GeWuYou
|
7a1b43dff1
|
feat(ci): 集成TruffleHog敏感信息扫描工具
在CI工作流中添加TruffleHog OSS扫描步骤，用于检测代码库中的敏感信息泄露，
如API密钥、密码等。该工具会比较基础分支和当前提交之间的差异，
扫描新增内容中是否包含敏感数据，提升代码安全性。
|
2026-01-29 15:59:39 +08:00 |
|
dependabot[bot]
|
717ea7a161
|
chore(deps): bump actions/cache from 3 to 5
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v5)
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-01-29 13:08:02 +08:00 |
|
dependabot[bot]
|
47b9007793
|
chore(deps): bump actions/checkout from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-01-29 13:02:07 +08:00 |
|
dependabot[bot]
|
d7a5a3fde4
|
chore(deps): bump actions/setup-dotnet from 4 to 5
Bumps [actions/setup-dotnet](https://github.com/actions/setup-dotnet) from 4 to 5.
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](https://github.com/actions/setup-dotnet/compare/v4...v5)
---
updated-dependencies:
- dependency-name: actions/setup-dotnet
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
|
2026-01-29 12:57:08 +08:00 |
|
GeWuYou
|
d5b05c1578
|
chore(workflow): 更新 GitHub Actions 工作流配置
- 移除 auto-tag 工作流中的 ref 参数配置
- 清理工作流中多余的检查跳过关键词步骤
- 为 ci 工作流添加内容读取权限配置
- 优化工作流触发条件和权限设置
|
2026-01-29 12:42:22 +08:00 |
|
GeWuYou
|
ef655bbaf1
|
refactor(workflow): 重构自动标签工作流并添加CI构建测试
- 将自动标签触发方式从直接push改为基于CI工作流完成状态
- 新增独立的CI构建测试工作流配置文件
- 简化自动标签逻辑，移除跳过关键字检查和版本解析冗余代码
- 优化Git标签创建和推送流程，统一配置用户名邮箱
- 集成.NET项目构建测试流程，包含依赖恢复、编译和单元测试
- 更新工作流权限配置和并发控制设置
|
2026-01-29 12:14:38 +08:00 |
|