-
-
Notifications
You must be signed in to change notification settings - Fork 484
chore: standardize repository tooling #1229
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Changes from all commits
ba6ddbf
4e7a280
9fec948
b037ea7
6fbd941
3fbe7c5
09da163
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,15 +1,2 @@ | ||
| # These are supported funding model platforms | ||
|
|
||
| github: ant-design # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2] | ||
| patreon: # Replace with a single Patreon username | ||
| open_collective: ant-design # Replace with a single Open Collective username | ||
| ko_fi: # Replace with a single Ko-fi username | ||
| tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel | ||
| community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry | ||
| liberapay: # Replace with a single Liberapay username | ||
| issuehunt: # Replace with a single IssueHunt username | ||
| lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry | ||
| polar: # Replace with a single Polar username | ||
| buy_me_a_coffee: # Replace with a single Buy Me a Coffee username | ||
| thanks_dev: # Replace with a single thanks.dev username | ||
| custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] | ||
| github: ant-design | ||
| open_collective: ant-design |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,22 @@ | ||
| name: React Doctor | ||
|
|
||
| on: | ||
| pull_request: | ||
| push: | ||
| branches: [master] | ||
|
|
||
| permissions: | ||
| contents: read | ||
| pull-requests: write | ||
| issues: write | ||
| statuses: write | ||
|
|
||
| jobs: | ||
| react-doctor: | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | ||
| with: | ||
| fetch-depth: 0 | ||
| persist-credentials: false | ||
| - uses: millionco/react-doctor@0b4f4f4bd248a154e64eb508a48347f71154b3f3 |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| name: Surge Preview | ||
|
|
||
| on: | ||
| pull_request: | ||
|
|
||
| permissions: | ||
| contents: read | ||
| pull-requests: write | ||
| checks: write | ||
|
|
||
| jobs: | ||
| preview: | ||
| runs-on: ubuntu-latest | ||
| env: | ||
| SURGE_TOKEN: ${{ secrets.SURGE_TOKEN }} | ||
| steps: | ||
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | ||
| with: | ||
| persist-credentials: false | ||
| - uses: afc163/surge-preview@bf90a5a86111f6311ca42f0a5a0f80fb0fb03cec | ||
| if: ${{ env.SURGE_TOKEN != '' }} | ||
| with: | ||
| surge_token: ${{ env.SURGE_TOKEN }} | ||
| github_token: ${{ secrets.GITHUB_TOKEN }} | ||
| dist: .doc | ||
| failOnError: false | ||
| setCommitStatus: false | ||
| build: | | ||
| npm install | ||
| npm run build | ||
| - name: Skip Surge preview | ||
| if: ${{ env.SURGE_TOKEN == '' }} | ||
| run: echo "SURGE_TOKEN is not configured; skip Surge preview." |
Large diffs are not rendered by default.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -12,5 +12,6 @@ | |
| "@@/*": [".dumi/tmp/*"], | ||
| "@rc-component/select": ["src/index.ts"] | ||
| } | ||
| } | ||
| }, | ||
| "include": [".dumirc.ts", ".fatherrc.js", "src", "tests", "docs"] | ||
|
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Including |
||
| } | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,3 +1,6 @@ | ||
| { | ||
| "framework": "umijs" | ||
| "framework": "umijs", | ||
| "installCommand": "npm install", | ||
| "buildCommand": "npm run build", | ||
| "outputDirectory": ".doc" | ||
| } |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔒 Security & Privacy | 🟡 Minor
🧩 Analysis chain
🏁 Script executed:
Repository: react-component/select
Length of output: 271
复用工作流引用应保持为可变
@main以启用自动同步;文件存在性已确认,无需变更。验证确认
react-component/rc-test/.github/workflows/test-utoo.yml存在于目标仓库默认分支(SHA:48f125d41587df9bc59ec7446ee5cc0b6527ad70)。此处引用@main属于常规复用工作流模式,旨在通过secrets: inherit自动获取最新配置变更,这与固定 SHA 的单一 Action 引用策略不同。鉴于文件存在且引用关系正确,原关于“策略不一致”的担忧不成立,无需强制固定 SHA。当前配置在目标文件存在且为可信组织的场景下是合理的。🧰 Tools
🪛 zizmor (1.26.1)
[error] 5-5: unpinned action reference (unpinned-uses): action is not pinned to a hash (required by blanket policy)
(unpinned-uses)
[warning] 5-5: secrets unconditionally inherited by called workflow (secrets-inherit): this reusable workflow
(secrets-inherit)
🤖 Prompt for AI Agents
Source: Linters/SAST tools