2 Commits

Author	SHA1	Message	Date
xiaoxia	72f47592a9	fix(ci): 安全/风格检查 pip install 加固——防缓存损坏导致 CI 失败 ... 问题：Gitea Actions cache 返回损坏归档时（cache EOF/deserialization failed）， pip install pip-audit/detect-secrets/vulture 因 hash mismatch 直接 exit 1， 导致 validate-security/validate-style 整体失败。 修复： - detect-secrets/pip-audit/vulture 安装加 --no-cache-dir - pip-audit 安装失败后 graceful skip（本身是 advisory-only） - detect-secrets 安装失败后重试一次 --no-binary - vulture 安装失败后 skip 死代码检测（本身是 advisory-only）	2026-08-31 20:16:34 +08:00
xiaoxia	4ae6394c95	ci: batch2 speedup - merge validate-type-check+migration into validate-python, split validate-code-quality into validate-style+validate-security ... Change 5: Merge validate-type-check + validate-migration into validate-python - Single checkout + single pip install → mypy + alembic - Saves ~2min checkout + ~1min pip install + 1 runner slot - Preserves DATABASE_URL env for alembic migration validation Change 6: Split validate-code-quality into validate-style + validate-security - validate-style: compileall + black/isort/ruff + vulture (advisory) + auto-fix (~3min) - validate-security: detect-secrets + bandit (advisory) + pip-audit (advisory) + CI scripts syntax (~5min) - Both jobs run in parallel, reducing wall-clock time from ~10min to ~5min Updated references: - ci-gate needs: validate-code-quality → validate-style + validate-security - ci-gate needs: validate-type-check + validate-migration → validate-python - build-production needs: validate-code-quality → validate-style + validate-security - Removed obsolete scripts/ci/validate_code_quality.sh	2026-08-31 18:25:00 +08:00