easyai-ai-gateway

9 Commits

Include renames

Author	SHA1	Message	Date
chengcheng	3561efa7da	fix(ci): 允许复用固定摘要的 Runner 镜像 ci / verify (pull_request) Failing after 8s 本地已存在完全相同 digest 的 Runner 镜像时跳过外部拉取，继续执行二进制校验与隔离探针；仅在镜像缺失时访问仓库。避免 Docker Hub 瞬时不可达导致专用 CI Runner 无法恢复。	2026-07-21 10:36:56 +08:00
chengcheng	b7bb9ed8d5	fix(ci): 为集成测试提供固定 Docker CLI ci / verify (pull_request) Failing after 8s 从固定 digest 的 Runner 镜像提取 Docker CLI 29.6.0，校验二进制 SHA-256 后通过只读工具链挂载给 Job。同步 PR 与 Tag 工作流的版本探针，并增加流水线契约测试，避免 PostgreSQL 集成测试再次因缺少 docker 命令失败。	2026-07-21 10:33:39 +08:00
chengcheng	e77ec9e842	security(ci): bound runner resources	2026-07-17 15:22:44 +08:00
chengcheng	5e8fb4276f	fix(ci): verify rootless pid namespace without proc links ci / verify (pull_request) Failing after 6m9s	2026-07-17 15:15:55 +08:00
chengcheng	06f95c5d86	ci: validate runner before registration ci / verify (pull_request) Failing after 6m9s	2026-07-17 15:08:37 +08:00
chengcheng	1f8c5a3d03	fix(ci): support digest-verified runner mirrors ci / verify (pull_request) Failing after 7m54s	2026-07-17 14:50:38 +08:00
chengcheng	6ba46514c1	fix(ci): expose pinned node during runner setup ci / verify (pull_request) Failing after 6m8s	2026-07-17 14:43:27 +08:00
chengcheng	91ea0e6a2d	ci: harden production quality gates ci / verify (pull_request) Failing after 4m18s	2026-07-17 14:23:49 +08:00
chengcheng	745811cc6d	ci: 建立生产镜像与 Tag 发布流水线新增独立仓库级 Gitea Runner，main 和 PR 执行完整质量门禁与不可变 SHA 镜像构建；只有来自 main 历史的语义版本 Tag 才调用受限生产发布助手。专属 Buildx builder 将缓存限制为 2 GB。\n\n验证：流水线结构测试、ShellCheck、Go vet/test、govulncheck、前端 lint/test/build、Compose 渲染及高危依赖审计通过。	2026-07-17 12:39:07 +08:00