mirror of
https://github.com/openclaw/clawhub.git
synced 2026-07-21 19:25:25 -04:00
Jesse Merhi
303075c82b
* chore: remove retired moderation surfaces * test: cover retired moderation action wrappers * chore: retain moderation security gates * test: cover retired moderation compatibility paths * fix: stop settings queries during account deletion * docs: add retired comment purge command * chore: delete retired scanner tombstones
71 lines
1.6 KiB
YAML
71 lines
1.6 KiB
YAML
name: clawhub-codeql-backend-api-security
|
|
|
|
disable-default-queries: true
|
|
|
|
queries:
|
|
- uses: security-extended
|
|
|
|
query-filters:
|
|
- include:
|
|
precision:
|
|
- high
|
|
- very-high
|
|
tags contain: security
|
|
security-severity: /([7-9]|10)\.(\d)+/
|
|
|
|
paths:
|
|
- convex/auth.config.ts
|
|
- convex/auth.ts
|
|
- convex/http.ts
|
|
- convex/httpApi.ts
|
|
- convex/httpApiV1
|
|
- convex/packagePublishTokens.ts
|
|
- convex/packages.ts
|
|
- convex/publishers.ts
|
|
- convex/rateLimits.ts
|
|
- convex/skills.ts
|
|
- convex/skillTransfers.ts
|
|
- convex/tokens.ts
|
|
- convex/uploads.ts
|
|
- convex/vt.ts
|
|
- convex/webhooks.ts
|
|
- convex/lib/access.ts
|
|
- convex/lib/apiTokenAuth.ts
|
|
- convex/lib/githubActionsOidc.ts
|
|
- convex/lib/httpHeaders.ts
|
|
- convex/lib/httpRateLimit.ts
|
|
- convex/lib/httpUtils.ts
|
|
- convex/lib/manualOverrides.ts
|
|
- convex/lib/moderation.ts
|
|
- convex/lib/moderationEngine.ts
|
|
- convex/lib/moderationReasonCodes.ts
|
|
- convex/lib/packageRegistry.ts
|
|
- convex/lib/packageSecurity.ts
|
|
- convex/lib/publishers.ts
|
|
- convex/lib/publishLimits.ts
|
|
- convex/lib/reporting.ts
|
|
- convex/lib/securityPrompt.ts
|
|
- convex/lib/skillPublish.ts
|
|
- convex/lib/skillSafety.ts
|
|
- convex/lib/staticPublishScan.ts
|
|
- convex/lib/tokens.ts
|
|
- convex/lib/webhooks.ts
|
|
|
|
paths-ignore:
|
|
- "**/node_modules"
|
|
- "**/coverage"
|
|
- "**/dist"
|
|
- "**/dist/**"
|
|
- "**/*.generated.ts"
|
|
- "**/*.bundle.js"
|
|
- "**/*.test.ts"
|
|
- "**/*.test.tsx"
|
|
- "**/*.e2e.test.ts"
|
|
- "**/*.e2e.test.tsx"
|
|
- "**/*test-support*"
|
|
- "**/*test-helper*"
|
|
- "**/*mock*"
|
|
- "**/*fixture*"
|
|
- "**/*bench*"
|
|
- "convex/_generated/**"
|