ci: deploy-pages 用 if always 不被 publish 阻塞 - #23
Merged
Merged
Conversation
AgentArcLab
commented
Jul 3, 2026
AgentArcLab
commented
Contributor
- fix(ci): publish-pypi.yml deploy-pages environment 移到 job 级
- fix(ci): publish-pypi publish job 加 setup pnpm
- docs: 修复 Fumadocs GitHub 链接 + README 图片跳转 + 加 favicon
- docs: favicon 改用金山云官方 logo(替换手画 K 字标)
- ci: deploy-pages 用 if: always() 不被 publish 阻塞
workflow_dispatch 重新部署文档站时, publish 会因版本门禁失败(版本未变, 0.6.8 == PyPI 已发), 但 deploy-pages 仍应运行。if: always() 让文档部署 不被 publish 失败阻塞。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
补强 open_source_audit secret 规则(实测 long_task .env 真实 key 格式): - aws-secret-access-key:AWS Secret Access Key(40 字符 base64) - ksyun-access-key:金山云 AKLT* 前缀 - ksyun-secret-key-assignment:KSYUN_SECRET_KEY 赋值 - uuid-secret-assignment:UUID 格式 key 赋值给 *_API_KEY/*_TOKEN/*_MCP_KEY - long-lived-secret-assignment 收紧:值必须含数字或 /+=-(排除纯字母函数名误报) 修原 bug:要求值后 ["']|行尾 太严(行中赋值不匹配);allowlist 加 your_/xxx/< 修 audit_file_contents break bug: - 原每文件只报第一个匹配规则就 break,导致多种 secret 漏报 - 改为全部报出(反映完整风险) - audit 自身测试文件(test_open_source_audit.py)含 secret fixture,加 ignored_files 跳过 实测覆盖:AWS Access/Secret、KSYUN AK/SK、UUID key、OpenAI sk-、GitHub ghp_、 Private Key、long-lived 赋值 全识别;函数名/占位符 不误报。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.