeout (#109576) ...

Add --connect-timeout 30 and --max-time 120 to the curl command that
downloads the Opengrep install script and pipes it to bash. Both the
PR-diff (opengrep-precise) and full-scan (opengrep-precise-full)
workflows are covered. A stuck TLS handshake or stalled download
could previously occupy a CI runner until the job-level timeout.

Co-authored-by: Claude <noreply@anthropic.com>

2026-07-16 22:25:14 -07:00

..

android-release.yml

refactor(ci): share Android toolchain setup (#108855)

2026-07-16 03:38:31 -07:00

auto-response.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

ci-build-artifacts-testbox.yml

fix(ci): preserve all package runtime artifacts

2026-07-08 23:12:03 -07:00

ci-check-arm-testbox.yml

fix(ci): avoid relinking identical node tools

2026-06-24 02:43:25 +08:00

ci-check-testbox.yml

fix: avoid remote boxes for focused validation (#107166)

2026-07-14 00:53:17 -07:00

ci.yml

perf(ci): cache declarations and remove test import tail (#109593)

2026-07-16 21:51:06 -07:00

clawsweeper-dispatch.yml

fix(ci): filter ClawSweeper comment dispatches before token minting (#95308)

2026-06-21 19:05:08 +08:00

codeql-android-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql-critical-quality.yml

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

codeql-macos-critical-security.yml

fix(ci): cancel stale CodeQL runs (#95116)

2026-06-19 16:41:57 -07:00

codeql.yml

feat(codex): supervise native Codex sessions (#104045)

2026-07-11 00:12:08 -07:00

control-ui-locale-refresh.yml

fix(ui): prevent generated locale rebase conflicts (#109393)

2026-07-16 18:48:20 -07:00

crabbox-hydrate.yml

fix(ci): prevent AWS Crabbox pnpm exit hang (#104710)

2026-07-11 14:25:19 -07:00

dependency-guard.yml

…

docker-release.yml

chore(tooling): enforce formatting and refresh TypeScript checks (#104239)

2026-07-11 01:09:51 -07:00

docs-agent.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

docs-sync-publish.yml

ci: pin ClawHub docs checkout branch

2026-07-05 08:17:32 -04:00

docs-translate-trigger-release.yml

…

docs.yml

ci: pin ClawHub docs checkout branch

2026-07-05 08:17:32 -04:00

duplicate-after-merge.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

full-release-validation.yml

fix(release): make beta performance advisory

2026-07-16 23:55:10 +01:00

install-smoke-reusable.yml

fix(ci): preserve QA package intent boundaries (#104207)

2026-07-11 00:51:57 -07:00

install-smoke.yml

fix(ci): preserve QA package intent boundaries (#104207)

2026-07-11 00:51:57 -07:00

ios-periphery-comment.yml

ci(macos): add enforced periphery dead-code lane and delete the 12 current findings (#105743)

2026-07-12 16:39:15 -07:00

ios-periphery.yml

fix(ci): install xcodegen via pinned release script in periphery scans

2026-07-16 13:04:08 +01:00

labeler.yml

ci: gate PR edit automation by changed field (#95010)

2026-07-16 00:42:14 -07:00

linux-app-release.yml

feat(linux): extend companion self-update to macOS/Windows test builds (#109244)

2026-07-16 10:55:19 -07:00

linux-app.yml

feat(onboarding): offer detected Claude Code/Codex/Hermes memory imports across CLI, macOS, and Linux onboarding (#108977)

2026-07-16 10:10:01 -07:00

live-media-runner-image.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

macos-periphery.yml

fix(ci): keep Periphery scope checks off shared API quota (#106090)

2026-07-13 01:47:43 -07:00

macos-release.yml

docs(release): bound release recovery loops (#106852)

2026-07-14 06:44:23 +08:00

maintainer-command-reactions.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

mantis-discord-smoke.yml

fix(ci): require live proof evidence artifacts

2026-06-23 12:43:09 +08:00

mantis-discord-status-reactions.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-discord-thread-attachment.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-scenario.yml

fix(ci): repair Mantis desktop scenario dispatch (#109505)

2026-07-16 18:50:57 -07:00

mantis-slack-desktop-smoke.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-telegram-desktop-proof.yml

fix(ci): run mantis codex proof on node 24 (#100237)

2026-07-16 18:33:51 -07:00

mantis-telegram-live.yml

fix(mantis): bound Crabbox source checkout (#108940)

2026-07-16 07:49:07 -07:00

mantis-web-ui-chat-proof.yml

ci(mantis): add web UI chat proof lane (#100472)

2026-07-07 10:54:35 +01:00

maturity-scorecard.yml

fix(ci): harden maturity scorecard publication (#103722)

