@@ -0,0 +1,76 @@
1+name: openclaw-codeql-plugin-boundary-critical-quality
2+3+disable-default-queries: true
4+5+queries:
6+ - uses: security-and-quality
7+8+query-filters:
9+ - include:
10+problem.severity:
11+ - error
12+ - exclude:
13+tags:
14+ - security
15+16+paths:
17+ - src/plugins/activation-planner.ts
18+ - src/plugins/api-builder.ts
19+ - src/plugins/bundled-compat.ts
20+ - src/plugins/bundled-dir.ts
21+ - src/plugins/bundled-plugin-metadata.ts
22+ - src/plugins/bundled-public-surface-runtime-root.ts
23+ - src/plugins/bundled-runtime-deps.ts
24+ - src/plugins/bundled-runtime-root.ts
25+ - src/plugins/captured-registration.ts
26+ - src/plugins/config-activation-shared.ts
27+ - src/plugins/config-contracts.ts
28+ - src/plugins/config-normalization-shared.ts
29+ - src/plugins/config-policy.ts
30+ - src/plugins/config-schema.ts
31+ - src/plugins/config-state.ts
32+ - src/plugins/discovery.ts
33+ - src/plugins/effective-plugin-ids.ts
34+ - src/plugins/externalized-bundled-plugins.ts
35+ - src/plugins/installed-plugin-index*.ts
36+ - src/plugins/loader*.ts
37+ - src/plugins/manifest*.ts
38+ - src/plugins/module-export.ts
39+ - src/plugins/package-entrypoints.ts
40+ - src/plugins/plugin-registry*.ts
41+ - src/plugins/provider-contract-public-artifacts.ts
42+ - src/plugins/provider-public-artifacts.ts
43+ - src/plugins/public-surface*.ts
44+ - src/plugins/registry.ts
45+ - src/plugins/registry-types.ts
46+ - src/plugins/runtime
47+ - src/plugins/runtime-state.ts
48+ - src/plugins/runtime.ts
49+ - src/plugins/sdk-alias.ts
50+ - src/plugins/source-loader.ts
51+ - src/plugins/types.ts
52+ - src/plugins/validation-diagnostics.ts
53+ - src/plugins/web-provider-public-artifacts*.ts
54+ - src/plugin-sdk/*entry*.ts
55+ - src/plugin-sdk/*facade*.ts
56+ - src/plugin-sdk/api-baseline.ts
57+ - src/plugin-sdk/config-schema.ts
58+ - src/plugin-sdk/config-types.ts
59+ - src/plugin-sdk/core.ts
60+ - src/plugin-sdk/extension-shared.ts
61+62+paths-ignore:
63+ - "**/node_modules"
64+ - "**/coverage"
65+ - "**/*.generated.ts"
66+ - "**/*.bundle.js"
67+ - "**/*-runtime.js"
68+ - "**/*.test.ts"
69+ - "**/*.test.tsx"
70+ - "**/*.e2e.test.ts"
71+ - "**/*.e2e.test.tsx"
72+ - "**/*test-support*"
73+ - "**/*test-helper*"
74+ - "**/*mock*"
75+ - "**/*fixture*"
76+ - "**/*bench*"
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。