主要改动: - 固定 Go 1.25.5 与 CI 校验并更新扫描流程 - 升级 quic-go、x/crypto、req 等依赖并通过 govulncheck - 强化 JWT 校验、TLS 配置与 xlsx 动态加载 - 新增审计豁免清单与校验脚本
48 lines
1.1 KiB
YAML
48 lines
1.1 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
pull_request:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: backend/go.mod
|
|
check-latest: false
|
|
cache: true
|
|
- name: Verify Go version
|
|
run: |
|
|
go version | grep -q 'go1.25.5'
|
|
- name: Unit tests
|
|
working-directory: backend
|
|
run: make test-unit
|
|
- name: Integration tests
|
|
working-directory: backend
|
|
run: make test-integration
|
|
|
|
golangci-lint:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-go@v5
|
|
with:
|
|
go-version-file: backend/go.mod
|
|
check-latest: false
|
|
cache: true
|
|
- name: Verify Go version
|
|
run: |
|
|
go version | grep -q 'go1.25.5'
|
|
- name: golangci-lint
|
|
uses: golangci/golangci-lint-action@v9
|
|
with:
|
|
version: v2.7
|
|
args: --timeout=5m
|
|
working-directory: backend
|