|
|
f8f8e9a7ca
|
ci: 限制 Go 门禁并发峰值
ci / verify (pull_request) Successful in 14m35s
将 GOFLAGS=-p=1 与 GOMAXPROCS=1 收窄到 Go 验证步骤，降低 2 GiB rootless DinD runner 冷编译时的峰值资源占用。\n\n同时增加流水线结构契约测试，确保主分支与发布工作流都保留相同限制且不会扩散到 Trivy 等其他工具。
|
2026-07-17 20:02:58 +08:00 |
|
|
|
86509d5c43
|
fix(ci): reject procedural migration bodies
ci / verify (pull_request) Successful in 9m24s
|
2026-07-17 17:04:05 +08:00 |
|
|
|
f226f9c953
|
ci: enforce production-safe database migrations
ci / verify (pull_request) Successful in 8m50s
|
2026-07-17 16:59:50 +08:00 |
|
|
|
a6e95be0c5
|
fix(ci): use reachable vulnerability database mirror
ci / verify (pull_request) Successful in 11m20s
|
2026-07-17 15:38:59 +08:00 |
|
|
|
e77ec9e842
|
security(ci): bound runner resources
|
2026-07-17 15:22:44 +08:00 |
|
|
|
06f95c5d86
|
ci: validate runner before registration
ci / verify (pull_request) Failing after 6m9s
|
2026-07-17 15:08:37 +08:00 |
|
|
|
1f8c5a3d03
|
fix(ci): support digest-verified runner mirrors
ci / verify (pull_request) Failing after 7m54s
|
2026-07-17 14:50:38 +08:00 |
|
|
|
6ba46514c1
|
fix(ci): expose pinned node during runner setup
ci / verify (pull_request) Failing after 6m8s
|
2026-07-17 14:43:27 +08:00 |
|
|
|
91ea0e6a2d
|
ci: harden production quality gates
ci / verify (pull_request) Failing after 4m18s
|
2026-07-17 14:23:49 +08:00 |
|
|
|
745811cc6d
|
ci: 建立生产镜像与 Tag 发布流水线
新增独立仓库级 Gitea Runner，main 和 PR 执行完整质量门禁与不可变 SHA 镜像构建；只有来自 main 历史的语义版本 Tag 才调用受限生产发布助手。专属 Buildx builder 将缓存限制为 2 GB。\n\n验证：流水线结构测试、ShellCheck、Go vet/test、govulncheck、前端 lint/test/build、Compose 渲染及高危依赖审计通过。
|
2026-07-17 12:39:07 +08:00 |
|
