docs(security): add source control ref detail diff [skip ci]

2026-05-13 09:16:31 +08:00
parent b63c6f9b79
commit 611093de5b
15 changed files with 1546 additions and 27 deletions
--- a/docs/security/SOURCE-CONTROL-REF-DETAIL-DIFF.md
+++ b/docs/security/SOURCE-CONTROL-REF-DETAIL-DIFF.md
@@ -0,0 +1,219 @@
+# Source Control Branch / Tag Detail Diff
+
+| 項目 | 內容 |
+|------|------|
+| 日期 | 2026-05-13 |
+| 狀態 | `draft_blocked` |
+| 預設模式 | `read_only_diff` |
+| ignored branches | `codex/security-supply-chain-contracts-20260512` |
+| repo count | 3 |
+
+## 0. 核心結論
+
+本檔是 read-only refs 明細 diff，不是同步腳本。任何 refs sync、GitHub primary 切換、repo 建立或 visibility 修改都仍需單一 repo 人工批准。
+
+## 1. 摘要
+
+| Repo | Status | Branch only Gitea | Branch only GitHub | Branch SHA diff | Tag only Gitea | Tag only GitHub | Tag SHA diff |
+|------|--------|-------------------|--------------------|-----------------|----------------|-----------------|--------------|
+| `wooo/awoooi -> owenhytsai/awoooi` | `blocked` | `115` | `0` | `1` | `2` | `0` | `0` |
+| `wooo/clawbot-v5 -> owenhytsai/clawbot-v5` | `blocked` | `0` | `0` | `1` | `1` | `0` | `0` |
+| `wooo/wooo-aiops -> owenhytsai/wooo-aiops` | `blocked` | `0` | `1` | `1` | `0` | `19` | `0` |
+
+## 2. Repo 明細
+
+### wooo/awoooi -> owenhytsai/awoooi
+
+- Status：`blocked`
+- Blocking reason：branches 尚未完全對齊；tags 尚未完全對齊
+- Gitea URL：`http://192.168.0.110:3001/wooo/awoooi.git`
+- GitHub URL：`https://github.com/owenhytsai/awoooi.git`
+
+#### Branch SHA 不一致
+
+- `main`：Gitea `5294f071` / GitHub `202071f7`
+
+#### Branch 只在 Gitea
+
+- `dev` @ `25889d4b`
+- `drift/adopt-00e93ec6-20260507202835` @ `d356cd32`
+- `drift/adopt-018dfeb6-20260510201057` @ `d356cd32`
+- `drift/adopt-036399ae-20260512101936` @ `d356cd32`
+- `drift/adopt-036399ae-20260512113011` @ `d356cd32`
+- `drift/adopt-03ab23eb-20260511190611` @ `d356cd32`
+- `drift/adopt-04532fd3-20260509104706` @ `d356cd32`
+- `drift/adopt-094107c8-20260511171658` @ `d356cd32`
+- `drift/adopt-0b67aa5a-20260508132246` @ `d356cd32`
+- `drift/adopt-0d55cf70-20260512152046` @ `abdab853`
+- `drift/adopt-0d7e2731-20260422111000` @ `75b7d338`
+- `drift/adopt-11d02e8c-20260505000302` @ `40badc42`
+- `drift/adopt-18d2841e-20260506203612` @ `b2f0db07`
+- `drift/adopt-1941d569-20260509001722` @ `d356cd32`
+- `drift/adopt-1b510a59-20260508071355` @ `d356cd32`
+- `drift/adopt-1d45b689-20260512101956` @ `d356cd32`
+- `drift/adopt-1ffaa1de-20260509191538` @ `d356cd32`
+- `drift/adopt-22d3c494-20260504010134` @ `035fe20e`
+- `drift/adopt-256b7b16-20260507082410` @ `c52ebfc0`
+- `drift/adopt-2582b60d-20260509160733` @ `d356cd32`
+- `drift/adopt-2b26cfe4-20260509104618` @ `d356cd32`
+- `drift/adopt-3254209e-20260505150522` @ `d08d1e49`
+- `drift/adopt-3336b941-20260511111108` @ `d356cd32`
+- `drift/adopt-34bf86fd-20260421010616` @ `3323a905`
+- `drift/adopt-35e8371b-20260508222338` @ `d356cd32`
+- `drift/adopt-378290ab-20260510201203` @ `d356cd32`
+- `drift/adopt-381202c7-20260507171310` @ `afb5f955`
+- `drift/adopt-38e32fb9-20260506171242` @ `76aaaf48`
+- `drift/adopt-39383806-20260502230445` @ `68e18238`
+- `drift/adopt-3da139d9-20260503161425` @ `e45b055e`
+- `drift/adopt-44860c3d-20260510171817` @ `d356cd32`
+- `drift/adopt-46e77bf6-20260506235709` @ `012cd27b`
+- `drift/adopt-49920526-20260511111126` @ `d356cd32`
+- `drift/adopt-4b40fc0d-20260429080302` @ `20009cdd`
+- `drift/adopt-4d8f3bef-20260508212335` @ `d356cd32`
+- `drift/adopt-4e188293-20260504100431` @ `035fe20e`
+- `drift/adopt-4e5775dc-20260510233800` @ `d356cd32`
+- `drift/adopt-50d442fb-20260510201215` @ `d356cd32`
