2 Commits

Author	SHA1	Message	Date
Aldo Delgado	7cdb4ab7e2	fix(portability): harden cross-platform path handling and install workflows (#62) ... * docs: add agent collaboration and git safety rules to AGENTS.md * fix(portability): harden cross-platform path handling and install workflows - add shared path resolution utility for advisory guardian components - expand and normalize home-path tokens: ~, $HOME, ${HOME}, %USERPROFILE%, $env:USERPROFILE - reject unresolved/escaped home tokens to prevent literal "$HOME" directory creation - fix install/runtime path handling in: - openclaw-audit-watchdog setup_cron and suppression config loader - clawsec-suite advisory hook handler, suppression loader, and guarded installer - remove hardcoded Homebrew binary assumptions in watchdog scripts/tests - add LF enforcement via .gitattributes to reduce CRLF script breakage - expand CI Node checks to linux/macos/windows matrix - add cross-platform test coverage for path expansion and token rejection - update README and SKILL docs with bash/zsh/PowerShell-safe path guidance - add compatibility deliverables: - docs/COMPATIBILITY_REPORT.md - docs/REMEDIATION_PLAN.md - docs/PLATFORM_VERIFICATION.md Validation: - node skills/clawsec-suite/test/path_resolution.test.mjs - node skills/clawsec-suite/test/guarded_install.test.mjs - node skills/clawsec-suite/test/advisory_suppression.test.mjs - node skills/openclaw-audit-watchdog/test/suppression_config.test.mjs - node skills/openclaw-audit-watchdog/test/render_report_suppression.test.mjs * fix(advisory): avoid fail-open on invalid path vars and cover watchdog tests * docs: move signing runbooks into docs folder * docs: remove root-level signing runbooks after move * chore(clawsec-suite): bump version to 0.1.3 * chore(openclaw-audit-watchdog): bump version to 0.1.1 * docs(changelog): add entries for clawsec-suite 0.1.3 and watchdog 0.1.1 * docs(changelog): credit @aldodelgado for PR #62 contributions * feat(clawsec-suite): scope advisories to openclaw application * fix(ci): run advisory scope tests without TypeScript loader --------- Co-authored-by: David Abutbul <David.a@prompt.security>	2026-02-25 13:24:31 +02:00
davida-ps	83ec542a1e	feat: add clawsec-advisory-guardian hook for advisory monitoring and … (#9) ... * feat: add clawsec-advisory-guardian hook for advisory monitoring and user approval - Implemented clawsec-advisory-guardian hook to detect advisories for installed skills. - Added handler for processing advisory matches and notifying users. - Created scripts for setting up advisory hooks and cron jobs for periodic scans. - Introduced guarded skill installation script requiring user confirmation for high-risk advisories. - Updated skill.json to reflect new features and embedded components for advisory monitoring. * chore(clawsec-suite): bump version to 0.0.8 * feat: enhance release script to support version tagging and improve install function * fix: use globalThis for AbortController and timeout functions in loadRemoteFeed * Update scripts/release-skill.sh Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Update skills/clawsec-suite/scripts/guarded_skill_install.mjs Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Update scripts/release-skill.sh Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Normalize version input by removing leading 'v' in versionMatches function * Add dirName property to InstalledSkill and update alert message paths * Enhance file permission handling in persistState function and add warning for chmod errors * Refactor advisory guardian hook: modularize utility functions, version handling, and feed management - Moved utility functions (isObject, normalizeSkillName, uniqueStrings) to lib/utils.mjs - Created version handling functions (parseSemver, compareSemver, versionMatches) in lib/version.mjs - Implemented feed management functions (parseAffectedSpecifier, isValidFeedPayload, loadRemoteFeed) in lib/feed.mjs - Updated handler.ts to utilize new modular functions for improved readability and maintainability - Added new types and state management in lib/types.ts and lib/state.ts - Updated scripts to reflect new file structure and dependencies * Update skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/matching.ts Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Add published field to Advisory type and refine version matching logic * Set default version to "unknown" in discoverInstalledSkills and adjust versionMatches logic * Update skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/version.mjs Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Update skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/matching.ts Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> * Update skills/clawsec-suite/hooks/clawsec-advisory-guardian/lib/version.mjs Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com> --------- Co-authored-by: baz-reviewer[bot] <174234987+baz-reviewer[bot]@users.noreply.github.com>	2026-02-08 23:34:27 +02:00