diff --git a/.github/workflows/dependency-guard.yml b/.github/workflows/dependency-guard.yml index d780618d90..31b23a2fc5 100644 --- a/.github/workflows/dependency-guard.yml +++ b/.github/workflows/dependency-guard.yml @@ -34,7 +34,7 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} OPENCLAW_DEPENDENCY_GUARD_MODE: detect - OPENCLAW_SECURITY_APPROVERS: vincentkoc,steipete,joshavant + OPENCLAW_SECURITY_APPROVERS: iililiiilili OPENCLAW_SECURITY_TEAM_SLUG: openclaw-secops run: node scripts/github/dependency-guard.mjs @@ -82,7 +82,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} OPENCLAW_DEPENDENCY_GUARD_AUTOSCRUB_TOKEN: ${{ steps.app-token.outputs.token || steps.app-token-fallback.outputs.token }} OPENCLAW_DEPENDENCY_GUARD_MODE: autoscrub - OPENCLAW_SECURITY_APPROVERS: vincentkoc,steipete,joshavant + OPENCLAW_SECURITY_APPROVERS: iililiiilili OPENCLAW_SECURITY_TEAM_SLUG: openclaw-secops run: node scripts/github/dependency-guard.mjs @@ -104,6 +104,6 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} OPENCLAW_DEPENDENCY_GUARD_MODE: enforce - OPENCLAW_SECURITY_APPROVERS: vincentkoc,steipete,joshavant + OPENCLAW_SECURITY_APPROVERS: iililiiilili OPENCLAW_SECURITY_TEAM_SLUG: openclaw-secops run: node scripts/github/dependency-guard.mjs diff --git a/.github/workflows/security-sensitive-guard.yml b/.github/workflows/security-sensitive-guard.yml index 1cc3c5ba2a..2274fe3161 100644 --- a/.github/workflows/security-sensitive-guard.yml +++ b/.github/workflows/security-sensitive-guard.yml @@ -28,7 +28,7 @@ jobs: - name: Detect security-sensitive changes env: GITHUB_TOKEN: ${{ github.token }} - OPENCLAW_SECURITY_APPROVERS: vincentkoc,steipete,joshavant + OPENCLAW_SECURITY_APPROVERS: iililiiilili OPENCLAW_SECURITY_SENSITIVE_GUARD_MODE: detect OPENCLAW_SECURITY_TEAM_SLUG: openclaw-secops run: node scripts/github/security-sensitive-guard.mjs @@ -49,7 +49,7 @@ jobs: - name: Enforce security-sensitive guard env: GITHUB_TOKEN: ${{ github.token }} - OPENCLAW_SECURITY_APPROVERS: vincentkoc,steipete,joshavant + OPENCLAW_SECURITY_APPROVERS: iililiiilili OPENCLAW_SECURITY_SENSITIVE_GUARD_MODE: enforce OPENCLAW_SECURITY_TEAM_SLUG: openclaw-secops run: node scripts/github/security-sensitive-guard.mjs diff --git a/test/scripts/dependency-guard-workflow.test.ts b/test/scripts/dependency-guard-workflow.test.ts index 77db72efff..d3d5b103d1 100644 --- a/test/scripts/dependency-guard-workflow.test.ts +++ b/test/scripts/dependency-guard-workflow.test.ts @@ -184,7 +184,7 @@ describe("dependency guard workflow", () => { const script = readFileSync("scripts/github/dependency-guard.mjs", "utf8"); expect(runStep.env?.OPENCLAW_SECURITY_TEAM_SLUG).toBe("openclaw-secops"); - expect(runStep.env?.OPENCLAW_SECURITY_APPROVERS).toBe("vincentkoc,steipete,joshavant"); + expect(runStep.env?.OPENCLAW_SECURITY_APPROVERS).toBe("iililiiilili"); expect(workflow).toContain("scripts/github/dependency-guard.mjs"); expect(script).toContain('"dependencies-changed"'); expect(script).not.toContain('"blocked: dependencies"'); diff --git a/test/scripts/security-sensitive-guard-workflow.test.ts b/test/scripts/security-sensitive-guard-workflow.test.ts index f5b26c42f7..367c70de0d 100644 --- a/test/scripts/security-sensitive-guard-workflow.test.ts +++ b/test/scripts/security-sensitive-guard-workflow.test.ts @@ -101,9 +101,7 @@ describe("security-sensitive guard workflow", () => { expect(detectSteps.at(-1)?.env?.OPENCLAW_SECURITY_SENSITIVE_GUARD_MODE).toBe("detect"); expect(finalSteps.at(-1)?.env?.OPENCLAW_SECURITY_SENSITIVE_GUARD_MODE).toBe("enforce"); expect(finalSteps.at(-1)?.env?.OPENCLAW_SECURITY_TEAM_SLUG).toBe("openclaw-secops"); - expect(finalSteps.at(-1)?.env?.OPENCLAW_SECURITY_APPROVERS).toBe( - "vincentkoc,steipete,joshavant", - ); + expect(finalSteps.at(-1)?.env?.OPENCLAW_SECURITY_APPROVERS).toBe("iililiiilili"); }); it("uses a dedicated checked-in script and detects the intended file surfaces", () => {