wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

test(ci): scope integrity workflow secret guard

Browse Source
This commit is contained in:
ogt
2026-07-15 02:50:08 +08:00
parent 5d7c55bb40
commit 061e68d694
2 changed files with 9 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
apps/api/tests/test_asset_inventory_integrity_migration.py
View File

@@ -12,6 +12,12 @@ MIGRATION = (
CD_WORKFLOW = ROOT / ".gitea" / "workflows" / "cd.yaml"
def _workflow_step(workflow: str, name: str) -> str:
return workflow.split(f"- name: {name}", 1)[1].split(
"\n - name:", 1
)[0]
def test_migration_quarantines_duplicates_without_deleting_history() -> None:
sql = MIGRATION.read_text(encoding="utf-8")
upper = sql.upper()
@@ -38,9 +44,7 @@ def test_migration_quarantines_duplicates_without_deleting_history() -> None:
def test_cd_runs_bounded_integrity_repair_and_independent_verifier() -> None:
workflow = CD_WORKFLOW.read_text(encoding="utf-8")
step = workflow.split(
"- name: Repair Asset Inventory Canonical Integrity", 1
)[1].split("# 2026-03-31 ogt: 移除中間通知", 1)[0]
step = _workflow_step(workflow, "Repair Asset Inventory Canonical Integrity")
script = step.split("run: |", 1)[1]
assert "MIGRATION_DATABASE_URL: ${{ secrets.MIGRATION_DATABASE_URL }}" in step
@@ -63,9 +67,7 @@ def test_cd_runs_bounded_integrity_repair_and_independent_verifier() -> None:
def test_cd_embedded_integrity_migration_python_compiles() -> None:
workflow = CD_WORKFLOW.read_text(encoding="utf-8")
step = workflow.split(
"- name: Repair Asset Inventory Canonical Integrity", 1
)[1]
step = _workflow_step(workflow, "Repair Asset Inventory Canonical Integrity")
source = step.split("python - <<'PY'", 1)[1].split(" PY", 1)[0]
compile(textwrap.dedent(source), "<asset-inventory-integrity-migration>", "exec")