Patrick Erichsen
1cc673a9e5
fix: preserve skill markdown in security dataset
...
Preserve multiline SKILL.md content in security dataset exports and include the primary readme as a checksum-bearing bundle entry.
2026-07-08 15:29:07 -07:00
Vincent Koc
91dc9b1486
fix(ci): right-size security dataset snapshots
...
Right-size the ClawHub security dataset snapshot workflow after the scheduled run exposed a 120-minute shard timeout. Raises the default shard split while preserving hosted-runner max parallelism, tightens override caps, and cancels only superseded manual dry-run exports.\n\nProof: bun test scripts/security-dataset/security-dataset-snapshot-workflow.test.ts; bun run format:check -- .github/workflows/security-dataset-snapshot.yml scripts/security-dataset/security-dataset-snapshot-workflow.test.ts; bun run ci:static; autoreview clean; PR CI 22 successful / 1 skipped.
2026-06-27 06:45:22 -07:00
Patrick Erichsen
6c613df9c4
fix: publish security snapshots to live dataset
...
Publish the moving security snapshot workflow to OpenClaw/clawhub-security-signals-live using a single latest split, with a maintained live dataset card.
2026-06-26 19:05:47 -07:00
Patrick Erichsen
25d3e978cd
fix: allow high-shard security dataset exports
2026-06-26 16:34:44 -07:00
Patrick Erichsen
a163533469
fix: record security dataset hf commit
2026-06-26 15:46:34 -07:00
Patrick Erichsen
886f0320fc
fix: publish security dataset from existing shards
2026-06-26 15:14:58 -07:00
Vincent Koc
a3cc536f08
fix(ci): bound security dataset page exports ( #2900 )
2026-06-27 05:37:09 +08:00
Patrick Erichsen
7f0350d96f
fix: resanitize security dataset splits before publish
2026-06-26 13:38:36 -07:00
Vincent Koc
556b6729dc
fix(ci): cap security dataset snapshot fanout
2026-06-26 11:48:52 -07:00
Patrick Erichsen
5cbb8bfeb4
fix: redact security dataset public metadata ( #2852 )
2026-06-24 14:08:03 -07:00
Patrick Erichsen
f0b37e6ec8
ci: lower security dataset export min page size ( #2848 )
2026-06-24 08:14:28 -07:00
Patrick Erichsen
f82709a34e
ci: validate security dataset guardrails structurally ( #2846 )
...
* ci: validate security dataset guardrails structurally
* test: tolerate canonical link nonce in prod smoke
2026-06-24 05:43:43 -07:00
Patrick Erichsen
bbdc14c245
ci: chunk security dataset snapshot export
...
Split the security dataset snapshot workflow into a planning job, bounded export shards, and a final merge/publish job so production exports do not depend on one long-running runner.
2026-06-23 23:11:44 -07:00
Patrick Erichsen
dfb93eab79
fix: make security dataset export more adaptive
...
Merge PR #2814 after exact-head checks passed.
2026-06-23 15:19:20 -07:00
Patrick Erichsen
071c43da43
fix: shrink security dataset export batches
2026-06-23 12:52:50 -07:00
Patrick Erichsen
e82f0704c8
Publish security dataset from live Convex export ( #2800 )
...
* feat(cli): restore skill sync command
* feat: publish security dataset from live export
2026-06-22 22:40:09 -07:00
Patrick Erichsen
1e7de4a2a2
fix: remove retired capability metadata surfaces
...
Remove retired capabilities/capabilityTags/executesCode surfaces for skills and plugins, add guarded cleanup tooling for legacy rows, and sanitize pre-cleanup legacy seed/release payloads.
2026-06-16 17:03:44 -07:00
Patrick Erichsen
03f97349b0
fix: preserve legacy package ZIP hashes ( #2636 )
...
* test: fix indexed row helper lint
* fix: preserve legacy package zip hashes
2026-06-14 18:56:31 -07:00
Patrick Erichsen
9aa3f37ee1
feat: export skill bundle content for security datasets ( #2448 )
2026-05-30 12:11:19 -05:00
Patrick Erichsen
51967bca7f
feat: export skillspector issue details ( #2430 )
2026-05-28 10:32:28 -05:00
Patrick Erichsen
05f27f640e
feat: export skillspector dataset signals ( #2424 )
2026-05-28 08:40:54 -05:00
Patrick Erichsen
c538848a3d
feat: use SkillSpector for agentic risk findings ( #2383 )
...
