惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

V
Visual Studio Blog
I
InfoQ
H
Help Net Security
GbyAI
GbyAI
博
博客园 - 叶小钗
Recent Announcements
Recent Announcements
Engineering at Meta
Engineering at Meta
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
爱范儿
爱范儿
Y
Y Combinator Blog
L
LangChain Blog
腾
腾讯CDC
酷 壳 – CoolShell
酷 壳 – CoolShell
WordPress大学
WordPress大学
Stack Overflow Blog
Stack Overflow Blog
F
Fortinet All Blogs
G
Google Developers Blog
Apple Machine Learning Research
Apple Machine Learning Research
The GitHub Blog
The GitHub Blog
T
The Blog of Author Tim Ferriss
博
博客园 - Franky
D
Docker
Jina AI
Jina AI
罗
罗磊的独立博客

Recent Commits to openclaw:main

test: merge chat side-result checks · openclaw/openclaw@ddd2c2a test: merge cron history checks · openclaw/openclaw@f7eb746 test: merge responsive navigation shell checks · openclaw/openclaw@c2e4b47 docs(changelog): add codex oauth fixes · openclaw/openclaw@628e6cd test: merge navigation routing cases · openclaw/openclaw@5d8cecb Tests: mock channel registry bundled fallback · openclaw/openclaw@2b08233 Secrets: avoid broad web search discovery for single plugin config · openclaw/openclaw@a464f59 test: merge config view browser checks · openclaw/openclaw@20cf511 fix(status): align oauth health with runtime · openclaw/openclaw@eed7116 feat: add macOS screen snapshots for monitor preview (#67954) thanks … · openclaw/openclaw@f377db1 fix: report shared auth scopes in hello-ok (#67810) thanks @BunsDev · openclaw/openclaw@0b6c39b Auto-reply: avoid eager bundled route fallback · openclaw/openclaw@3ea1bf4 Tests: narrow session binding contract setup · openclaw/openclaw@54e4e16 fix(macOS): enable undo/redo in webchat composer text input (#34962) · openclaw/openclaw@00951dc Tests: speed up channel setup promotion · openclaw/openclaw@82b529a Docs: refresh agent instructions · openclaw/openclaw@5775fe2 fix(auth): serialize OAuth refresh across agents to fix #26322 (#67876) · openclaw/openclaw@8e79080 test: allow ollama public surface boundary test · openclaw/openclaw@7d4f1a6 Docs: add test performance guardrails · openclaw/openclaw@89706d3 Tests: restore context-engine usage proof · openclaw/openclaw@e4c4f95 Tests: slim context engine runtime coverage · openclaw/openclaw@74c198f ci: retry failed custom checkouts · openclaw/openclaw@0ee5baf test: trim duplicate provider auth onboarding cases · openclaw/openclaw@1ffc02e matrix: fix sessions_spawn --thread subagent session spawning (#67643) · openclaw/openclaw@1ce2596 test: reduce auth choice fixture churn · openclaw/openclaw@857b9cd test: mock health status config boundaries · openclaw/openclaw@9d5ab4a test: mock onboard config io boundary · openclaw/openclaw@299694d test: mock legacy state plugin boundaries · openclaw/openclaw@2713089 test: mock channel install boundaries · openclaw/openclaw@b945248 test: mock doctor preview channel boundaries · openclaw/openclaw@b1a3ad4
ci: avoid token-backed read checkouts · openclaw/openclaw...
steipete · 2026-05-26 · via Recent Commits to openclaw:main

@@ -81,7 +81,8 @@ jobs:

8181

ref: ${{ inputs.target_ref || github.sha }}

8282

fetch-depth: 1

8383

fetch-tags: false

84-

persist-credentials: true

84+

token: ""

85+

persist-credentials: false

8586

submodules: false

86878788

- name: Resolve checkout SHA

@@ -304,7 +305,8 @@ jobs:

304305

ref: ${{ inputs.target_ref || github.sha }}

305306

fetch-depth: 1

306307

fetch-tags: false

307-

persist-credentials: true

308+

token: ""

309+

persist-credentials: false

308310

submodules: false

309311310312

- name: Ensure security base commit

@@ -335,22 +337,20 @@ jobs:

335337

fi

336338

echo "PRE_COMMIT_CONFIG_PATH=$trusted_config" >> "$GITHUB_ENV"

337339338-

- name: Setup Python

340+

- name: Resolve Python runtime

339341

id: setup-python

340-

uses: actions/setup-python@v6

341-

with:

342-

python-version: "3.12"

343-344-

- name: Restore pre-commit cache

345-

uses: actions/cache@v5

346-

with:

