9595dad58b
chore(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #181 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](https://github.com/peter-evans/create-pull-request/compare/c0f553fe549906ede9cf27b5156039d195d2ece0...5f6978faf089d4d20b00c7766989d076bb2fc7f1 )
---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
dependency-version: 8.1.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-11 10:43:12 +03:00
e4c1e07544
fix(skills-catalog): resolve platform metadata fallbacks ( #229 )
...
* fix(skills-catalog): resolve platform metadata fallbacks
* fix(skills-catalog): harden platform metadata guards
2026-05-10 16:07:31 +03:00
dfe62457fb
Include hermes-agent in NVD queries and export keywords to environment ( #226 )
...
* fix(workflow): expand NVD Hermes coverage and keep keyword export
* fix(workflow): export concise nvd summary keywords
2026-05-07 14:58:08 +03:00
95f9d758ee
chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 ( #180 )
...
Bumps [actions/github-script](https://github.com/actions/github-script ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3 )
---
updated-dependencies:
- dependency-name: actions/github-script
dependency-version: 9.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 13:06:01 +03:00
f6afc80aa2
chore(deps): bump actions/setup-node from 6.3.0 to 6.4.0 ( #218 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 12:58:47 +03:00
9462fe7e1b
chore(deps): bump actions/configure-pages from 5.0.0 to 6.0.0 ( #219 )
...
Bumps [actions/configure-pages](https://github.com/actions/configure-pages ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/configure-pages/releases )
- [Commits](https://github.com/actions/configure-pages/compare/983d7736d9b0ae728b81ab479565c72886d7745b...45bfe0192ca1faeb007ade9deae92b16b8254a0d )
---
updated-dependencies:
- dependency-name: actions/configure-pages
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 12:43:36 +03:00
e3337d0f33
chore(deps): bump actions/upload-pages-artifact from 4.0.0 to 5.0.0 ( #220 )
...
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact ) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/actions/upload-pages-artifact/releases )
- [Commits](https://github.com/actions/upload-pages-artifact/compare/7b1f4a764d45c48632c6b24a0339c27f5614fb0b...fc324d3547104276b827a68afc52ff2a11cc49c9 )
---
updated-dependencies:
- dependency-name: actions/upload-pages-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 11:13:41 +03:00
72663ab80b
fix(codeql): ignore generated dist artifacts ( #216 )
2026-05-04 11:37:37 +03:00
d23f1f9612
chore(deps): bump aquasecurity/trivy-action ( #184 )
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from e368e328979b113139d6f9068e03accaed98a518 to ed142fd0673e97e23eac54620cfb913e5ce36c25.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/e368e328979b113139d6f9068e03accaed98a518...ed142fd0673e97e23eac54620cfb913e5ce36c25 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-version: 264c9c5e188ea085e7377fd77abd17bfbd4e5926
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 18:11:57 +03:00
ef6b5f63d4
chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #179 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 18:06:10 +03:00
12afd15dd6
chore(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 ( #182 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.6.1 to 3.0.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/153bb8e04406b158c6c84fc1615b65b24149a1fe...b4309332981a82ec1c5618f44dd2e27cc8bfbfda )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 18:00:01 +03:00
b37162a33d
feat(i18n): add multilingual wiki scaffolding, language switcher, and… ( #212 )
...
* feat(i18n): add multilingual wiki scaffolding, language switcher, and translation QA pipeline
* docs(readme): adopt picoclaw-style multilingual link bar
* fix(i18n): repair localized index links and tighten partial-pair QA
* ci(i18n): fail on broken markdown links in README/wiki
* ci(i18n): add changed-files mode for markdown link checks
* i18n(de): use local Argos MT to fill untranslated German sections
* i18n(es,fr): fill untranslated sections via local Argos workflow
* i18n(ja): fill untranslated sections with scoped local Argos pass
* i18n(ko): fill untranslated sections with scoped local Argos pass
* fix(i18n): address review feedback
---------
Co-authored-by: David Abutbul <David.a@prompt.security >
2026-04-29 09:00:31 +03:00
627d20b7e1
chore(deps): bump ruff from 0.15.9 to 0.15.12 in /.github ( #210 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.15.9 to 0.15.12.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.9...0.15.12 )
---
updated-dependencies:
- dependency-name: ruff
dependency-version: 0.15.12
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-28 14:37:49 +03:00
0d2e38ddfd
Add Picoclaw guardian + posture-review skills at v0.0.1 with wiki docs ( #208 )
...
