alvis
bedb527145
Some checks failed
ClawSweeper Dispatch / dispatch (push) Has been cancelled
CodeQL / Security High (actions) (push) Has been cancelled
CodeQL / Security High (channel-runtime-boundary) (push) Has been cancelled
CodeQL / Security High (core-auth-secrets) (push) Has been cancelled
CodeQL / Security High (mcp-process-tool-boundary) (push) Has been cancelled
CodeQL / Security High (network-ssrf-boundary) (push) Has been cancelled
CodeQL / Security High (plugin-trust-boundary) (push) Has been cancelled
CodeQL / Security High (process-exec-boundary) (push) Has been cancelled
Docs Sync Publish Repo / sync-publish-repo (push) Has been cancelled
Docs / docs (push) Has been cancelled
OpenClaw Stable Main Closeout / Resolve stable release closeout inputs (push) Has been cancelled
OpenClaw Stable Main Closeout / Verify stable main closeout (push) Has been cancelled
Workflow Sanity / no-tabs (push) Has been cancelled
Workflow Sanity / actionlint (push) Has been cancelled
Workflow Sanity / generated-doc-baselines (push) Has been cancelled
CI / runner-admission (push) Has been cancelled
CI / preflight (push) Has been cancelled
CI / security-fast (push) Has been cancelled
CI / pnpm-store-warmup (push) Has been cancelled
CI / build-artifacts (push) Has been cancelled
CI / native-i18n (push) Has been cancelled
CI / ${{ matrix.check_name }} (push) Has been cancelled
CI / ${{ matrix.checkName }} (push) Has been cancelled
CI / checks-node-compat-node22 (push) Has been cancelled
CI / check-bundled-channel-config-metadata (push) Has been cancelled
CI / check-dependencies (push) Has been cancelled
CI / check-guards (push) Has been cancelled
CI / check-lint (push) Has been cancelled
CI / check-prod-types (push) Has been cancelled
CI / check-shrinkwrap (push) Has been cancelled
CI / check-test-types (push) Has been cancelled
CI / check-additional-boundaries-a (push) Has been cancelled
CI / check-additional-boundaries-bcd (push) Has been cancelled
CI / check-additional-extension-bundled (push) Has been cancelled
CI / check-additional-extension-channels (push) Has been cancelled
CI / check-additional-extension-package-boundary (push) Has been cancelled
CI / check-additional-runtime-topology-architecture (push) Has been cancelled
CI / check-session-accessor-boundary (push) Has been cancelled
CI / check-session-transcript-reader-boundary (push) Has been cancelled
CI / check-docs (push) Has been cancelled
CI / skills-python (push) Has been cancelled
CI / macos-swift (push) Has been cancelled
CI / ios-build (push) Has been cancelled
CI / ci-timings-summary (push) Has been cancelled
Native App Locale Refresh / Refresh native fa (push) Has been cancelled
Native App Locale Refresh / Refresh native fr (push) Has been cancelled
Native App Locale Refresh / Refresh native hi (push) Has been cancelled
Native App Locale Refresh / Refresh native id (push) Has been cancelled
Native App Locale Refresh / Refresh native it (push) Has been cancelled
Native App Locale Refresh / Refresh native ja-JP (push) Has been cancelled
Control UI Locale Refresh / plan (push) Has been cancelled
Control UI Locale Refresh / Refresh ${{ matrix.locale }} (push) Has been cancelled
Control UI Locale Refresh / Commit control UI locale refresh (push) Has been cancelled
Live Media Runner Image / Build live media runner image (push) Has been cancelled
Native App Locale Refresh / Refresh native ar (push) Has been cancelled
Native App Locale Refresh / Refresh native de (push) Has been cancelled
Native App Locale Refresh / Refresh native es (push) Has been cancelled
Native App Locale Refresh / Refresh native ko (push) Has been cancelled
Native App Locale Refresh / Refresh native nl (push) Has been cancelled
Native App Locale Refresh / Refresh native pl (push) Has been cancelled
Native App Locale Refresh / Refresh native pt-BR (push) Has been cancelled
Native App Locale Refresh / Refresh native ru (push) Has been cancelled
Native App Locale Refresh / Refresh native sv (push) Has been cancelled
Native App Locale Refresh / Refresh native th (push) Has been cancelled
Native App Locale Refresh / Refresh native tr (push) Has been cancelled
Native App Locale Refresh / Refresh native uk (push) Has been cancelled
Native App Locale Refresh / Refresh native vi (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-CN (push) Has been cancelled
Native App Locale Refresh / Refresh native zh-TW (push) Has been cancelled
Native App Locale Refresh / Commit native locale refresh (push) Has been cancelled
Plugin Init Scaffold Validation / Validate provider scaffold (push) Has been cancelled
Plugin NPM Release / preview_plugins_npm (push) Has been cancelled
Plugin NPM Release / Validate release publish approval (push) Has been cancelled
Plugin NPM Release / preview_plugin_pack (push) Has been cancelled
Plugin NPM Release / publish_plugins_npm (push) Has been cancelled
Sandbox Common Smoke / sandbox-common-smoke (push) Has been cancelled
Website Installer Sync / static (push) Has been cancelled
Website Installer Sync / linux-docker (push) Has been cancelled
Website Installer Sync / macos-installer (push) Has been cancelled
Website Installer Sync / windows-installer (push) Has been cancelled
Website Installer Sync / sync-website (push) Has been cancelled
Adolf is a fork/vendored clone of github.com/openclaw/openclaw (v2026.6.11), free to diverge. Tree copied sans upstream .git; upstream remote added for future syncs. Node pinned to 24 (.nvmrc); engines already require >=22.19. Preserves docs/ARCHITECTURE.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2
