Peter Steinberger b9c6789560 feat(secrets): authenticated egress substitution proxy with destination binding (#123216) ...

* feat(secrets): add authenticated egress substitution proxy

* feat(secrets): bind egress substitution to hosts

* ci(codeql): classify egress proxy bypass tunnel in network boundary query

* refactor(proxy-capture): use the canonical IP parser instead of node:net

* fix(secrets): compare proxy tokens with a process-keyed MAC

2026-08-13 20:49:31 -07:00

..

openclaw-boundary

feat(secrets): authenticated egress substitution proxy with destination binding (#123216)

2026-08-13 20:49:31 -07:00

codeql-actions-critical-security.yml

chore(ci): widen CodeQL PR guard

2026-04-29 20:06:50 -07:00

codeql-agent-runtime-boundary-critical-quality.yml

refactor: internalize OpenClaw agent runtime (#85341)

2026-05-27 19:24:04 +01:00

codeql-android-critical-security.yml

fix(codeql): tune Android pinning profile

2026-04-27 23:04:16 -07:00

codeql-channel-runtime-boundary-critical-quality.yml

refactor(qqbot): install plugin from Tencent package (#107295)

2026-08-11 15:10:27 -07:00

codeql-channel-runtime-boundary-critical-security.yml

refactor: extract gateway client package (#87797)

2026-05-29 02:23:42 +01:00

codeql-config-boundary-critical-quality.yml

ci: shard config codeql quality

2026-04-28 04:00:14 -07:00

codeql-core-auth-secrets-critical-quality.yml

refactor: extract gateway client package (#87797)

2026-05-29 02:23:42 +01:00

codeql-core-auth-secrets-critical-security.yml

refactor: extract gateway client package (#87797)

2026-05-29 02:23:42 +01:00

codeql-gateway-runtime-boundary-critical-quality.yml

refactor: extract gateway client package (#87797)

2026-05-29 02:23:42 +01:00

codeql-macos-critical-security.yml

fix(ci): add macOS CodeQL security shard

2026-04-27 13:40:34 -07:00

codeql-mcp-process-runtime-boundary-critical-quality.yml

ci: add mcp process codeql quality shard

2026-04-28 23:36:34 -07:00

codeql-mcp-process-tool-boundary-critical-security.yml

refactor(agents): split message-tool into concept modules (#121901)

2026-08-11 00:31:14 -07:00

codeql-memory-runtime-boundary-critical-quality.yml

refactor(memory)!: remove the QMD backend; builtin is the only memory engine (#120936)

2026-08-09 03:05:47 -07:00

codeql-network-runtime-boundary-critical-quality.yml

feat(secrets): authenticated egress substitution proxy with destination binding (#123216)

2026-08-13 20:49:31 -07:00

codeql-network-ssrf-boundary-critical-security.yml

fix(security): unify secret-redaction and SSRF policy ownership (#121335)

2026-08-09 22:40:58 -07:00

codeql-plugin-boundary-critical-quality.yml

chore(deadcode): prune stale codeql paths

2026-06-22 08:33:19 +08:00

codeql-plugin-sdk-package-contract-critical-quality.yml

ci: add codeql quality profile input (#74348)

2026-04-29 22:39:54 +08:00

codeql-plugin-sdk-reply-runtime-critical-quality.yml

chore(ci): add Plugin SDK reply CodeQL quality shard

2026-04-29 15:56:41 -07:00

codeql-plugin-trust-boundary-critical-security.yml

chore(deadcode): prune stale codeql paths

2026-06-22 08:33:19 +08:00

codeql-process-exec-boundary-critical-security.yml

refactor(memory)!: remove the QMD backend; builtin is the only memory engine (#120936)

2026-08-09 03:05:47 -07:00

codeql-provider-runtime-boundary-critical-quality.yml

chore(ci): add provider runtime CodeQL quality shard

2026-04-29 16:15:38 -07:00

codeql-session-diagnostics-boundary-critical-quality.yml

chore(ci): add session diagnostics CodeQL quality shard

2026-04-29 15:29:03 -07:00

codeql-ui-control-plane-critical-quality.yml

ci: shard control ui codeql quality

2026-04-28 20:24:19 -07:00

codeql-web-media-runtime-boundary-critical-quality.yml

refactor(packages): DM-policy contract suite, dead routes, package folds (#114776)

2026-07-27 20:20:13 -04:00