Skip to content

ci: 收紧权限、并发取消、超时,并校验内嵌前端产物 - #324

Merged
caigee-cmd merged 2 commits into
mainfrom
ci/hardening
Oct 21, 2026
Merged

caigee-cmd merged 2 commits into
mainfrom
ci/hardening

Conversation

@caigee-cmd

Copy link
Copy Markdown
Owner
  • workflow 级 permissions: contents: read
  • concurrency:PR 重复推送时取消旧的 CI,推到 main 不取消
  • 各 job 设 timeout-minutes(15/30)
  • frontend job 改跑 npm run sync,并检查 internal/webui/static 和已提交的版本一致,防止改了前端忘了重生静态资源

本地验证:actionlint 通过;在干净的 main 上连续 sync 两次,产物一致,diff 为空。

@caigee-cmd
caigee-cmd merged commit 450e6f1 into main Oct 21, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant