Merge Master #7844
Merge Master #7844
Conversation
# Reviewed, transaction id: 48841
fix: mako模板中的豁免模块去掉json --bug=144422277
* feat:公共流程可见范围控制 --igonre # Reviewed, transaction id: 48476 * feat: 公共流程可见范围控制 --igonre # Reviewed, transaction id: 48930 * fix：优化数据命名格式 --ignore * fix：优化数据命名格式 --ignore # Reviewed, transaction id: 48969
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| runs-on: ubuntu-22.04 | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: Set up Python 3.6 | ||
| uses: actions/setup-python@v2 | ||
| with: | ||
| python-version: 3.6 | ||
| - name: Install dependencies | ||
| - uses: actions/checkout@v4 | ||
| - name: Install system dependencies (clang) | ||
| run: | | ||
| python -m pip install --upgrade pip | ||
| pip install flake8 black | ||
| sudo apt-get update | ||
| sudo apt-get install -y clang libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev libffi-dev | ||
| - name: Install pyenv | ||
| run: | | ||
| curl -L https://github.com/pyenv/pyenv-installer/raw/master/bin/pyenv-installer | bash | ||
| - name: Install system dependencies (python) | ||
| run: | | ||
| export PYENV_ROOT="$HOME/.pyenv" | ||
| export PATH="$PYENV_ROOT/bin:$PATH" | ||
| eval "$(pyenv init --path)" | ||
| CC=clang pyenv install 3.6.12 -v | ||
| sudo ln -sf $PYENV_ROOT/versions/3.6.12/bin/python3.6 /usr/local/bin/python3.6 | ||
| python3.6 -m pip install --upgrade pip | ||
| python3.6 -m pip install flake8==3.9.2 black==21.12b0 | ||
| - name: Lint with flake8 | ||
| run: | | ||
| flake8 | ||
| python3.6 -m flake8 | ||
| - name: Format with black | ||
| run: | | ||
| black . | ||
| python3.6 -m black . |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 4 months ago
To fix the issue, we will add a permissions block at the root of the workflow file. This block will specify the minimal permissions required for the workflow to function. Based on the workflow's steps, it does not appear to require any write permissions, so we will set contents: read as the permission. This ensures that the workflow has only read access to the repository contents.
| @@ -5,2 +5,5 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| on: |
.github/workflows/unittest.yml
Outdated
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 4 months ago
To fix the issue, add a permissions block at the root of the workflow file. This block will define the minimal permissions required for the workflow. Based on the tasks in the workflow, the following permissions are needed:
contents: readfor accessing the repository's code.actions: writefor uploading coverage reports to Codecov.
The permissions block should be added at the top level of the workflow file, ensuring it applies to all jobs in the workflow.
| @@ -2,2 +2,6 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
| actions: write | ||
|
|
||
| on: |
.github/workflows/unittest.yml
Outdated
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
refactor: 更新package-lock.json文件 #ignore
# Reviewed, transaction id: 49288
# Reviewed, transaction id: 49293
fix: 修复遗漏数据返回未被参数控制 --story=124898883
# Reviewed, transaction id: 49492
* fix: 第三方插件父流程有多余输出 --story=125204339 # Reviewed, transaction id: 49378 * fix: 优化代码 --ignore # Reviewed, transaction id: 49382 * fix: 删除非本次修改内容的代码 --ignore # Reviewed, transaction id: 49396 * fix: 第三方插件父流程有多余输出 --story=125204339 # Reviewed, transaction id: 49434
# Reviewed, transaction id: 49552
# Reviewed, transaction id: 49560
This reverts commit f414921.
Revert "fix: 第三方插件父流程有多余输出 --story=125204339 (#7881)"
* fix: 公共流程可见范围提测问题修复 --ignore # Reviewed, transaction id: 49836 * fix: 删除调试语句 --ignore * fix: 获取公共流程可见列表增加参数以及中文国际化处理 --ignore # Reviewed, transaction id: 50005 * Merge branch 'common_process_scope_Problem' of https://github.com/TencentBlueKing/bk-sops into common_process_scope_Problem # Reviewed, transaction id: 50006 * fix:: 增加国际化词条 --ignore # Reviewed, transaction id: 50012 * fix: 优化代码 --ignore # Reviewed, transaction id: 50016
# Reviewed, transaction id: 50061
feat: 导出yaml文件添加auto_retry配置 #7907
# Reviewed, transaction id: 50390
fix: 修复任务子流程未执行节点变量渲染失败 --story=149102381
fix: 修复资源审批人为创建人和更新人 --story=127854750
# Reviewed, transaction id: 60636
fix: 兼容流程通知方式默认数据 --story=148213756
# Reviewed, transaction id: 60646
fix: 列表接口兼容流程通知方式默认数据 --story=148213756
refactor: 支持通过配置来定制化不同项目的任务清理需求 --story=128038083
refactor: celery worker增加自动重启的逻辑 --story=128084168
refactor: 优化错误码处理逻辑 --story=128084168
# Reviewed, transaction id: 61995
Refactor/worker auto restart
# Reviewed, transaction id: 62482
Refactor/special clean
refactor: 所有celery worker默认增加自动重启的机制 --story=128084168
# Reviewed, transaction id: 63556
No description provided.