sqlite-web 0.7.2
gitea.db
action_run_job
45304 rows, showing page 907
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Bulk Delete
id
run_id
repo_id
owner_id
commit_sha
is_fork_pull_request
name
attempt
workflow_payload
job_id
needs
runs_on
task_id
status
started
stopped
created
updated
raw_concurrency
is_concurrency_evaluated
concurrency_group
concurrency_cancel
45298
26644
76
5
39bc98a3a373740ecca89695e65b9b8d06d2aaae
0
Application image scan (web)
0
name: Governance "on": pull_request:
name: Governance "on": pull_request: push: branches: - main jobs: application-image-vulnerability-scan: name: Application image scan (web) runs-on: ubuntu-latest steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: "0" - if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} name: Configure read-only platform package authentication run: node scripts/configure-platform-npm.mjs env: PLATFORM_NPM_TOKEN: ${{ secrets.GITEA_NPM_TOKEN }} - name: Build immutable application target run: docker build --secret "id=npmrc,src=${NPM_CONFIG_USERCONFIG}" --target "${{ matrix.target }}" --tag "${{ matrix.image }}" --file deploy/production/Dockerfile . env: DOCKER_BUILDKIT: "1" - if: matrix.target == 'ops-postgres' name: Verify hardened PostgreSQL runtime run: node scripts/check-postgres-image.mjs "${{ matrix.image }}" - if: matrix.target == 'ops-alertmanager' name: Verify reduced Alertmanager runtime run: node scripts/check-alertmanager-image.mjs "${{ matrix.image }}" - if: matrix.target == 'ops-loki' name: Verify rebuilt Loki runtime run: node scripts/check-loki-image.mjs "${{ matrix.image }}" - if: matrix.target == 'ops-tempo' name: Verify rebuilt Tempo runtime run: node scripts/check-tempo-image.mjs "${{ matrix.image }}" - if: matrix.target == 'ops-otel-collector' name: Verify minimal OTel Collector runtime run: node scripts/check-otel-collector-image.mjs "${{ matrix.image }}" - name: Reject application HIGH or CRITICAL vulnerabilities uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 with: exit-code: "1" format: table ignore-unfixed: "false" image-ref: ${{ matrix.image }} scanners: vuln severity: CRITICAL,HIGH trivy-version: v0.74.0 vuln-type: os,library strategy: fail-fast: "false" matrix: image: - deos-scan-web:ci target: - web permissions: contents: read
...
application-image-vulnerability-scan
["static-governance"]
["ubuntu-latest"]
0
4
0
0
1793247561
1793247580
1
0
Edit
Delete
45299
26644
76
5
39bc98a3a373740ecca89695e65b9b8d06d2aaae
0
Third-party image scan (prom/prometheus:v3.14.0@sh
Third-party image scan (prom/prometheus:v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0)
...
0
name: Governance "on": pull_request:
name: Governance "on": pull_request: push: branches: - main jobs: third-party-image-vulnerability-scan: name: Third-party image scan (prom/prometheus:v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0) runs-on: ubuntu-latest steps: - name: Reject third-party HIGH or CRITICAL vulnerabilities uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 with: exit-code: "1" format: table ignore-unfixed: "false" image-ref: ${{ matrix.image }} scanners: vuln severity: CRITICAL,HIGH trivy-version: v0.74.0 vuln-type: os,library strategy: fail-fast: "false" matrix: image: - prom/prometheus:v3.14.0@sha256:5ce7540c3c00ef4ab0c9d2c995c6a5b9c421f44b4a115d97a2c7af3b1c21cbb0 permissions: contents: read
...
third-party-image-vulnerability-scan
["static-governance"]
["ubuntu-latest"]
0
4
0
0
1793247561
1793247580
1
0
Edit
Delete
45300
26644
76
5
39bc98a3a373740ecca89695e65b9b8d06d2aaae
0
Third-party image scan (redis:7-alpine@sha256:ff02
Third-party image scan (redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf)
...