347-

path: .cache/pre-commit-security-fast

348-

key: pre-commit-security-fast-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('.pre-commit-config.yaml') }}

349-

restore-keys: |

350-

pre-commit-security-fast-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-

342+

run: |

343+

set -euo pipefail

344+

python3 --version

345+

version="$(python3 - <<'PY'

346+

import platform

347+

print(platform.python_version())

348+

PY

349+

)"

350+

echo "python-version=${version}" >> "$GITHUB_OUTPUT"

351351352352

- name: Install pre-commit

353-

run: python -m pip install --disable-pip-version-check pre-commit==4.2.0

353+

run: python3 -m pip install --disable-pip-version-check pre-commit==4.2.0

354354355355

- name: Detect committed private keys

356356

run: pre-commit run --config "${PRE_COMMIT_CONFIG_PATH:-.pre-commit-config.yaml}" --all-files detect-private-key

@@ -411,7 +411,6 @@ jobs:

411411

env:

412412

CHECKOUT_REPO: ${{ github.repository }}

413413

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

414-

CHECKOUT_TOKEN: ${{ github.token }}

415414

run: |

416415

set -euo pipefail

417416

@@ -427,7 +426,7 @@ jobs:

427426

reset_checkout_dir

428427

git init "$workdir" >/dev/null

429428

git config --global --add safe.directory "$workdir"

430-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

429+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

431430

git -C "$workdir" config gc.auto 0

432431433432

timeout --signal=TERM 30s git -C "$workdir" \

@@ -636,7 +635,6 @@ jobs:

636635

env:

637636

CHECKOUT_REPO: ${{ github.repository }}

638637

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

639-

CHECKOUT_TOKEN: ${{ github.token }}

640638

run: |

641639

set -euo pipefail

642640

@@ -652,7 +650,7 @@ jobs:

652650

reset_checkout_dir

653651

git init "$workdir" >/dev/null

654652

git config --global --add safe.directory "$workdir"

655-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

653+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

656654

git -C "$workdir" config gc.auto 0

657655658656

timeout --signal=TERM 30s git -C "$workdir" \

@@ -723,7 +721,6 @@ jobs:

723721

env:

724722

CHECKOUT_REPO: ${{ github.repository }}

725723

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

726-

CHECKOUT_TOKEN: ${{ github.token }}

727724

run: |

728725

set -euo pipefail

729726

@@ -739,7 +736,7 @@ jobs:

739736

reset_checkout_dir

740737

git init "$workdir" >/dev/null

741738

git config --global --add safe.directory "$workdir"

742-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

739+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

743740

git -C "$workdir" config gc.auto 0

744741745742

timeout --signal=TERM 30s git -C "$workdir" \

@@ -804,7 +801,6 @@ jobs:

804801

env:

805802

CHECKOUT_REPO: ${{ github.repository }}

806803

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

807-

CHECKOUT_TOKEN: ${{ github.token }}

808804

run: |

809805

set -euo pipefail

810806

@@ -820,7 +816,7 @@ jobs:

820816

reset_checkout_dir

821817

git init "$workdir" >/dev/null

822818

git config --global --add safe.directory "$workdir"

823-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

819+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

824820

git -C "$workdir" config gc.auto 0

825821826822

timeout --signal=TERM 30s git -C "$workdir" \

@@ -882,7 +878,6 @@ jobs:

882878

env:

883879

CHECKOUT_REPO: ${{ github.repository }}

884880

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

885-

CHECKOUT_TOKEN: ${{ github.token }}

886881

run: |

887882

set -euo pipefail

888883

@@ -898,7 +893,7 @@ jobs:

898893

reset_checkout_dir

899894

git init "$workdir" >/dev/null

900895

git config --global --add safe.directory "$workdir"

901-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

896+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

902897

git -C "$workdir" config gc.auto 0

903898904899

timeout --signal=TERM 30s git -C "$workdir" \

@@ -958,7 +953,6 @@ jobs:

958953

env:

959954

CHECKOUT_REPO: ${{ github.repository }}

960955

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

961-

CHECKOUT_TOKEN: ${{ github.token }}

962956

run: |

963957

set -euo pipefail

964958

@@ -974,7 +968,7 @@ jobs:

974968

reset_checkout_dir

975969

git init "$workdir" >/dev/null

976970

git config --global --add safe.directory "$workdir"

977-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

971+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

978972

git -C "$workdir" config gc.auto 0

979973980974

timeout --signal=TERM 30s git -C "$workdir" \

@@ -1081,7 +1075,6 @@ jobs:

10811075

env:

