Skip to content

feat(onboard): make configuration review editable #2386

feat(onboard): make configuration review editable

feat(onboard): make configuration review editable #2386

Triggered via pull request August 13, 2026 21:52
Status Success
Total duration 36m 10s
Artifacts 11

managed-images.yaml

on: pull_request
Matrix: build-and-validate
PR reviewed npm audit
3m 24s
PR reviewed npm audit
Staging QA base permission regression (Deep Agents Code)
10m 12s
Staging QA base permission regression (Deep Agents Code)
Promote complete multi-platform managed image cohort
0s
Promote complete multi-platform managed image cohort
Matrix: pr-build-and-entrypoint
PR exact all-agent managed runtime activation
6m 24s
PR exact all-agent managed runtime activation
Fit to window
Zoom out
Zoom in

Annotations

12 warnings
Sensitive data should not be used in the ARG or ENV commands: agents/langchain-deepagents-code/Dockerfile#L313
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Default value for global ARG results in an empty or invalid base image name: agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
Sensitive data should not be used in the ARG or ENV commands: agents/langchain-deepagents-code/Dockerfile#L313
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEEPAGENTS_CODE_OPENAI_API_KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Default value for global ARG results in an empty or invalid base image name: agents/langchain-deepagents-code/Dockerfile#L68
InvalidDefaultArgInFrom: Default value for ARG ${BASE_IMAGE} results in empty or invalid base image name More info: https://docs.docker.com/go/dockerfile/rule/invalid-default-arg-in-from/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1700
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1700
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1666
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1663
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1663
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DISABLE_DEVICE_AUTH") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1700
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1700
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "NEMOCLAW_DISABLE_DEVICE_AUTH") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: Dockerfile#L1666
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ARG "NEMOCLAW_DEVICE_AUTH_OPT_OUT_SOURCE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/

Artifacts

Produced during runtime
Name Size Digest
NVIDIA~NemoClaw~4VNEMB.dockerbuild
319 KB
sha256:33f05df94a6717907117de8d49d4792721f36c8cf34966f9c19044c8e38cb8b6
NVIDIA~NemoClaw~6UJ6CK.dockerbuild
258 KB
sha256:05058a834fe30794699b6dc9045c84992f244ea8166b79707564f9a8b6829559
NVIDIA~NemoClaw~90PPIR.dockerbuild
1.84 MB
sha256:072af3e03d40d5feb830139d71e9f7948b46b9407aee6fed74ff4539daa1c763
NVIDIA~NemoClaw~BE5HPS.dockerbuild
137 KB
sha256:cd0cf5731dac2d19e7ef7be3103e1d96834fe025950dfe36d9d94c1a6a43312d
NVIDIA~NemoClaw~I54R5O.dockerbuild
165 KB
sha256:f9d2c48d8908fd02b88824b06d1cc6419fa52a7339016267213678ae483cdf5d
NVIDIA~NemoClaw~RMB8CI.dockerbuild
1.91 MB
sha256:bcc660b2062cbcc9e55071d714eb05b8fb16370ce7fd3e0c6dbb53d2b1ecb780
managed-image-activation-31747590480-1 Expired
149 KB
sha256:8bc7c39c7b4c0ed8041318d24257cce756e581ca5473958af687632c9ee673e2
managed-pr-contract-31747590480-1-hermes Expired
454 Bytes
sha256:7438c1ad2e570611df25a4adbc99daf3860deec85a972008c7b1bc24ccdd6ac9
managed-pr-contract-31747590480-1-langchain-deepagents-code Expired
462 Bytes
sha256:7488b79fe14d5c5abe5e0731c48d90ff451da2680af688640b19cf390b1597ac
managed-pr-contract-31747590480-1-openclaw Expired
454 Bytes
sha256:4676f2a400a0faf330a46652fa58aecef59083a8b1b4113bcca045c65ae2b152
reviewed-npm-audit
7.88 KB
sha256:c2468adbca14980604bda6f944f40b85d794cc6b300619103d752e5ab8f1b819