$ show openclaw/clownfish
This repository is an automated maintenance and triage system called 'Clownfish' (ProjectClownfish) that manages the large open-source `openclaw/openclaw` repository. It is a Node.js application driven by GitHub Actions workflows that continuously processes GitHub issues and pull requests: performing deduplication, canonical selection, security-sensitive detection, automated repair of contributor branches, exact-head merge preflight validation, and closeout of superseded/fixed-by-candidate items. The system operates in plan (read-only), autonomous (lightweight actions), and execute (mutating) modes, with strict permission boundaries defined in YAML frontmatter job files. It relies on the GitHub API, a Codex/AI worker for classification, and a suite of deterministic safety gates (re-fetch live state, check updated_at, block unsafe closeouts) before any mutation. The codebase is well-structured with clear separation of concerns (scripts, job definitions, results), but it is tightly coupled to the specific workflow of a single large repository, limiting direct reuse. Notable patterns include a robust job frontmatter schema, deterministic preflight validation, and a centralized security routing mechanism.
The LLM identified 1 files worth highlighting for reuse:
Exports a reusable pattern for detecting security-sensitive text in GitHub issues and PRs using a compiled regex (`SECURITY_TEXT_PATTERN`) and helper functions (`hasSecuritySensitiveText`, `securityTextFromItem`). This module is self-contained, has no internal dependencies, and can be extracted to any project needing automated security classification of textual content. It demonstrates non-obvious skill in crafting a precise, multi-language regex that balances coverage with false-positive avoidance.