* feat: use SkillSpector for agentic risk findings
* fix: harden SkillSpector result handling
2026-05-23 15:31:58 -07:00
Patrick Erichsen
a1666bb1e6
feat: export ClawScan findings sidecar ( #2201 )
...
* feat: export clawscan findings sidecar
* fix: canonicalize clawscan sidecar fields
2026-05-13 09:45:33 -07:00
Vincent Koc
dfc0d540d8
chore(ci): enforce formatting
2026-04-30 23:39:28 -07:00
Patrick Erichsen
42bc312151
feat: export redacted skill content for security dataset
2026-04-30 14:51:26 -07:00
Patrick Erichsen
94d358e25b
chore: move security eval pipelines out of clawhub
2026-04-30 00:48:14 -07:00
Vincent Koc
50ee17ce7d
style(security-dataset): format eval CLI test
2026-04-29 23:11:04 -07:00
Vincent Koc
0079d3f09a
test(security-dataset): cover eval CLI outputs
2026-04-29 23:10:41 -07:00
Vincent Koc
f3a1d7fc32
feat(security-dataset): expand eval scanner metrics
2026-04-29 23:02:54 -07:00
Vincent Koc
f3c060c360
fix(security-dataset): adapt oversized export batches
2026-04-29 22:49:17 -07:00
Vincent Koc
2325c21108
fix(security-dataset): include export entry names in parser errors
2026-04-29 22:43:51 -07:00
Vincent Koc
1a9d80a43d
merge: sync testbox setup with latest main
...
* origin/main:
fix(security-dataset): compress batched export output
2026-04-29 22:33:39 -07:00
Vincent Koc
0a9f969775
merge: sync testbox setup with main
...
* origin/main:
fix(security-dataset): align export batch types
fix(security-dataset): keep batch output smaller
test(security-dataset): use node environment for export parser
fix(security-dataset): batch export pages server-side
# Conflicts:
# scripts/security-dataset/convexExport.test.ts
2026-04-29 22:33:24 -07:00
Vincent Koc
9917881331
fix(security-dataset): compress batched export output
2026-04-29 22:33:09 -07:00
Vincent Koc
eec9702fa3
fix(security-dataset): align export batch types
2026-04-29 22:30:14 -07:00
Vincent Koc
4a09eafe42
fix(security-dataset): keep batch output smaller
2026-04-29 22:27:58 -07:00
Vincent Koc
076b938724
fix(test): isolate Convex export zip fixture
2026-04-29 22:27:02 -07:00
Vincent Koc
33b921af29
test(security-dataset): use node environment for export parser
2026-04-29 22:24:29 -07:00
Vincent Koc
8230c1e365
fix(security-dataset): batch export pages server-side
2026-04-29 22:22:17 -07:00
Vincent Koc
9ebf7d7bde
feat(security-dataset): ingest Convex exports locally
2026-04-29 22:14:21 -07:00
Vincent Koc
55dc372ecf
fix(security-dataset): type Convex output parser fallback
2026-04-29 22:08:38 -07:00
Vincent Koc
667c69a28b
feat(security-dataset): add snapshot time windows
2026-04-29 22:08:38 -07:00
Vincent Koc
415c8e182e
fix(security-dataset): parse matching Convex output
2026-04-29 22:03:04 -07:00
Vincent Koc
c8585875bd
fix(security-dataset): add snapshot manifest lineage
2026-04-29 21:50:30 -07:00
Vincent Koc
8ac5881b4f
fix(security-dataset): retry invalid export pages
2026-04-29 21:45:16 -07:00
Vincent Koc
1e6f9bd44c
fix(security-dataset): enforce sharded export limits
2026-04-29 21:43:00 -07:00
Vincent Koc
0150b384a7
fix(security-dataset): stream sharded exports
2026-04-29 21:37:34 -07:00
Vincent Koc
94102e28f5
fix(security-dataset): parse large Convex pages
2026-04-29 21:28:21 -07:00
Vincent Koc
463e9b3fa7
fix(security-dataset): handle large export pages
2026-04-29 21:26:16 -07:00
Vincent Koc
09820d0d1c
fix(security-dataset): keep exports internal
2026-04-29 21:19:23 -07:00
Patrick Erichsen