Harden CI: the live-E2E jobs install from a hash-pinned set

7be5122

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

CodeQL on: dynamic

Analyze (actions)

Analyze (javascript-typescript)

Analyze (python)

Product record (8090 PRD before code) on: pull_request

PR cites the product record that justified it

C6 Required-status-checks gate (PR audit) on: pull_request

C6 Required-status-checks gate

E2E Gate (required) on: pull_request

E2E Gate (required)

API Latency Smoke on: pull_request

PR build

Cross-repo handoff (C4) on: pull_request

Cross-repo handoff (C4)

CI on: pull_request 2

Syntax & Lint

API Tests (ubuntu-latest)

API Tests (ubuntu-latest)

API Tests (macos-latest)

API Tests (windows-latest)

MOAT Verifier (72 tests)

Store invariants (property-based)

Entitlement API tests

Compression Safety Eval (Tier-1)

Red-team corpus (disclosed attacks)

OTLP receiver (with otel extra)

MOAT Keystone (13-endpoint bar)

E2E Browser Tests (critical subset)

pip install (ubuntu-latest, py3.11)

pip install (macos-latest, py3.11)

pip install (windows-latest, py3.11)

pip install (ubuntu-latest, py3.9)

Wheel install & asset presence

Eval Suite Gate (Phase 2 evals)

Live OpenClaw E2E (real gateway + real send-message)

Supply chain on: pull_request

No third-party asset loads

Vendored assets match npm

Vendored fonts not stale

Python dependency audit

Fuzz untrusted parsers

Action references resolve

Security audit (workflows, package-lock, Python source)

OpenSSF Scorecard

OSS Golden Path (C1) on: pull_request 1

OSS golden path (wheel + OpenClaw + 9 tabs)

Code scanning results

CodeQL

Auto-release on [RELEASE] merge on: pull_request

Bump version & publish to PyPI

Select a check to view from the sidebar