Vincent Koc bd51f82efa fix(security): harden CodeQL secret ref validation ...

Remediate current-profile CodeQL findings for file SecretRef id validation and release workflow job permissions. Includes changelog credit. Thanks @vincentkoc.

2026-04-27 13:53:27 -07:00

..

auto-response.yml

fix(triage): extract barnacle workflow

2026-04-25 17:43:08 -07:00

ci-build-artifacts-testbox.yml

ci(testbox): save build artifact cache before wait

2026-04-26 21:07:02 -07:00

ci-check-testbox.yml

ci: increase checkout retry budget

2026-04-23 17:48:21 +01:00

ci.yml

ci: add full release validation workflow

2026-04-27 02:02:34 +01:00

codeql.yml

fix(ci): add macOS CodeQL security shard

2026-04-27 13:40:34 -07:00

control-ui-locale-refresh.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

style: format repository

2026-04-26 05:47:12 +01:00

docs-sync-publish.yml

ci: rebase docs sync with source preference

2026-04-24 18:58:53 +01:00

docs-translate-trigger-release.yml

feat(docs): add Thai translation support

2026-04-23 06:23:02 +01:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

ci: capture dispatched full validation runs

2026-04-27 15:51:03 +01:00

install-smoke.yml

ci: allow installer smoke baseline override

2026-04-27 00:31:30 +01:00

labeler.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00

macos-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

npm-telegram-beta-e2e.yml

ci: match package Telegram harness to release ref

2026-04-27 14:06:05 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: harden cross-os release harness on Windows

2026-04-27 10:03:38 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: split release validation slow shards

2026-04-27 20:30:17 +01:00

openclaw-npm-release.yml

ci(release): use github runner for npm release gate

2026-04-23 16:49:53 +01:00

openclaw-release-checks.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

openclaw-scheduled-live-checks.yml

ci: run full docker checks daily

2026-04-23 14:32:30 +01:00

package-acceptance.yml

ci: match package Telegram harness to release ref

2026-04-27 14:06:05 +01:00

parity-gate.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

plugin-clawhub-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

plugin-npm-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

qa-live-transports-convex.yml

ci: keep release checks compatible with stable refs

2026-04-27 13:59:49 +01:00

sandbox-common-smoke.yml

Revert "ci: use Blacksmith checkout cache"

2026-04-21 03:21:48 +01:00

stale.yml

Adjust message for stale workflow

2026-04-26 20:31:00 -05:00

test-performance-agent.yml

style: format repository

2026-04-26 05:47:12 +01:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00