* Add Picoclaw guardian + posture-review skills at v0.0.1 with wiki docs
* fix(feed): add picoclaw to core platform taxonomy and filters
* fix(picoclaw): resolve eslint errors in new skills
* chore(nvd): include picoclaw in CVE polling and cleanup report
---------
Co-authored-by: David Abutbul <David.a@prompt.security >
2026-04-26 14:19:18 +03:00
1efb813ed4
fix(nvd): support full CVE rebuild without arg overflow ( #204 )
...
* fix(nvd): add hermes query specs to feed polling
* fix(nvd): derive platform fallback from matched targets
* fix(nvd): avoid arg overflow on full cve rescan
* fix(feed): add other platform filter for nonstandard slugs
* refactor(feed): centralize advisory platform badge mapping
* fix(feed): share platform normalization and fix tab callback typing
* refactor(feed): simplify platform descriptor fallback
2026-04-22 13:58:34 +03:00
c54f09c3a4
fix(nvd): add hermes query specs to feed polling ( #203 )
...
* fix(nvd): add hermes query specs to feed polling
* fix(nvd): derive platform fallback from matched targets
2026-04-21 16:18:45 +03:00
d0fe8c59c4
fix(release): guard duplicate clawhub versions and bump watchdog to 0.1.4 ( #201 )
2026-04-17 10:07:45 +03:00
c72f366354
fix(ci): harden nvd/scorecard dependency guardrails ( #177 )
...
* fix(ci): harden nvd/scorecard dependency guardrails
* fix(ci): upsert nvd advisory PRs and dedupe stale branches
* fix(ci): paginate NVD PR lookup and expand scorecard triggers
2026-04-09 10:30:20 +03:00
6c17509c80
chore(deps): bump actions/setup-python from 5.4.0 to 6.2.0 ( #108 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 5.4.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v5.4.0...a309ff8b426b58ec0e2a45f0f869d46889d02405 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-09 00:22:37 +03:00
eeb1a5d632
chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 ( #135 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.5.0 to 2.6.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/a06a81a03ee405af7f2048a818ed3f03bbf83c7b...153bb8e04406b158c6c84fc1615b65b24149a1fe )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 23:58:19 +03:00
b39fe73e45
chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 ( #159 )
...
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages ) from 4.0.5 to 5.0.0.
- [Release notes](https://github.com/actions/deploy-pages/releases )
- [Commits](https://github.com/actions/deploy-pages/compare/d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e...cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 )
---
updated-dependencies:
- dependency-name: actions/deploy-pages
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 23:53:52 +03:00
7cafbd7d77
chore(deps): bump github/codeql-action from 4.32.4 to 4.35.1 ( #160 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.4 to 4.35.1.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/89a39a4e59826350b863aa6b6252a07ad50cf83e...c10b8064de6f491fea524254123dbe5e09572f13 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 23:50:56 +03:00
a7a0993029
chore(deps): bump ruff from 0.15.6 to 0.15.9 in /.github ( #169 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.15.6 to 0.15.9.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.6...0.15.9 )
---
updated-dependencies:
- dependency-name: ruff
dependency-version: 0.15.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 23:41:52 +03:00
9827f08769
chore(clawsec-suite): add 0.1.5 changelog entry ( #174 )
...
* chore(clawsec-suite): add 0.1.5 changelog release notes
* fix(ci): enforce release notes for bumped skills
2026-04-08 23:35:16 +03:00
b996cff4bd
fix(clawsec-suite): use release metadata for heartbeat version check ( #173 )
...
* fix(clawsec-suite): stop false heartbeat update alerts
* chore(deps): remediate npm audit vulnerabilities
* docs(heartbeats): harden release lookup and fallback behavior
* chore(skills): remove prompt-agent
* chore(clawsec-suite): bump version to 0.1.5
* fix(ci): skip removed skills in skill-release validation
2026-04-08 23:18:58 +03:00
989ea41198
chore(deps): bump ruff from 0.15.2 to 0.15.5 in /.github ( #121 )
...
* chore(deps): bump ruff from 0.15.2 to 0.15.5 in /.github
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.15.2 to 0.15.5.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.2...0.15.5 )
---
updated-dependencies:
- dependency-name: ruff
dependency-version: 0.15.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* fix(ci): update flatted lockfile resolution for npm audit
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: David Abutbul <David.a@prompt.security >
2026-03-15 13:11:08 +02:00
f0f0f1db97
fix(clawsec-scanner): release 0.0.2 with real OpenClaw DAST harness ( #128 )
...
