Merge Master #7844
Merge Master #7844
Conversation
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| runs-on: ubuntu-22.04 | ||
|
|
||
| steps: | ||
| - uses: actions/checkout@v2 | ||
| - name: Set up Python 3.6 | ||
| uses: actions/setup-python@v2 | ||
| with: | ||
| python-version: 3.6 | ||
| - name: Install dependencies | ||
| - uses: actions/checkout@v4 | ||
| - name: Install system dependencies (clang) | ||
| run: | | ||
| python -m pip install --upgrade pip | ||
| pip install flake8 black | ||
| sudo apt-get update | ||
| sudo apt-get install -y clang libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev libffi-dev | ||
| - name: Install pyenv | ||
| run: | | ||
| curl -L https://github.com/pyenv/pyenv-installer/raw/master/bin/pyenv-installer | bash | ||
| - name: Install system dependencies (python) | ||
| run: | | ||
| export PYENV_ROOT="$HOME/.pyenv" | ||
| export PATH="$PYENV_ROOT/bin:$PATH" | ||
| eval "$(pyenv init --path)" | ||
| CC=clang pyenv install 3.6.12 -v | ||
| sudo ln -sf $PYENV_ROOT/versions/3.6.12/bin/python3.6 /usr/local/bin/python3.6 | ||
| python3.6 -m pip install --upgrade pip | ||
| python3.6 -m pip install flake8==3.9.2 black==21.12b0 | ||
| - name: Lint with flake8 | ||
| run: | | ||
| flake8 | ||
| python3.6 -m flake8 | ||
| - name: Format with black | ||
| run: | | ||
| black . | ||
| python3.6 -m black . |
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 months ago
To fix the issue, we will add a permissions block at the root of the workflow file. This block will specify the minimal permissions required for the workflow to function. Based on the workflow's steps, it does not appear to require any write permissions, so we will set contents: read as the permission. This ensures that the workflow has only read access to the repository contents.
| @@ -5,2 +5,5 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
|
|
||
| on: |
.github/workflows/unittest.yml
Outdated
Check warning
Code scanning / CodeQL
Workflow does not contain permissions Medium
Show autofix suggestion
Hide autofix suggestion
Copilot Autofix
AI 5 months ago
To fix the issue, add a permissions block at the root of the workflow file. This block will define the minimal permissions required for the workflow. Based on the tasks in the workflow, the following permissions are needed:
contents: readfor accessing the repository's code.actions: writefor uploading coverage reports to Codecov.
The permissions block should be added at the top level of the workflow file, ensuring it applies to all jobs in the workflow.
| @@ -2,2 +2,6 @@ | ||
|
|
||
| permissions: | ||
| contents: read | ||
| actions: write | ||
|
|
||
| on: |
.github/workflows/unittest.yml
Outdated
Check warning
Code scanning / CodeQL
Unpinned tag for a non-immutable Action in workflow Medium
* fix: 公共流程可见范围提测问题修复 --ignore # Reviewed, transaction id: 49836 * fix: 删除调试语句 --ignore * fix: 获取公共流程可见列表增加参数以及中文国际化处理 --ignore # Reviewed, transaction id: 50005 * Merge branch 'common_process_scope_Problem' of https://github.com/TencentBlueKing/bk-sops into common_process_scope_Problem # Reviewed, transaction id: 50006 * fix:: 增加国际化词条 --ignore # Reviewed, transaction id: 50012 * fix: 优化代码 --ignore # Reviewed, transaction id: 50016
# Reviewed, transaction id: 50061
feat: 导出yaml文件添加auto_retry配置 #7907
# Reviewed, transaction id: 50390
# Reviewed, transaction id: 50539
refactor: 更新依赖 #ignore
# Reviewed, transaction id: 50563
# Reviewed, transaction id: 50553
# Reviewed, transaction id: 50569
# Reviewed, transaction id: 50575
# Reviewed, transaction id: 50579
fix: 修复http插件测试问题 --story=125852796
Codecov Report❌ Patch coverage is Please upload reports for the commit 785d0ff to get more accurate results. Additional details and impacted files@@ Coverage Diff @@
## dev_multi_tenant #7844 +/- ##
====================================================
- Coverage 58.99% 58.62% -0.37%
====================================================
Files 655 665 +10
Lines 34599 35580 +981
====================================================
+ Hits 20410 20858 +448
- Misses 14189 14722 +533
... and 1 file with indirect coverage changes Continue to review full report in Codecov by Sentry.
🚀 New features to boost your workflow:
|
feat: 节点管理安装任务，TJJ密码类型不请求公钥 (closed #7916)
# Reviewed, transaction id: 50720
# Reviewed, transaction id: 50799
# Reviewed, transaction id: 50824
# Reviewed, transaction id: 50970
# Reviewed, transaction id: 50975
# Reviewed, transaction id: 50993
feat: 模板列表页面增加标签修改接口 --story=125724568
Refactor/worker auto restart
# Reviewed, transaction id: 62482
# Reviewed, transaction id: 62942
Refactor/special clean
refactor: 所有celery worker默认增加自动重启的机制 --story=128084168
# Reviewed, transaction id: 63377
# Reviewed, transaction id: 63556
# Reviewed, transaction id: 64462
feat: 企微插件新增版本支持markdown_v2格式 --story=128614608
fix: 修复模板导出和周期任务更新问题 --story=149963760
feat: HTTP回调增加参数 --story=128420474
refactor: celery prometheus exporter 增加重启机制 --story=128084168
# Reviewed, transaction id: 64899
# Reviewed, transaction id: 64902
feat: 企微插件新增版本 --story=128614608
# Reviewed, transaction id: 65286
refactor: callback接口支持异步重试来作为降级处理的方案 --story=128811166
refactor: 增加日志排查callback失败的问题 --story=128811166
No description provided.