 davida-ps
|
4dbac421ab
|
feat(advisories): add provisional GHSA feed (#242)
* feat(advisories): add provisional ghsa feed
* fix(workflows): include advisory signatures in checksums
* fix(workflows): mirror ghsa feed at release root
* feat(advisories): consolidate ghsa into agent feed
* ci(advisories): consolidate ghsa during nvd poll
* fix(advisories): retain unreplaced ghsa feed entries
* chore(skills): bump advisory feed consumers
* fix(release): resolve ts import closure dry run
* fix(release): preserve urls while stripping comments
* fix(release): ignore skill test-only changes
* fix(advisories): follow ghsa pagination links
* test(advisories): add nvd ghsa pipeline dry run
|
2026-05-24 21:41:59 +03:00 |
|
 David Abutbul
|
1e48a955cc
|
fix(release): exclude tests from skill payloads (#230)
* fix(release): exclude tests from skill payloads
* fix(release): normalize test path filtering
* fix(release): prefer GitHub artifacts for non-OpenClaw installs
* fix(release): keep legacy ClawHub publishing
* fix(release): address skill packaging review feedback
* chore(skills): bump release versions
* feat(skills): surface recommended platforms
* docs(skills): add signed release verification
* fix(skills): normalize PR version bumps
---------
Co-authored-by: David Abutbul <David.a@prompt.security>
|
2026-05-14 14:38:58 +03:00 |
|
|
davida-ps
|
9e79645536
|
fix(clawsec-nanoclaw): isolate file io from network scan paths (#196)
|
2026-04-17 02:49:47 +03:00 |
|
|
davida-ps
|
81c2e60513
|
fix(ci): temporary clawhub publish workaround for MIT-0 consent (#117)
* fix(ci): patch clawhub publish payload for temporary MIT-0 consent workaround
* fix(ci): make clawhub publish patch self-contained for tag republish
* fix(clawsec-nanoclaw): harden signature verification boundaries
* chore(clawsec-nanoclaw): bump version to 0.0.3
* fix(clawsec-nanoclaw): normalize integrity policy and baseline paths
|
2026-03-09 19:30:22 +02:00 |
|
|
davida-ps
|
073e771b73
|
Exploitability Context for CVE Advisories (#89)
* feat(advisories): add exploitability context for CVE advisories
* fix(ci): align exploitability workflow with signing model
* docs(skills): add patch release changelog entries
* chore(clawsec-feed): bump version to 0.0.5
* chore(clawsec-suite): bump version to 0.1.4
* fix(clawsec-nanoclaw): align exploitability handling and nanoclaw integration
* chore(clawsec-nanoclaw): bump version to 0.0.2
* refactor(scripts): share feed path and mirror sync helpers
* refactor(utils): unify cvss vector parsing flow
* refactor(clawsec-nanoclaw): centralize advisory risk evaluation
* docs(exploitability): refresh release metadata dates
* fix(review): align feed signing and advisory dedupe
* chore(clawsec-feed): bump version to 0.0.6
* chore(clawsec-nanoclaw): bump version to 0.0.3
* fix(backfill): limit signing to target feed only
* fix(review): keep skill runtime verify-only and dedupe matching
* chore(clawsec-nanoclaw): bump version to 0.0.4
* chore(skills): align versions with published tags
* feat(feed): enrich local population with exploitability analysis
* docs(exploitability): mark backfill as historical flow
|
2026-03-01 18:43:24 +02:00 |
|