master

Ccuishiyingfix(security): account uses trigger actor instead of pr author

2adbdf1bAdd on 10 days agoHistory

Files	Last commit	Last update
gitcode-adapter.ts	fix(security): account uses trigger actor instead of pr author 评论触发 PR 同步时 account 误取 PR 作者，同步流水线执行人归属错误 （冒用他人身份的审计问题）。改为取运行时注入的触发人账号： GitCode=ATOMGIT_ACTOR、GitHub=GITHUB_ACTOR、Gitee=GITEE_ACTOR/GITEE_LOGIN； ACTOR 缺失时触发请求不带 account（宁缺毋滥），不再回退 PR 作者。 Co-authored-by: DeepSeek Harness <noreply@tool-provider.com> Generated-by: glm-5.3	10 days ago
gitcode-pr-client.ts	fix(security): batch security hardening for issues #5-#13 #15-#22 - #5/#7/#11/#16/#22: APIG request body logs masked via maskAccessToken (merged feat/pr-sync-trigger-security) - #6/#17/#21: Gitee token moved from URL query to Authorization Bearer header (merged feat/pr-sync-trigger-security) - #9: trigger request no longer carries repo token (merged feat/pr-sync-trigger-security) - #12: enforce 30s minimum for poll_interval_seconds to protect APIG rate limits - #10: emit strong warning when falling back to static AppCode credential - #13: label add/delete failures now logged as warnings instead of being silently swallowed (GitHub/Gitee clients) - #18: outbound requests reject non-HTTPS URLs instead of downgrading - #15: pin pr-label-action/pre-commit-action to immutable commit SHAs - #20: sanitize bundled @actions/io chmod 0666 to 0755 post-build (scripts/fix-bundle-chmod.js wired into package-main) - #19: add api-scan workflow per platform api-scan spec - #8: platform API base URLs overridable via GITCODE_API_BASE_URL / GITEE_API_BASE_URL env, openlibing_apig_url no longer defaults to a hardcoded public gateway, pre-commit mirror documented Co-authored-by: DeepSeek Harness <noreply@tool-provider.com> Generated-by: glm-5.3	18 days ago