+- `drift/adopt-52fb18e5-20260512000119` @ `d356cd32`
+- `drift/adopt-55aaa7de-20260512151737` @ `abdab853`
+- `drift/adopt-567cd7c0-20260511132950` @ `d356cd32`
+- `drift/adopt-5bc6628e-20260512113026` @ `d356cd32`
+- `drift/adopt-60b714c6-20260504131233` @ `b4055c59`
+- `drift/adopt-60c4401c-20260510201228` @ `d356cd32`
+- `drift/adopt-629f415a-20260504110028` @ `f7e5fc77`
+- `drift/adopt-636e7a0a-20260508150402` @ `d356cd32`
+- `drift/adopt-6384c896-20260510201239` @ `d356cd32`
+- `drift/adopt-67e03b24-20260510194653` @ `d356cd32`
+- `drift/adopt-6857ca25-20260508105853` @ `d356cd32`
+- `drift/adopt-699b4785-20260506160255` @ `927c2a75`
+- `drift/adopt-6beac0f6-20260425192742` @ `4a8c3ca5`
+- `drift/adopt-6c17ef6d-20260509191548` @ `d356cd32`
+- `drift/adopt-6d4dcbb6-20260421230348` @ `49e46595`
+- `drift/adopt-6e7ec67f-20260504120519` @ `b4055c59`
+- `drift/adopt-6fae380e-20260422102753` @ `75b7d338`
+- `drift/adopt-6fb9a504-20260507202914` @ `d356cd32`
+- `drift/adopt-7018530f-20260512113057` @ `d356cd32`
+- `drift/adopt-732ed7e5-20260511150635` @ `d356cd32`
+- `drift/adopt-7517bc64-20260509125450` @ `d356cd32`
+- `drift/adopt-7551fb42-20260424144550` @ `9793f7f5`
+- 另有 `55` 筆，完整清單見 JSON snapshot。
+
+#### Branch 只在 GitHub
+
+無。
+
+#### Tag 只在 Gitea
+
+- `v7.2.0` @ `898145d6`
+- `v7.3.0` @ `4b8be326`
+
+#### Tag 只在 GitHub
+
+無。
+
+#### 仍然禁止
+
+- fetch
+- push refs
+- force push
+- delete refs
+- create GitHub repo
+- change repo visibility
+- switch GitHub primary
+- disable Gitea
+- move secret values
+
+### wooo/clawbot-v5 -> owenhytsai/clawbot-v5
+
+- Status：`blocked`
+- Blocking reason：branches 尚未完全對齊；tags 尚未完全對齊
+- Gitea URL：`http://192.168.0.110:3001/wooo/clawbot-v5.git`
+- GitHub URL：`https://github.com/owenhytsai/clawbot-v5.git`
+
+#### Branch SHA 不一致
+
+- `main`：Gitea `22074fbe` / GitHub `7a769de4`
+
+#### Branch 只在 Gitea
+
+無。
+
+#### Branch 只在 GitHub
+
+無。
+
+#### Tag 只在 Gitea
+
+- `v5.5-sprint1` @ `2b126871`
+
+#### Tag 只在 GitHub
+
+無。
+
+#### 仍然禁止
+
+- fetch
+- push refs
+- force push
+- delete refs
+- create GitHub repo
+- change repo visibility
+- switch GitHub primary
+- disable Gitea
+- move secret values
+
+### wooo/wooo-aiops -> owenhytsai/wooo-aiops
+
+- Status：`blocked`
+- Blocking reason：branches 尚未完全對齊；tags 尚未完全對齊
+- Gitea URL：`http://192.168.0.110:3001/wooo/wooo-aiops.git`
+- GitHub URL：`https://github.com/owenhytsai/wooo-aiops.git`
+
+#### Branch SHA 不一致
+
+- `main`：Gitea `507384a2` / GitHub `7c7aa109`
+
+#### Branch 只在 Gitea
+
+無。
+
+#### Branch 只在 GitHub
+
+- `refactor/phase-9.3` @ `7261f94b`
+
+#### Tag 只在 Gitea
+
+無。
+
+#### Tag 只在 GitHub
+
+- `uat-20260316-1ec245f` @ `1ec245fd`
+- `uat-20260316-2d54a43` @ `2d54a43b`
+- `uat-20260316-3e8df86` @ `3e8df861`
+- `uat-20260316-95002f5` @ `95002f50`
+- `uat-20260316-9ebea63` @ `9ebea633`
+- `uat-20260316-a851c80` @ `a851c809`
+- `uat-20260316-e2ee674` @ `e2ee6746`
+- `uat-20260316-fa48be2` @ `fa48be21`
+- `uat-20260317-f768051` @ `f7680510`
+- `uat-20260318-20dde91` @ `20dde91a`
+- `uat-20260318-4025dde` @ `4025dde5`
+- `uat-20260318-5bfa151` @ `5bfa1514`
+- `uat-20260318-663b590` @ `663b590d`
+- `uat-20260318-78a3757` @ `78a3757c`
+- `uat-20260318-7c6f666` @ `7c6f6665`
+- `uat-20260318-c4d5669` @ `c4d56690`
+- `uat-20260318-cf42fd4` @ `cf42fd4e`
+- `uat-20260319-7c7aa10` @ `7c7aa109`
+- `uat-20260319-ce5c72b` @ `ce5c72b5`
+
+#### 仍然禁止
+
+- fetch
+- push refs
+- force push
+- delete refs
+- create GitHub repo
+- change repo visibility
+- switch GitHub primary
+- disable Gitea
+- move secret values