Security Audit Bot
1015bf2b13
- 从版本控制中移除 .env.production 和 .env.staging（git rm --cached） - 更新 .gitignore：移除 .env.staging 的例外规则，所有 .env 环境文件不再提交 - scripts/ci_failure_check.sh：硬编码 Gitea API Token 改为环境变量 GITEA_API_TOKEN - scripts/auto_merge_prs.sh：硬编码 Gitea API Token 改为环境变量 GITEA_API_TOKEN 这是对 PR#53 的重新提交，补充了之前遗漏的脚本中硬编码凭证清理。
31 lines
1.1 KiB
Bash
Executable File
31 lines
1.1 KiB
Bash
Executable File
#!/bin/bash
|
|
# 检查最近 CI 运行状态，失败时输出告警
|
|
GITEA_API="https://git.xiaoxiajianji.com/api/v1"
|
|
TOKEN="${GITEA_API_TOKEN:?Please set GITEA_API_TOKEN environment variable}"
|
|
REPO="xiaoxia/xiaoxia-saas"
|
|
|
|
echo "=== CI Status Check ==="
|
|
echo "Time: $(date '+%Y-%m-%d %H:%M:%S')"
|
|
|
|
# 检查最近的 workflow runs
|
|
curl -s -H "Authorization: token $TOKEN" \
|
|
"$GITEA_API/repos/$REPO/actions/runs?limit=5" 2>/dev/null | python3 -c "
|
|
import json, sys
|
|
try:
|
|
data = json.load(sys.stdin)
|
|
runs = data.get('workflow_runs', [])
|
|
if not runs:
|
|
print('No recent CI runs found')
|
|
sys.exit(0)
|
|
for run in runs[:5]:
|
|
status = run.get('status', 'unknown')
|
|
conclusion = run.get('conclusion', 'pending')
|
|
name = run.get('name', 'unknown')
|
|
created = run.get('created_at', '')
|
|
print(f' {name}: {status} ({conclusion}) - {created}')
|
|
if conclusion == 'failure':
|
|
print(f' ⚠️ WARNING: CI failed for {name}')
|
|
except:
|
|
print('Could not parse CI status')
|
|
" 2>/dev/null || echo "CI status check unavailable"
|