72 lines
3.9 KiB
Plaintext
72 lines
3.9 KiB
Plaintext
# Protect the ownership rules themselves.
|
|
/.github/CODEOWNERS @steipete
|
|
|
|
# WARNING: GitHub CODEOWNERS uses last-match-wins semantics.
|
|
# If you add overlapping rules below the secops block, include @openclaw/openclaw-secops
|
|
# on those entries too or you can silently remove required secops review.
|
|
# Security-sensitive code, config, and docs require secops review.
|
|
/SECURITY.md @openclaw/openclaw-secops
|
|
/.github/dependabot.yml @openclaw/openclaw-secops
|
|
/.github/codeql/ @openclaw/openclaw-secops
|
|
/.github/workflows/codeql.yml @openclaw/openclaw-secops
|
|
/.github/workflows/codeql-android-critical-security.yml @openclaw/openclaw-secops
|
|
/.github/workflows/codeql-critical-quality.yml @openclaw/openclaw-secops
|
|
/.github/workflows/dependency-guard.yml @openclaw/openclaw-secops
|
|
/.github/workflows/security-sensitive-guard.yml @openclaw/openclaw-secops
|
|
/test/scripts/dependency-guard-workflow.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/dependency-guard-script.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/security-sensitive-guard-workflow.test.ts @openclaw/openclaw-secops
|
|
/test/scripts/security-sensitive-guard-script.test.ts @openclaw/openclaw-secops
|
|
/scripts/github/dependency-guard.mjs @openclaw/openclaw-secops
|
|
/scripts/github/security-sensitive-guard.mjs @openclaw/openclaw-secops
|
|
/.gitignore @openclaw/openclaw-secops
|
|
/package-lock.json @openclaw/openclaw-secops
|
|
/npm-shrinkwrap.json @openclaw/openclaw-secops
|
|
/extensions/*/package-lock.json @openclaw/openclaw-secops
|
|
/extensions/*/npm-shrinkwrap.json @openclaw/openclaw-secops
|
|
/pnpm-lock.yaml @openclaw/openclaw-secops
|
|
/scripts/generate-npm-shrinkwrap.mjs @openclaw/openclaw-secops
|
|
/src/security/ @openclaw/openclaw-secops
|
|
/src/secrets/ @openclaw/openclaw-secops
|
|
/src/config/*secret*.ts @openclaw/openclaw-secops
|
|
/src/config/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/*auth*.ts @openclaw/openclaw-secops
|
|
/src/gateway/**/*auth*.ts @openclaw/openclaw-secops
|
|
/src/gateway/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/security-path*.ts @openclaw/openclaw-secops
|
|
/src/gateway/resolve-configured-secret-input-string*.ts @openclaw/openclaw-secops
|
|
/packages/gateway-protocol/src/**/*secret*.ts @openclaw/openclaw-secops
|
|
/src/gateway/server-methods/secrets*.ts @openclaw/openclaw-secops
|
|
/src/agents/*auth*.ts @openclaw/openclaw-secops
|
|
/src/agents/**/*auth*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-profiles*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-health*.ts @openclaw/openclaw-secops
|
|
/src/agents/auth-profiles/ @openclaw/openclaw-secops
|
|
/src/agents/sandbox.ts @openclaw/openclaw-secops
|
|
/src/agents/sandbox-*.ts @openclaw/openclaw-secops
|
|
/src/agents/sandbox/ @openclaw/openclaw-secops
|
|
/src/infra/secret-file*.ts @openclaw/openclaw-secops
|
|
/src/cron/stagger.ts @openclaw/openclaw-secops
|
|
/src/cron/service/jobs.ts @openclaw/openclaw-secops
|
|
/docs/security/ @openclaw/openclaw-secops
|
|
/docs/gateway/authentication.md @openclaw/openclaw-secops
|
|
/docs/gateway/sandbox-vs-tool-policy-vs-elevated.md @openclaw/openclaw-secops
|
|
/docs/gateway/sandboxing.md @openclaw/openclaw-secops
|
|
/docs/gateway/secrets-plan-contract.md @openclaw/openclaw-secops
|
|
/docs/gateway/secrets.md @openclaw/openclaw-secops
|
|
/docs/gateway/security/ @openclaw/openclaw-secops
|
|
/docs/cli/approvals.md @openclaw/openclaw-secops
|
|
/docs/cli/sandbox.md @openclaw/openclaw-secops
|
|
/docs/cli/security.md @openclaw/openclaw-secops
|
|
/docs/cli/secrets.md @openclaw/openclaw-secops
|
|
/docs/reference/secretref-credential-surface.md @openclaw/openclaw-secops
|
|
/docs/reference/secretref-user-supplied-credentials-matrix.json @openclaw/openclaw-secops
|
|
|
|
# Release workflow and its supporting release-path checks.
|
|
/.github/workflows/openclaw-npm-release.yml @openclaw/openclaw-release-managers
|
|
/docs/reference/RELEASING.md @openclaw/openclaw-release-managers
|
|
/scripts/openclaw-npm-publish.sh @openclaw/openclaw-release-managers
|
|
/scripts/openclaw-npm-release-check.ts @openclaw/openclaw-release-managers
|
|
/scripts/release-check.ts @openclaw/openclaw-release-managers
|