5 Commits

Author	SHA1	Message	Date
davida-ps	1b676fd42c	fix(skills): scan staged payload with SkillSpector (#264) ... * fix(skills): scan staged payload with skillspector * fix(skills): embed skillspector report in releases * fix(skills): use body path for release notes	2026-06-10 17:18:54 +03:00
davida-ps	59d54ed778	fix(skills): namespace ClawHub skill slugs (#263) ... * fix(release): map ClawHub publish slugs * fix(release): share skill platform parsing	2026-06-10 16:39:19 +03:00
Burak Bayır	d99f324f72	feat(openclaw-traffic-guardian): add social action review scope (#261) ... * feat(openclaw-traffic-guardian): add social action review scope * fix(openclaw-traffic-guardian): cover background repeats * fix(openclaw-traffic-guardian): address policy review release gates * docs(openclaw-traffic-guardian): credit policy review contributor * docs(openclaw-traffic-guardian): inline contributor credit * docs(openclaw-traffic-guardian): reference policy review spec * ci(skills): allow unreleased version edits * ci(skills): use directory name for release tag checks --------- Co-authored-by: kriptoburak <kriptoburak@users.noreply.github.com> Co-authored-by: David Abutbul <David.a@prompt.security>	2026-06-10 14:46:52 +03:00
davida-ps	c1d1824f86	ci(skills): publish release trust packets + expand skill installer awareness (vercel) (#262) ... * ci(skills): publish release trust packets * ci(skills): simulate beta tag releases * ci(skills): match release version bump rules * chore(skills): group agent skills for installer * chore(skills): make clawtributor global * chore(skills): bump all skills for trust release * ci(skills): require npx install docs * fix(skills): simulate prerelease tag versions * fix(skills): aggregate trust artifact checksum failures * fix(frontend): advertise npx skills suite install * chore(frontend): drop ad hoc homepage copy test * fix(ci): run skill release tooling tests	2026-06-10 13:22:22 +03:00
davida-ps	4dbac421ab	feat(advisories): add provisional GHSA feed (#242) ... * feat(advisories): add provisional ghsa feed * fix(workflows): include advisory signatures in checksums * fix(workflows): mirror ghsa feed at release root * feat(advisories): consolidate ghsa into agent feed * ci(advisories): consolidate ghsa during nvd poll * fix(advisories): retain unreplaced ghsa feed entries * chore(skills): bump advisory feed consumers * fix(release): resolve ts import closure dry run * fix(release): preserve urls while stripping comments * fix(release): ignore skill test-only changes * fix(advisories): follow ghsa pagination links * test(advisories): add nvd ghsa pipeline dry run	2026-05-24 21:41:59 +03:00