Vincent Koc c9156cd9a8 chore(ci): add network SSRF CodeQL shard ...

Adds a narrow critical-security CodeQL shard for the network/SSRF boundary and documents the new category.

2026-04-29 13:08:46 -07:00

..

auto-response.yml

fix(triage): extract barnacle workflow

2026-04-25 17:43:08 -07:00

ci-build-artifacts-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci-check-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci.yml

ci: fallback deadcode check for legacy targets

2026-04-29 13:50:27 +01:00

clawsweeper-dispatch.yml

ci: disable ClawSweeper commit checks by default

2026-04-29 03:25:20 +01:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

ci: add codeql quality profile input (#74348)

2026-04-29 22:39:54 +08:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

chore(ci): add network SSRF CodeQL shard

2026-04-29 13:08:46 -07:00

control-ui-locale-refresh.yml

feat(i18n): align docs and ui locales

2026-04-29 10:25:47 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

ci: rebase docs sync with source preference

2026-04-24 18:58:53 +01:00

docs-translate-trigger-release.yml

feat(i18n): align docs and ui locales

2026-04-29 10:25:47 -07:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

ci: speed up release validation

2026-04-29 19:55:37 +01:00

install-smoke.yml

ci: shard release validation hotspots

2026-04-29 20:40:42 +01:00

labeler.yml

ci: rename clawsweeper automation labels

2026-04-29 10:18:57 +01:00

live-media-runner-image.yml

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

macos-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

maintainer-command-reactions.yml

ci: rename clawsweeper automation labels

2026-04-29 10:18:57 +01:00

npm-telegram-beta-e2e.yml

ci: harden npm telegram artifact upload

2026-04-27 22:13:21 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: use same-run release package artifacts

2026-04-29 16:06:02 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: shard release validation hotspots

2026-04-29 20:40:42 +01:00

openclaw-npm-release.yml

ci(release): use github runner for npm release gate

2026-04-23 16:49:53 +01:00

openclaw-release-checks.yml

ci: speed up release validation

2026-04-29 19:55:37 +01:00

openclaw-scheduled-live-checks.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

opengrep-precise-full.yml

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

opengrep-precise.yml

feat(security): add GHSA detector-review pipeline and OpenGrep CI workflows (#69483)

2026-04-30 02:42:20 +10:00

package-acceptance.yml

ci: use same-run release package artifacts

2026-04-29 16:06:02 +01:00

parity-gate.yml

fix: normalize QA model refs for parity gates

2026-04-28 23:01:58 +01:00

plugin-clawhub-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-npm-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-prerelease.yml

fix(ci): gate plugin prerelease docker suite

2026-04-29 01:06:57 -07:00

qa-live-transports-convex.yml

ci: reduce release runner queue pressure

2026-04-29 17:45:53 +01:00

sandbox-common-smoke.yml

Revert "ci: use Blacksmith checkout cache"

2026-04-21 03:21:48 +01:00

stale.yml

Adjust message for stale workflow

2026-04-26 20:31:00 -05:00

test-performance-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00