* fix(clawsec-scanner): ship real openclaw dast harness in 0.0.2
* fix(clawsec-scanner): classify ts harness limits as info coverage
* docs(wiki): add clawsec-scanner module documentation
* docs(release): add clawsec-suite install guidance to quick install text
* docs(readme): clarify standalone installs and suite optionality
* docs(readme): remove standalone quick-install block
* docs(readme): rename skill section and clarify suite start point
2026-03-10 19:27:22 +02:00
e715c8a625
chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 ( #120 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.2.0 to 6.3.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...53b83947a5a98c8d113130e565377fae1a50d02f )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: 6.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-10 16:51:09 +02:00
0fcc6e6b6d
chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #107 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/b7c566a772e6b6bfb58ed0dc250532a479d7789f...bbbca2ddaa5d8feaa63e36b76fdaad77386f024f )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-10 13:55:23 +02:00
8d292457fb
chore(deps): bump bandit from 1.9.3 to 1.9.4 in /.github ( #103 )
...
Bumps [bandit](https://github.com/PyCQA/bandit ) from 1.9.3 to 1.9.4.
- [Release notes](https://github.com/PyCQA/bandit/releases )
- [Commits](https://github.com/PyCQA/bandit/compare/1.9.3...1.9.4 )
---
updated-dependencies:
- dependency-name: bandit
dependency-version: 1.9.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-10 13:52:00 +02:00
83ce1d0bf5
fix(release): enforce changelog match for tagged skill releases ( #118 )
2026-03-09 21:30:52 +02:00
81c2e60513
fix(ci): temporary clawhub publish workaround for MIT-0 consent ( #117 )
...
* fix(ci): patch clawhub publish payload for temporary MIT-0 consent workaround
* fix(ci): make clawhub publish patch self-contained for tag republish
* fix(clawsec-nanoclaw): harden signature verification boundaries
* chore(clawsec-nanoclaw): bump version to 0.0.3
* fix(clawsec-nanoclaw): normalize integrity policy and baseline paths
2026-03-09 19:30:22 +02:00
79c303fa3f
fix(ci): restore github token flow for skill release ( #99 )
2026-03-02 09:47:42 +02:00
e0eae65586
refactor(ci): extract shared exploitability enrichment helper ( #95 )
...
* refactor(ci): share exploitability enrichment script
* refactor(scripts): reuse shared exploitability enricher in local feed
2026-03-01 21:50:10 +02:00
8ad38dfdc6
feat(ci): add full-scan rebuild mode to NVD polling ( #96 )
2026-03-01 20:00:42 +02:00
3c336021d7
fix(ci): use valid setup-python pin in advisory workflows ( #92 )
2026-03-01 18:54:32 +02:00
073e771b73
Exploitability Context for CVE Advisories ( #89 )
...
* feat(advisories): add exploitability context for CVE advisories
* fix(ci): align exploitability workflow with signing model
* docs(skills): add patch release changelog entries
* chore(clawsec-feed): bump version to 0.0.5
* chore(clawsec-suite): bump version to 0.1.4
* fix(clawsec-nanoclaw): align exploitability handling and nanoclaw integration
* chore(clawsec-nanoclaw): bump version to 0.0.2
* refactor(scripts): share feed path and mirror sync helpers
* refactor(utils): unify cvss vector parsing flow
* refactor(clawsec-nanoclaw): centralize advisory risk evaluation
* docs(exploitability): refresh release metadata dates
* fix(review): align feed signing and advisory dedupe
* chore(clawsec-feed): bump version to 0.0.6
* chore(clawsec-nanoclaw): bump version to 0.0.3
* fix(backfill): limit signing to target feed only
* fix(review): keep skill runtime verify-only and dedupe matching
* chore(clawsec-nanoclaw): bump version to 0.0.4
* chore(skills): align versions with published tags
* feat(feed): enrich local population with exploitability analysis
* docs(exploitability): mark backfill as historical flow
2026-03-01 18:43:24 +02:00
e4ca378603
Codex/fix poll nvd pr auth ( #86 )
...
