Vincent Koc 42e3d8d693 Secrets: add inline allowlist review set (#38314) ...

* Secrets: add inline allowlist review set

* Secrets: narrow detect-secrets file exclusions

* Secrets: exclude Docker fingerprint false positive

* Secrets: allowlist test and docs false positives

* Secrets: refresh baseline after allowlist updates

* Secrets: fix gateway chat fixture pragma

* Secrets: format pre-commit config

* Android: keep talk mode fixture JSON valid

* Feishu: rely on client timeout injection

* Secrets: allowlist provider auth test fixtures

* Secrets: allowlist onboard search fixtures

* Secrets: allowlist onboard mode fixture

* Secrets: allowlist gateway auth mode fixture

* Secrets: allowlist APNS wake test key

* Secrets: allowlist gateway reload fixtures

* Secrets: allowlist moonshot video fixture

* Secrets: allowlist auto audio fixture

* Secrets: allowlist tiny audio fixture

* Secrets: allowlist embeddings fixtures

* Secrets: allowlist resolve fixtures

* Secrets: allowlist target registry pattern fixtures

* Secrets: allowlist gateway chat env fixture

* Secrets: refresh baseline after fixture allowlists

* Secrets: reapply gateway chat env allowlist

* Secrets: reapply gateway chat env allowlist

* Secrets: stabilize gateway chat env allowlist

* Secrets: allowlist runtime snapshot save fixture

* Secrets: allowlist oauth profile fixtures

* Secrets: allowlist compaction identifier fixture

* Secrets: allowlist model auth fixture

* Secrets: allowlist model status fixtures

* Secrets: allowlist custom onboarding fixture

* Secrets: allowlist mattermost token summary fixtures

* Secrets: allowlist gateway auth suite fixtures

* Secrets: allowlist channel summary fixture

* Secrets: allowlist provider usage auth fixtures

* Secrets: allowlist media proxy fixture

* Secrets: allowlist secrets audit fixtures

* Secrets: refresh baseline after final fixture allowlists

* Feishu: prefer explicit client timeout

* Feishu: test direct timeout precedence

2026-03-06 19:35:26 -05:00

..

security

Docs: clarify main secret scan behavior

2026-03-06 14:41:23 -05:00

authentication.md

follow-up: align ingress, atomic paths, and channel tests with credential semantics (#33733)

2026-03-03 20:29:46 -06:00

background-process.md

Exec/ACP: inject OPENCLAW_SHELL into child shell env (#31271)

2026-03-01 20:31:06 -08:00

bonjour.md

fix(security): require explicit trust for first-time TLS pins

2026-02-14 17:55:20 +01:00

bridge-protocol.md

fix(security): harden discovery routing and TLS pins

2026-02-14 17:18:14 +01:00

cli-backends.md

feat(openai): add gpt-5.4 support for API and Codex OAuth (#36590)

2026-03-05 21:01:37 -08:00

configuration-examples.md

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

configuration-reference.md

feat(compaction): make post-compaction context sections configurable (#34556)

2026-03-06 14:57:15 -08:00

configuration.md

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

discovery.md

fix(security): require explicit trust for first-time TLS pins

2026-02-14 17:55:20 +01:00

doctor.md

CLI: make read-only SecretRef status flows degrade safely (#37023)

2026-03-05 23:07:13 -06:00

gateway-lock.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

health.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

heartbeat.md

Docs: cover heartbeat, cron, and plugin route updates

2026-03-05 17:05:21 -05:00

index.md

docs(secrets): add dedicated apply plan contract page

2026-02-26 14:47:22 +00:00

local-models.md

docs: tighten subscription guidance and update MiniMax M2.5 refs

2026-03-03 00:02:37 +00:00

logging.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

multiple-gateways.md

docs(security): clarify canvas host exposure and auth

2026-02-14 14:57:19 +01:00

network-model.md

fix(gateway): harden canvas auth with session capabilities

2026-02-19 15:51:22 +01:00

openai-http-api.md

fix(gateway): enforce owner boundary for agent runs

2026-03-02 00:27:44 +00:00

openresponses-http-api.md

Gateway: normalize HEIC input_image sources (#38122)

2026-03-06 11:19:36 -05:00

pairing.md

Docs: add nav titles across docs (#5689)

2026-01-31 15:04:03 -06:00

protocol.md

refactor!: remove versioned system-run approval contract

2026-03-02 01:12:53 +00:00

remote-gateway-readme.md

refactor: replace bot.molt identifiers with ai.openclaw

2026-02-25 05:03:24 +00:00

remote.md

fix(gateway): allow ws:// to private network addresses (#28670)

2026-03-01 20:49:45 -08:00

sandbox-vs-tool-policy-vs-elevated.md

chore: Run pnpm format:fix.

2026-01-31 21:13:13 +09:00

sandboxing.md

feat(security): Harden Docker browser container chromium flags (#23889) (#31504)

2026-03-02 11:28:27 -08:00

secrets-plan-contract.md

feat(secrets): expand SecretRef coverage across user-supplied credentials (#29580)

2026-03-03 02:58:20 +00:00

secrets.md

Secrets: add inline allowlist review set (#38314)

2026-03-06 19:35:26 -05:00

tailscale.md

fix(gateway): scope tailscale tokenless auth to websocket

2026-02-21 13:03:13 +01:00

tools-invoke-http-api.md

fix: classify /tools/invoke errors and sanitize 500s (#13185) (thanks @davidrudduck)

2026-02-13 16:58:30 +01:00

troubleshooting.md

docs: clarify Anthropic context1m long-context requirements

2026-03-01 22:35:26 +00:00

trusted-proxy-auth.md

docs: refresh CLI and trusted-proxy docs

2026-02-25 02:40:12 +00:00