Commit Graph

6 Commits

Author SHA1 Message Date
e77ec9e842 security(ci): bound runner resources 2026-07-17 15:22:44 +08:00
06f95c5d86 ci: validate runner before registration
Some checks failed
ci / verify (pull_request) Failing after 6m9s
2026-07-17 15:08:37 +08:00
1f8c5a3d03 fix(ci): support digest-verified runner mirrors
Some checks failed
ci / verify (pull_request) Failing after 7m54s
2026-07-17 14:50:38 +08:00
6ba46514c1 fix(ci): expose pinned node during runner setup
Some checks failed
ci / verify (pull_request) Failing after 6m8s
2026-07-17 14:43:27 +08:00
91ea0e6a2d ci: harden production quality gates
Some checks failed
ci / verify (pull_request) Failing after 4m18s
2026-07-17 14:23:49 +08:00
745811cc6d ci: 建立生产镜像与 Tag 发布流水线
新增独立仓库级 Gitea Runner,main 和 PR 执行完整质量门禁与不可变 SHA 镜像构建;只有来自 main 历史的语义版本 Tag 才调用受限生产发布助手。专属 Buildx builder 将缓存限制为 2 GB。\n\n验证:流水线结构测试、ShellCheck、Go vet/test、govulncheck、前端 lint/test/build、Compose 渲染及高危依赖审计通过。
2026-07-17 12:39:07 +08:00