mirror of
https://github.com/GeWuYou/GFramework.git
synced 2026-03-22 02:24:30 +08:00
feat(ci): 集成 MegaLinter 代码质量扫描工具
- 添加 MegaLinter 扫描步骤到 CI 流程 - 配置 GITHUB_TOKEN 环境变量用于访问权限 - 保持 TruffleHog 敏感信息扫描功能
This commit is contained in:
parent
14e1d984e6
commit
7cba4d0756
5
.github/workflows/ci.yml
vendored
5
.github/workflows/ci.yml
vendored
@ -22,6 +22,11 @@ jobs:
|
||||
uses: actions/checkout@v6
|
||||
with:
|
||||
fetch-depth: 0
|
||||
# MegaLinter扫描步骤
|
||||
- name: MegaLinter
|
||||
uses: oxsecurity/megalinter@v9.3.0
|
||||
env:
|
||||
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
# TruffleHog OSS 扫描步骤
|
||||
# 使用 TruffleHog 工具扫描代码库中的敏感信息泄露,如API密钥、密码等
|
||||
# 该步骤会比较基础分支和当前提交之间的差异,检测新增内容中是否包含敏感数据
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user