* chore(gitignore): ignore auto-claude workspace dir
* fix(ci): restore github token auth for poll-nvd workflow
2026-02-27 09:00:17 +02:00
7c0aa37a05
fix pipelines ( #83 )
2026-02-26 12:25:52 +02:00
fefecaa60a
feat(wiki): add full in-app wiki browser and llms index ( #80 )
...
* feat(wiki): add full in-app wiki browser and llms index
* feat(wiki): auto-generate per-page llms exports
* vuln package
* fix(wiki): guard malformed route decoding
* fix(wiki): preserve markdown anchor fragments across page links
* refactor(markdown): share default render components
* fix(wiki): block unsafe markdown link schemes
* fix(wiki): block unsafe markdown image schemes
* docs(wiki): migrate root docs into wiki pages
* chore(wiki): de-track generated llms exports
* chore(wiki): ignore generated public wiki artifacts
* fix(wiki): align llms urls with per-page endpoint pattern
* fix(wiki): derive llms index from wiki index page
* refactor(markdown): share frontmatter and title helpers
* refactor(wiki): share route and llms path mapping
* ci(pages): add pr verify workflow and tighten deploy triggers
2026-02-26 10:43:36 +02:00
8132c23f41
Codex/wiki sync revert working ( #79 )
...
* fix(wiki-sync): restore known-good pat auth flow
* fix(wiki-sync): restore github token write flow
2026-02-26 00:37:50 +02:00
433a9596a6
fix(wiki-sync): use single x-access-token auth path ( #78 )
2026-02-26 00:17:21 +02:00
c17931d38d
Codex/main synced wiki readme ( #77 )
...
* fix(readme): use github-safe demo previews and links
* fix(wiki): map wiki root to index
* refactor(wiki): generate Home from INDEX during sync
2026-02-25 22:22:56 +02:00
516e8f0428
Codex/fix readme video links ( #76 )
...
* fix(readme): use github-safe demo previews and links
* fix(readme): use only github-hosted demo links
* fix(wiki): map wiki root to index
* feat(readme): add lightweight animated gif demo previews
* refactor(wiki): generate Home from INDEX during sync
* fix(ci): remove github token write scopes in workflows
* chore(ci): use existing poll token for write automation
2026-02-25 22:10:52 +02:00
cbc484faf3
Add comprehensive documentation for ClawSec modules and workflows ( #75 )
...
- Introduced glossary for key terms and definitions related to security advisories, skill packaging, and CI/CD processes.
- Documented the Automation and Release Pipelines module, detailing responsibilities, key files, public interfaces, and configuration.
- Added ClawSec Suite Core module documentation, outlining its responsibilities, key files, public interfaces, and configuration.
- Created Frontend Web App module documentation, covering responsibilities, key files, public interfaces, and configuration.
- Added Local Validation and Packaging Tools module documentation, detailing responsibilities, key files, public interfaces, and configuration.
- Documented NanoClaw Integration module, including responsibilities, key files, public interfaces, and configuration.
- Introduced an overview of ClawSec, including purpose, repo layout, entry points, key artifacts, and workflows.
- Added a Security section outlining the security model, cryptographic controls, runtime enforcement, and incident playbooks.
- Created a Testing section detailing the testing strategy, verification layers, CI workflow coverage, and local testing commands.
- Documented the Workflow section, covering the end-to-end lifecycle, primary workflow map, local operator workflow, and operational risks.
2026-02-25 21:44:51 +02:00
037bd125b9
fix: refine target selection logic for advisory workflows ( #72 )
2026-02-25 18:47:34 +02:00
5ef122dd91
feat: enhance platform detection and handling in advisory workflows ( #70 )
2026-02-25 18:07:57 +02:00
938eb929f3
feat: add property-based fuzz tests for advisory parsing, semver matc… ( #69 )
...
* feat: add property-based fuzz tests for advisory parsing, semver matching, and suppression config
* fix(ci): install deps before fuzz test jobs
2026-02-25 17:48:48 +02:00
371d792e97
feat: enhance support for NanoClaw in CVE processing and UI components ( #67 )
2026-02-25 14:18:57 +02:00
0602c0fbe5
chore(deps): bump ruff from 0.15.1 to 0.15.2 in /.github ( #55 )
...
Bumps [ruff](https://github.com/astral-sh/ruff ) from 0.15.1 to 0.15.2.
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.1...0.15.2 )
---
updated-dependencies:
- dependency-name: ruff
dependency-version: 0.15.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-25 13:51:41 +02:00
dependabot[bot]
davida-ps
David Abutbul