mirror of
https://github.com/openclaw/openclaw.git
synced 2026-08-02 08:31:33 +00:00
f6131a4fbf
* build(deps): remove npm shrinkwrap; mirror pnpm lock into transient package locks npm 12 removed shrinkwrap (command + tarball/root loading). Delete all 82 committed npm-shrinkwrap.json files and stop publishing lockfiles; keep pnpm-lock.yaml as the single reviewed dependency boundary. The generator becomes scripts/generate-npm-package-lock.mjs and feeds plugin bundling via a transient package-lock.json + npm ci (works on npm 11 and 12). Tarball validation treats the published 2026.7.2 beta train as a shrinkwrap transition; self-update npm detection now uses install topology instead of the shipped shrinkwrap. * fix(deps): repair lint, deadcode, and test-type lanes for the npm 12 migration - sort integrity comparisons with an explicit comparator (oxlint) - keep resolveBunGlobalNodeModules module-local (knip unused-export gate) - model npm pack --json as npm<=11 array / npm 12 name-keyed object - default calver destructuring in the tarball test fixture
70 lines
3.8 KiB
Plaintext
70 lines
3.8 KiB
Plaintext
# Protect the ownership rules themselves.
|
|
/.github/CODEOWNERS @steipete
|
|
|
|
# WARNING: GitHub CODEOWNERS uses last-match-wins semantics.
|
|
# If you add overlapping rules below the secops block, include @openclaw/openclaw-secops
|
|
# on those entries too or you can silently remove required secops review.
|
|
# Security-sensitive code, config, and docs require secops review.
|
|
/SECURITY.md @openclaw/openclaw-secops
|
|
/.github/dependabot.yml @openclaw/openclaw-secops
|
|
/.github/codeql/ @openclaw/openclaw-secops
|
|
/.github/workflows/codeql.yml @openclaw/openclaw-secops
|
|
/.github/workflows/codeql-android-critical-security.yml @openclaw/openclaw-secops
|
|
/.github/workflows/codeql-critical-quality.yml @openclaw/openclaw-secops
|
|
/.github/workflows/dependency-guard.yml @openclaw/openclaw-secops
|
|
/.github/workflows/security-sensitive-guard.yml @openclaw/openclaw-secops
|
|
/test/scripts/dependency-guard-workflow.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/dependency-guard-script.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/security-sensitive-guard-workflow.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/security-sensitive-guard-script.test.ts @openclaw/openclaw-secops
|
|
/scripts/github/dependency-guard.mjs @openclaw/openclaw-secops
|
|
/scripts/github/security-sensitive-guard.mjs @openclaw/openclaw-secops
|
|
/.gitignore @openclaw/openclaw-secops
|
|
/package-lock.json @openclaw/openclaw-secops
|
|
/extensions/*/package-lock.json @openclaw/openclaw-secops
|
|
/pnpm-lock.yaml @openclaw/openclaw-secops
|
|
/scripts/generate-npm-package-lock.mjs @openclaw/openclaw-secops
|
|
/src/security/ @openclaw/openclaw-secops
|
|
/src/secrets/ @openclaw/openclaw-secops
|
|
/src/config/*secret*.ts @openclaw/openclaw-secops
|
|
/src/config/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/*auth*.ts @openclaw/openclaw-secops
|
|
/src/gateway/**/*auth*.ts @openclaw/openclaw-secops
|
|
/src/gateway/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/security-path*.ts @openclaw/openclaw-secops
|
|
/src/gateway/resolve-configured-secret-input-string*.ts @openclaw/openclaw-secops
|
|
/packages/gateway-protocol/src/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/server-methods/secrets*.ts @openclaw/openclaw-secops
|
|
/src/agents/*auth*.ts @openclaw/openclaw-secops
|
|
/src/agents/**/*auth*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-profiles*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-health*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-profiles/ @openclaw/openclaw-secops
|
|
/src/agents/sandbox.ts @openclaw/openclaw-secops
|
|
/src/agents/sandbox-*.ts @openclaw/openclaw-secops
|
|
/src/agents/sandbox/ @openclaw/openclaw-secops
|
|
/src/infra/secret-file*.ts @openclaw/openclaw-secops
|
|
/src/cron/stagger.ts @openclaw/openclaw-secops
|
|
/src/cron/service/jobs.ts @openclaw/openclaw-secops
|
|
/docs/security/ @openclaw/openclaw-secops
|
|
/docs/gateway/authentication.md @openclaw/openclaw-secops
|
|
/docs/gateway/sandbox-vs-tool-policy-vs-elevated.md @openclaw/openclaw-secops
|
|
/docs/gateway/sandboxing.md @openclaw/openclaw-secops
|
|
/docs/gateway/secrets-plan-contract.md @openclaw/openclaw-secops
|
|
/docs/gateway/secrets.md @openclaw/openclaw-secops
|
|
/docs/gateway/security/ @openclaw/openclaw-secops
|
|
/docs/cli/approvals.md @openclaw/openclaw-secops
|
|
/docs/cli/sandbox.md @openclaw/openclaw-secops
|
|
/docs/cli/security.md @openclaw/openclaw-secops
|
|
/docs/cli/secrets.md @openclaw/openclaw-secops
|
|
/docs/reference/secretref-credential-surface.md @openclaw/openclaw-secops
|
|
/docs/reference/secretref-user-supplied-credentials-matrix.json @openclaw/openclaw-secops
|
|
|
|
# Release workflow and its supporting release-path checks.
|
|
/.github/workflows/openclaw-npm-release.yml @openclaw/openclaw-release-managers
|
|
/docs/reference/RELEASING.md @openclaw/openclaw-release-managers
|
|
/scripts/openclaw-npm-publish.sh @openclaw/openclaw-release-managers
|
|
/scripts/openclaw-npm-release-check.ts @openclaw/openclaw-release-managers
|
|
/scripts/release-check.ts @openclaw/openclaw-release-managers
|