10821076

CHECKOUT_REPO: ${{ github.repository }}

10831077

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

1084-

CHECKOUT_TOKEN: ${{ github.token }}

10851078

run: |

10861079

set -euo pipefail

10871080

@@ -1097,7 +1090,7 @@ jobs:

10971090

reset_checkout_dir

10981091

git init "$workdir" >/dev/null

10991092

git config --global --add safe.directory "$workdir"

1100-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

1093+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

11011094

git -C "$workdir" config gc.auto 0

1102109511031096

timeout --signal=TERM 30s git -C "$workdir" \

@@ -1212,7 +1205,6 @@ jobs:

12121205

env:

12131206

CHECKOUT_REPO: ${{ github.repository }}

12141207

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

1215-

CHECKOUT_TOKEN: ${{ github.token }}

12161208

run: |

12171209

set -euo pipefail

12181210

@@ -1228,7 +1220,7 @@ jobs:

12281220

reset_checkout_dir

12291221

git init "$workdir" >/dev/null

12301222

git config --global --add safe.directory "$workdir"

1231-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

1223+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

12321224

git -C "$workdir" config gc.auto 0

1233122512341226

timeout --signal=TERM 30s git -C "$workdir" \

@@ -1362,7 +1354,6 @@ jobs:

13621354

env:

13631355

CHECKOUT_REPO: ${{ github.repository }}

13641356

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

1365-

CHECKOUT_TOKEN: ${{ github.token }}

13661357

run: |

13671358

set -euo pipefail

13681359

@@ -1378,7 +1369,7 @@ jobs:

13781369

reset_checkout_dir

13791370

git init "$workdir" >/dev/null

13801371

git config --global --add safe.directory "$workdir"

1381-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

1372+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

13821373

git -C "$workdir" config gc.auto 0

1383137413841375

timeout --signal=TERM 30s git -C "$workdir" \

@@ -1413,7 +1404,8 @@ jobs:

14131404

repository: openclaw/clawhub

14141405

path: clawhub-source

14151406

fetch-depth: 1

1416-

persist-credentials: true

1407+

token: ""

1408+

persist-credentials: false

1417140914181410

- name: Check docs

14191411

env:

@@ -1432,7 +1424,8 @@ jobs:

14321424

uses: actions/checkout@v6

14331425

with:

14341426

ref: ${{ needs.preflight.outputs.checkout_revision }}

1435-

persist-credentials: true

1427+

token: ""

1428+

persist-credentials: false

14361429

submodules: false

1437143014381431

- name: Setup Python

@@ -1475,7 +1468,8 @@ jobs:

14751468

uses: actions/checkout@v6

14761469

with:

14771470

ref: ${{ needs.preflight.outputs.checkout_revision }}

1478-

persist-credentials: true

1471+

token: ""

1472+

persist-credentials: false

14791473

submodules: false

1480147414811475

- name: Try to exclude workspace from Windows Defender (best-effort)

@@ -1568,7 +1562,8 @@ jobs:

15681562

uses: actions/checkout@v6

15691563

with:

15701564

ref: ${{ needs.preflight.outputs.checkout_revision }}

1571-

persist-credentials: true

1565+

token: ""

1566+

persist-credentials: false

15721567

submodules: false

1573156815741569

- name: Setup Node environment

@@ -1609,7 +1604,8 @@ jobs:

16091604

uses: actions/checkout@v6

16101605

with:

16111606

ref: ${{ needs.preflight.outputs.checkout_revision }}

1612-

persist-credentials: true

1607+

token: ""

1608+

persist-credentials: false

16131609

submodules: false

1614161016151611

- name: Install XcodeGen / SwiftLint / SwiftFormat

@@ -1710,7 +1706,6 @@ jobs:

17101706

env:

17111707

CHECKOUT_REPO: ${{ github.repository }}

17121708

CHECKOUT_SHA: ${{ needs.preflight.outputs.checkout_revision }}

1713-

CHECKOUT_TOKEN: ${{ github.token }}

17141709

run: |

17151710

set -euo pipefail

17161711

@@ -1726,7 +1721,7 @@ jobs:

17261721

reset_checkout_dir

17271722

git init "$workdir" >/dev/null

17281723

git config --global --add safe.directory "$workdir"

1729-

git -C "$workdir" remote add origin "https://x-access-token:${CHECKOUT_TOKEN}@github.com/${CHECKOUT_REPO}.git"

1724+

git -C "$workdir" remote add origin "https://github.com/${CHECKOUT_REPO}.git"

17301725

git -C "$workdir" config gc.auto 0

1731172617321727

timeout --signal=TERM 30s git -C "$workdir" \

此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。