2026-07-10 15:25:15 +01:00

native-app-locale-refresh.yml

fix(ci): publish native generated locales

2026-07-13 11:41:15 +01:00

node22-compat.yml

fix(sqlite): reject runtimes vulnerable to WAL corruption (#106065)

2026-07-13 13:59:00 +08:00

npm-telegram-beta-e2e.yml

fix(ci): accept queued release artifacts

2026-07-16 23:05:04 +01:00

openclaw-cross-os-release-checks-reusable.yml

chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)

2026-07-11 06:30:57 -07:00

openclaw-live-and-e2e-checks-reusable.yml

fix(release): repair frozen validation compatibility (#109272)

2026-07-16 11:45:31 -07:00

openclaw-npm-release.yml

fix(ci): validate frozen release tags

2026-07-17 02:41:05 +01:00

openclaw-performance.yml

fix(ci): harden full release validation

2026-07-16 10:26:29 +01:00

openclaw-release-checks.yml

docs: align QA transport and release workflow contracts (#108463)

2026-07-15 14:51:37 -07:00

openclaw-release-publish.yml

fix(ci): keep beta performance advisory at publish

2026-07-17 05:32:47 +01:00

openclaw-release-telegram-qa.yml

fix(ci): avoid flaky commit pulls lookup

2026-07-17 00:52:44 +01:00

openclaw-scheduled-live-checks.yml

fix: current-tree package checks support unreleased versions (#104186)

2026-07-10 22:31:42 -07:00

openclaw-stable-main-closeout.yml

fix(release): preserve closeout asset names (#107047)

2026-07-13 21:20:01 -07:00

opengrep-precise-full.yml

fix(ci): bound Opengrep installer fetch with connect timeout (#109576)

2026-07-16 22:25:14 -07:00

opengrep-precise.yml

fix(ci): bound Opengrep installer fetch with connect timeout (#109576)

2026-07-16 22:25:14 -07:00

package-acceptance.yml

fix(release): propagate frozen-target guard and retry live timeouts (#108418)

2026-07-15 13:06:24 -07:00

plugin-clawhub-new.yml

fix(release): bind bootstrap publish workflow identity

2026-07-15 17:41:54 +01:00

plugin-clawhub-release.yml

fix(release): publish ClawHub bootstrap artifacts immutably (#103809)

2026-07-10 13:33:20 -07:00

plugin-init-scaffold-validation.yml

feat: scaffold provider plugins from init (#94352)

2026-06-26 16:43:51 -07:00

plugin-npm-release.yml

fix(ci): bound plugin npm artifact connection (#108897)

2026-07-16 11:23:01 -07:00

plugin-prerelease.yml

ci: shorten full release validation critical path (#107894)

2026-07-14 22:39:32 -07:00

pr-cache-cleanup.yml

improve(ci): persist warm Vitest and Node caches (#109425)

2026-07-16 17:22:28 -07:00

qa-live-transports-convex.yml

refactor(qa): route live channel selectors through suite host (#108429)

2026-07-15 13:35:34 -07:00

qa-profile-evidence.yml

ci: default maturity evidence to all profile (#96595)

2026-06-24 17:32:25 -07:00

real-behavior-proof.yml

ci: gate PR edit automation by changed field (#95010)

2026-07-16 00:42:14 -07:00

sandbox-common-smoke.yml

fix(sandbox): install supported node in common image

2026-06-24 22:54:00 +08:00

security-sensitive-guard.yml

ci: remove security guard rollout floor

2026-07-01 21:21:31 -05:00

shared-openclawkit-periphery.yml

fix(ci): install xcodegen via pinned release script in periphery scans

2026-07-16 13:04:08 +01:00

stale.yml

fix(ci): avoid stale workflow rate limits (#105117)

2026-07-12 16:03:24 +08:00

test-performance-agent.yml

ci(release): harden release controls

2026-06-18 03:11:20 +08:00

update-migration.yml

fix(release): restore prerelease and release validation startup (#103834)

2026-07-10 18:46:08 +01:00

vitest-cache-warm.yml

improve(ci): persist warm Vitest and Node caches (#109425)

2026-07-16 17:22:28 -07:00

website-installer-sync.yml

ci: pin website checkout branch

2026-07-05 08:37:59 -04:00

windows-blacksmith-testbox.yml

fix(ci): bound Windows Testbox phone-home requests (#108755)

2026-07-16 01:57:53 -07:00

windows-node-release.yml

ci: gate stable releases on Windows companion assets (#92555)

2026-06-13 19:33:33 -07:00

windows-testbox-probe.yml

fix(ci): bound Windows WSL rootfs downloads (#108743)

2026-07-16 01:47:37 -07:00

workflow-sanity.yml

fix(ci): bound actionlint downloads (#108938)

2026-07-16 04:24:26 -07:00