xiaoxia/xiaoxia-saas
1
0
Fork 0
Code Issues 7 Pull Requests 6 Actions 2 Packages Projects Releases 7 Wiki Activity

fix(ci): #912 replace hardcoded staging credentials with secrets #925

Merged
xiaoxia merged 2 commits from fix/ci-daily-check-hardcoded-creds-912 into develop 2026-07-26 14:09:55 +08:00
Conversation 2 Commits 2 Files Changed 1
+17 -6
xiaoxia commented 2026-07-26 12:57:43 +08:00
Owner
Copy Link
Copy Source

问题

daily-check.yml中存在多处硬编码的staging测试账号密码（Ying1234 / 18314979086@163.com），存在安全风险。

修复

  • 移除5处硬编码密码和邮箱
  • 改用已有的 secrets.STAGING_TEST_USER 和 secrets.STAGING_TEST_PASSWORD
  • 涉及3个step：staging-api-smoke / perf check / perf report
  • 使用 LOGIN_BODY 变量统一管理JSON请求体，避免复杂引号嵌套

关 #912

## 问题 daily-check.yml中存在多处硬编码的staging测试账号密码（Ying1234 / 18314979086@163.com），存在安全风险。 ## 修复 - 移除5处硬编码密码和邮箱 - 改用已有的 `secrets.STAGING_TEST_USER` 和 `secrets.STAGING_TEST_PASSWORD` - 涉及3个step：staging-api-smoke / perf check / perf report - 使用 `LOGIN_BODY` 变量统一管理JSON请求体，避免复杂引号嵌套 关 #912
xiaoxia added 1 commit 2026-07-26 12:57:43 +08:00
fix(ci): #912 replace hardcoded staging creds with secrets
AI Code Review / AI Code Review (pull_request) Failing after 0s
Details
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 27s
Details
CI/CD Pipeline / Validate - Type Check (mypy) (pull_request) Successful in 1m15s
Details
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 53s
Details
CI/CD Pipeline / Validate - Migration (alembic) (pull_request) Successful in 1m13s
Details
CI/CD Pipeline / PR Build Web Image (pull_request) Successful in 17s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 20s
Details
Preview Deploy / Deploy Preview Environment (pull_request) Failing after 28s
Details
CI/CD Pipeline / Frontend Unit Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 1m7s
Details
CI/CD Pipeline / Validate - Code Quality (pull_request) Successful in 3m54s
Details
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 2m33s
Details
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m20s
Details
CI/CD Pipeline / Unit Tests (pull_request) Failing after 5m4s
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m15s
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been skipped
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
CI/CD Pipeline / Canary Release to Production (pull_request) Has been cancelled
Details
eb42aee5a8
xiaoxia added 1 commit 2026-07-26 13:15:36 +08:00
Merge branch 'develop' of https://git.xiaoxiajianji.com/xiaoxia/xiaoxia-saas into fix/ci-daily-check-hardcoded-creds-912
AI Code Review / AI Code Review (pull_request) Failing after 0s
Details
CI/CD Pipeline / Check if frontend-only change (pull_request) Successful in 6s
Details
CI/CD Pipeline / Validate - Type Check (mypy) (pull_request) Successful in 47s
Details
CI/CD Pipeline / Validate - Migration (alembic) (pull_request) Successful in 44s
Details
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 28s
Details
CI/CD Pipeline / PR Build Web Image (pull_request) Successful in 26s
Details
CI/CD Pipeline / PR Build Worker Image (pull_request) Successful in 7s
Details
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Validate - Code Quality (pull_request) Successful in 3m9s
Details
CI/CD Pipeline / PR Build API Image (pull_request) Successful in 2m24s
Details
Preview Deploy / Deploy Preview Environment (pull_request) Successful in 35s
Details
PR Automation / Auto Approve on CI Green (pull_request) Successful in 3m2s
Details
CI/CD Pipeline / Frontend Unit Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
Details
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
Details
CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m55s
Details
CI/CD Pipeline / Unit Tests (pull_request) Successful in 4m55s
Details
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
Details
CI/CD Pipeline / ACR Image Cleanup (pull_request) Has been skipped
Details
CI/CD Pipeline / Canary Release to Production (pull_request) Has been cancelled
Details
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
Details
PR Automation / Auto Merge on CI Green + Approved (pull_request) Successful in 47m29s
Details
ACR Cleanup / ACR Image Cleanup (pull_request_target) Has been cancelled
Details
Preview Cleanup / Cleanup Preview Environment (pull_request) Successful in 15s
Details
033ec8dee3
gitea-actions bot commented 2026-07-26 13:23:42 +08:00
Copy Link
Copy Source

🚀 预览环境已部署

项目 详情
PR号 #925
预览链接 https://pr-925.preview.xiaoxiajianji.com
API环境 staging

💡 预览环境使用 staging API 数据，请勿在预览环境中操作重要数据。

🔄 每次提交新代码后预览环境会自动更新。

🗑️ PR 关闭或合并后，预览环境会自动清理。

🚀 **预览环境已部署** | 项目 | 详情 | |------|------| | PR号 | #925 | | 预览链接 | [https://pr-925.preview.xiaoxiajianji.com](https://pr-925.preview.xiaoxiajianji.com) | | API环境 | staging | > 💡 预览环境使用 staging API 数据，请勿在预览环境中操作重要数据。 > > 🔄 每次提交新代码后预览环境会自动更新。 > > 🗑️ PR 关闭或合并后，预览环境会自动清理。
xiaoxia merged commit 38e40d727b into develop 2026-07-26 14:09:55 +08:00
gitea-actions bot commented 2026-07-26 14:11:36 +08:00
Copy Link
Copy Source

🗑️ 预览环境已清理

PR #925 已关闭或合并，对应的预览环境已被清理。

如有需要，可以重新打开 PR 来重新生成预览环境。

🗑️ **预览环境已清理** PR #925 已关闭或合并，对应的预览环境已被清理。 > 如有需要，可以重新打开 PR 来重新生成预览环境。
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
P0
阻塞性，必须立即处理
 P1
高优先级
 P2
中优先级
 P3
低优先级/后考虑
 architecture
架构设计
 backend
后端相关
 blocked
阻塞中
 bug
Bug修复
 ci-bug
CI本身的bug
 ci-optimization
CI优化类任务
 ci-pipeline
CI流水线/workflow相关
 cleanup
代码清理
 devops
运维/部署/CI
 documentation
文档相关
 feature
新功能
 frontend
前端相关
 question
需要讨论确认
 ready
PR CI通过，可合并
 refactor
代码重构
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
auto-approve-bot xiaoxia
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: xiaoxia/xiaoxia-saas#925
Delete Branch "fix/ci-daily-check-hardcoded-creds-912"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?