0
name: Governance "on": pull_request:
name: Governance "on": pull_request: push: branches: - main jobs: third-party-image-vulnerability-scan: name: Third-party image scan (redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf) runs-on: ubuntu-latest steps: - name: Reject third-party HIGH or CRITICAL vulnerabilities uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 with: exit-code: "1" format: table ignore-unfixed: "false" image-ref: ${{ matrix.image }} scanners: vuln severity: CRITICAL,HIGH trivy-version: v0.74.0 vuln-type: os,library strategy: fail-fast: "false" matrix: image: - redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf permissions: contents: read
...
third-party-image-vulnerability-scan
["static-governance"]
["ubuntu-latest"]
0
4
0
0
1793247561
1793247580
1
0
Edit
Delete
45301
26644
76
5
39bc98a3a373740ecca89695e65b9b8d06d2aaae
0
Runtime and UI acceptance
0
name: Governance "on": pull_request:
name: Governance "on": pull_request: push: branches: - main jobs: runtime-acceptance: name: Runtime and UI acceptance runs-on: ubuntu-latest env: DATABASE_URL: postgresql://postgres:postgres@127.0.0.1:5432/digital_employee_os_ci?schema=public REDIS_URL: redis://127.0.0.1:6379 FACT_TEST_BROKERS: 127.0.0.1:59092 steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: "0" - name: Setup Node.js uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 with: node-version: 22.23.2 - name: Enable pnpm run: | corepack enable corepack prepare pnpm@9.15.9 --activate - if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }} name: Configure read-only platform package authentication run: node scripts/configure-platform-npm.mjs env: PLATFORM_NPM_TOKEN: ${{ secrets.GITEA_NPM_TOKEN }} - name: Install dependencies run: pnpm install --frozen-lockfile --ignore-scripts - name: Rebuild approved dependency scripts run: pnpm dependencies:rebuild-approved - name: Generate Prisma clients run: pnpm prisma:generate - name: Start isolated fact broker run: | docker run --rm -d --name runtime-fact-broker -p 127.0.0.1:59092:19092 \ --health-cmd "rpk cluster health | grep -E 'Healthy:.+true' || exit 1" \ --health-interval 2s --health-timeout 5s --health-retries 30 \ docker.redpanda.com/redpandadata/redpanda@sha256:04baa40ed34edf86028396f762be802f3b6b0acaab65e9de696a3f15d54c550f \ redpanda start --mode=dev-container --smp=1 --memory=1G --overprovisioned \ --kafka-addr=internal://0.0.0.0:9092,external://0.0.0.0:19092 \ --advertise-kafka-addr=internal://127.0.0.1:9092,external://127.0.0.1:59092 \ --rpc-addr=0.0.0.0:33145 --advertise-rpc-addr=127.0.0.1:33145 for attempt in {1..45}; do if [ "$(docker inspect -f '{{.State.Health.Status}}' runtime-fact-broker)" = healthy ]; then exit 0; fi sleep 1 done docker logs runtime-fact-broker exit 1 - name: Run real DB Redis and Kafka acceptance run: pnpm check:runtime - name: Install Playwright browser run: pnpm --filter web exec playwright install --with-deps chromium - name: Run UI acceptance run: pnpm check:ui env: # O1：runtime 验收的遗留 delayed job 不得漏进 UI 阶段共享的 BullMQ 队列， # Redis 逻辑库隔离（镜像本地 /2 vs /3 约定）。 REDIS_URL: redis://127.0.0.1:6379/1 - if: ${{ always() }} name: Stop isolated fact broker run: docker rm -f runtime-fact-broker services: postgres: image: postgres:16-alpine@sha256:cf78e76683b9ca8c5733cbbdce6c9262b45b6767934dd0a95e671f9a0fc20685 env: POSTGRES_DB: digital_employee_os_ci POSTGRES_PASSWORD: postgres POSTGRES_USER: postgres ports: - 5432:5432 options: --health-cmd "pg_isready -U postgres -d digital_employee_os_ci" --health-interval 5s --health-timeout 5s --health-retries 20 redis: image: redis:7-alpine@sha256:ff02b58f971e7d7d156a1267e283fcbbeee91773b6aa36c49dac28ecfe28eadf ports: - 6379:6379 options: --health-cmd "redis-cli ping" --health-interval 5s --health-timeout 5s --health-retries 20 permissions: contents: read
...
runtime-acceptance
["static-governance"]
["ubuntu-latest"]
0
4
0
0
1793247561
1793247580
1
0
Edit
Delete
«
‹
Page 907 / 907
›
»