sqlite-web 0.7.2
gitea.db
action_run_job
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 30837 from action_run_job
id
30837
run_id
23385
repo_id
6
owner_id
5
commit_sha
abd9c78e81e375b307f84a5333bb2006694b6844
is_fork_pull_request
0
name
Governance Audit (HARD GATE)
attempt
1
workflow_payload
name: CI "on": push: branches:
name: CI "on": push: branches: [main] pull_request: branches: [main] env: NODE_OPTIONS: --max-old-space-size=8192 NODE_VERSION: "20" jobs: governance-audit: name: Governance Audit (HARD GATE) runs-on: ubuntu-latest steps: - uses: https://gitea.com/actions/checkout@v4 - uses: https://gitea.com/pnpm/action-setup@v4 - uses: https://gitea.com/actions/setup-node@v4 with: cache: pnpm node-version: ${{ env.NODE_VERSION }} - run: pnpm install --frozen-lockfile --ignore-scripts - name: Generate Prisma Client run: pnpm -C backend exec prisma generate - name: Build shared package run: pnpm -C shared run build - name: Audit 多租户隔离（HARD GATE / 红线1，不豁免） run: pnpm -C backend run audit:tenant - name: Audit Prisma↔Zod 契约 run: pnpm -C backend exec tsx scripts/audit-prisma-zod-contract.ts continue-on-error: true - name: Audit FormRules↔Zod run: pnpm run audit:formrules-zod continue-on-error: true - name: Audit Response Columns run: pnpm run audit:response-columns continue-on-error: true - name: Audit Field Payload run: pnpm run audit:field-payload continue-on-error: true - name: Audit Enum Consistency run: pnpm run audit:enum-consistency continue-on-error: true - name: Audit useListPage ↔ Router run: pnpm run audit:list-page-routes continue-on-error: true - name: Audit Page AI Assist Coverage run: pnpm run audit:ai-assist-coverage continue-on-error: true - name: Audit Page AI Assist Skill Binding run: pnpm run audit:ai-assist-skill-binding continue-on-error: true - name: Audit Page AI Assist Context Providers run: pnpm run audit:context-provider-redact continue-on-error: true - name: Audit Coach Script Library run: pnpm run audit:coach-script-library continue-on-error: true - name: Audit AI Decision Quality run: pnpm run audit:ai-decision-quality continue-on-error: true - name: Audit Event Publishing run: pnpm -C backend run audit:events continue-on-error: true - name: Audit State Machines run: pnpm -C backend run audit:state-machines continue-on-error: true - name: Audit Money Decimal Purity (CFO-P0 防御) run: node --import tsx scripts/audit-money-decimal-purity.ts continue-on-error: true - name: Audit Nested Transaction (CFO-P0-1 + RO-P0-3 防御) run: node --import tsx scripts/audit-nested-transaction.ts continue-on-error: true - name: Audit Test Assertion Density (QA-P0 防御) run: node --import tsx scripts/audit-test-assertion-density.ts continue-on-error: true - name: Audit API Test Coverage (probe-only / read-covered / action-covered / complete-crud) run: pnpm -C backend run audit:api-test-coverage continue-on-error: true - name: Harness Report 聚合 run: pnpm harness report --save continue-on-error: true - if: always() name: Upload audit reports uses: https://gitea.com/actions/upload-artifact@v3 with: name: governance-audit-reports path: | reports/prisma-zod-contract-audit.latest.json reports/formrules-zod-audit.latest.json reports/response-columns-audit.latest.json reports/field-payload-audit.latest.json reports/enum-consistency-audit.latest.json reports/list-page-routes-audit.latest.json reports/ai-assist-coverage.latest.json reports/ai-assist-skill-binding.latest.json reports/ai-assist-context-providers.latest.json reports/coach-script-library.latest.json reports/ai-decision-quality.latest.json reports/event-publishing-audit.latest.json reports/state-machine-integration-audit.latest.json reports/harness-dashboard.latest.json reports/module-grades.latest.json reports/money-decimal-purity-audit.latest.json reports/nested-transaction-audit.latest.json reports/test-assertion-density-audit.latest.json reports/api-test-coverage.latest.json retention-days: "14" - if: always() name: 输出 governance summary run: | if [ -f reports/harness-dashboard.latest.json ]; then node -e " const d = require('./reports/harness-dashboard.latest.json'); const s = d.summary || {}; const lines = [ '## Governance Audit Summary', '', '| Severity | Count |', '|---|---|', \`| CRITICAL | \${s.critical ?? 0} |\`, \`| HIGH | \${s.high ?? 0} |\`, \`| MEDIUM | \${s.medium ?? 0} |\`, \`| LOW | \${s.low ?? 0} |\`, \`| INFO | \${s.info ?? 0} |\`, '', \`- 总 finding: \${s.total ?? 0}\`, \`- 涉及模块: \${s.modulesAffected ?? 0}\`, \`- 审计执行: \${s.auditsRun ?? 0}\`, \`- 审计 missing: \${s.reportsMissing ?? 0}\`, \`- 审计 stale (>7d): \${s.reportsStale ?? 0}\`, \`- 审计 invalid: \${s.reportsInvalid ?? 0}\`, '', '**门禁规则：HIGH+CRITICAL+MEDIUM 必须为 0，且 reportsMissing/Stale/Invalid 必须为 0。**', ]; const fs = require('fs'); const out = process.env.GITHUB_STEP_SUMMARY; if (out) fs.appendFileSync(out, lines.join('\n') + '\n'); else console.log(lines.join('\n')); " else echo '⚠️ harness-dashboard.latest.json 未生成，治理门禁判定失败' fi - name: 治理硬门禁 — 豁免感知 verdict（HARD） run: node --import tsx scripts/harness/governance-gate.ts - name: 文档对账 — CLAUDE.md GOVERNANCE-BASELINE ↔ reports 实测（HARD） run: node --import tsx scripts/harness/baseline-reconcile.ts - name: Harness Gate 综合 PR 验收（HARD） run: pnpm harness gate
...
job_id
governance-audit
needs
["lint-and-typecheck"]
runs_on
["ubuntu-latest"]
task_id
26981
status
2
started
1779507035
stopped
1779507390
created
1779504053
updated
1779507390
raw_concurrency
is_concurrency_evaluated
1
concurrency_group
concurrency_cancel
0
Delete
Cancel