Vincent Koc e53c45ba94 ci: shard control ui codeql quality ...

Adds a narrow CodeQL Critical Quality shard for the Control UI/control-plane surface and fixes the custom-theme font-family ReDoS finding discovered by the new shard.

2026-04-28 20:24:19 -07:00

..

auto-response.yml

fix(triage): extract barnacle workflow

2026-04-25 17:43:08 -07:00

ci-build-artifacts-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci-check-testbox.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

ci.yml

test(ci): add plugin prerelease suite to CI (#73741)

2026-04-28 14:52:03 -07:00

clawsweeper-dispatch.yml

ci: disable ClawSweeper commit checks by default

2026-04-29 03:25:20 +01:00

codeql-android-critical-security.yml

ci: schedule android codeql shard (#73430)

2026-04-28 01:54:57 -07:00

codeql-critical-quality.yml

ci: shard control ui codeql quality

2026-04-28 20:24:19 -07:00

codeql-macos-critical-security.yml

ci: split macos codeql shard

2026-04-28 03:14:07 -07:00

codeql.yml

ci: shard channel codeql security

2026-04-28 12:46:44 -07:00

control-ui-locale-refresh.yml

ci: centralize workflow openai model defaults (#70845)

2026-04-24 13:22:35 -07:00

docker-release.yml

fix(security): harden CodeQL secret ref validation

2026-04-27 13:53:27 -07:00

docs-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

docs-sync-publish.yml

ci: rebase docs sync with source preference

2026-04-24 18:58:53 +01:00

docs-translate-trigger-release.yml

feat(docs): add Thai translation support

2026-04-23 06:23:02 +01:00

docs.yml

ci: split docs-only push checks

2026-04-24 17:41:04 +01:00

duplicate-after-merge.yml

ci: add duplicate PR cleanup workflow

2026-04-23 18:41:32 +01:00

full-release-validation.yml

fix(ci): pin release validation child ref

2026-04-29 01:30:53 +01:00

install-smoke.yml

ci: raise Blacksmith Docker cache caps

2026-04-29 01:14:39 +01:00

labeler.yml

fix(github): skip clownfish active PR label

2026-04-28 19:51:26 -07:00

live-media-runner-image.yml

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

macos-release.yml

ci: keep pnpm alignment scoped to CI

2026-04-22 05:58:50 +01:00

npm-telegram-beta-e2e.yml

ci: harden npm telegram artifact upload

2026-04-27 22:13:21 +01:00

openclaw-cross-os-release-checks-reusable.yml

ci: use standard runner for cross-os preparation

2026-04-28 21:47:35 +01:00

openclaw-live-and-e2e-checks-reusable.yml

ci: preinstall ffmpeg for live media checks

2026-04-29 03:48:33 +01:00

openclaw-npm-release.yml

ci(release): use github runner for npm release gate

2026-04-23 16:49:53 +01:00

openclaw-release-checks.yml

ci(release): isolate channel live qa from provider latency

2026-04-29 04:22:01 +01:00

openclaw-scheduled-live-checks.yml

ci: pass provider secrets to testbox

2026-04-28 04:24:15 +01:00

package-acceptance.yml

fix(ci): harden package acceptance refs

2026-04-28 12:53:05 -07:00

parity-gate.yml

fix: normalize QA model refs for parity gates

2026-04-28 23:01:58 +01:00

plugin-clawhub-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

plugin-npm-release.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

qa-live-transports-convex.yml

fix: normalize QA model refs for parity gates

2026-04-28 23:01:58 +01:00

sandbox-common-smoke.yml

Revert "ci: use Blacksmith checkout cache"

2026-04-21 03:21:48 +01:00

stale.yml

Adjust message for stale workflow

2026-04-26 20:31:00 -05:00

test-performance-agent.yml

fix(ci): harden workflow checkouts

2026-04-28 01:37:00 -07:00

workflow-sanity.yml

ci: move lightweight automation off blacksmith

2026-04-22 15:44:34 +01:00