sqlite-web 0.7.2
gitea.db
action_run_job
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 48634 from action_run_job
id
48634
run_id
27280
repo_id
116
owner_id
5
commit_sha
8b6a3353b349dac24024c1ba5bb4b3ca2e3999de
is_fork_pull_request
0
name
Static checks (locked engineering dependency)
attempt
1
workflow_payload
name: Platform "on": pull_request:
name: Platform "on": pull_request: push: branches: [main] workflow_dispatch: env: GITEA_ACTIONS: "true" PNPM_VERSION: 9.15.9 jobs: public-static: name: Static checks (locked engineering dependency) runs-on: ubuntu-latest steps: - name: Candidate tag (real run attempt, computed per job) run: | if ! [[ "${GITHUB_RUN_ATTEMPT:-}" =~ ^[1-9][0-9]*$ ]]; then echo "::error::GITHUB_RUN_ATTEMPT is missing or invalid on this runner; the candidate tag needs the real attempt (no fallback, decision 2026-10-11)" exit 1 fi echo "CANDIDATE_TAG=${GITHUB_SHA}-${GITHUB_RUN_ID}-${GITHUB_RUN_ATTEMPT}" >> "$GITHUB_ENV" - name: Prepare fixed Actions using existing read-only job token run: | python3 <<'PYTHON' import hashlib,os,pathlib,re,subprocess,tempfile,urllib.request sha=os.environ.get('GITHUB_SHA','') if not re.fullmatch('[0-9a-f]{40}',sha):raise RuntimeError('FIXED_SOURCE_REQUIRED') if os.environ.get('GITHUB_SERVER_URL','').rstrip('/')!='https://gitea.g-hi.com' or os.environ.get('GITHUB_REPOSITORY')!='luoanwu/enterprise-platform':raise RuntimeError('UNEXPECTED_ORIGIN') token=os.environ.get('CI_ACTION_READ_TOKEN','') if not token or any(c in token for c in '\r\n'):raise RuntimeError('JOB_TOKEN_REQUIRED') class NoRedirect(urllib.request.HTTPRedirectHandler): def redirect_request(self,*args,**kwargs):return None request=urllib.request.Request('https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/raw/ci/prepare-actions.py?ref='+sha,headers={'Authorization':'token '+token}) with urllib.request.build_opener(NoRedirect()).open(request,timeout=20) as response: data=response.read(65537) if len(data)>65536 or hashlib.sha256(data).hexdigest()!='d1a743408b27459c015d90fa6035952cf6f26f43899ee8a7cd24df39c2af0102':raise RuntimeError('BOOTSTRAP_d1a743408b27459c015d90fa6035952cf6f26f43899ee8a7cd24df39c2af0102_MISMATCH') with tempfile.TemporaryDirectory(prefix='verified-action-bootstrap-') as td: script=pathlib.Path(td,'prepare-actions.py');script.write_bytes(data) subprocess.run(['python3',str(script)],check=True,timeout=510) PYTHON shell: bash env: CI_ACTION_READ_TOKEN: ${{ github.token }} - uses: ./.git/ci-actions/checkout with: fetch-depth: "0" persist-credentials: "false" - name: Enable pnpm run: | corepack enable corepack prepare pnpm@${PNPM_VERSION} --activate - uses: ./.git/ci-actions/setup-node with: node-version: "22" - name: Private registry auth (temporary userconfig) uses: ./.github/actions/private-npm with: token: ${{ secrets.PLATFORM_NPM_TOKEN }} - name: Install locked governance tools run: pnpm --dir governance install --frozen-lockfile --ignore-scripts - name: Test bounded Action preparation (synthetic credentials only) run: PYTHONDONTWRITEBYTECODE=1 python3 ci/test-prepare-actions.py - name: Test image release credential preflight (synthetic credentials only) run: node --test .github/scripts/test/*.test.mjs - name: Install contracts dependencies (public npm only, frozen lockfile; CT-1 build / validators / generated-types check) run: pnpm --dir contracts install --frozen-lockfile - name: Install dictionary service dependencies (independent frozen lockfile) run: pnpm --dir runtime/services/master-data-registry install --frozen-lockfile - name: Docker CLI for pinned-image syntax checks (runner images may ship without it) run: command -v docker >/dev/null || { apt-get update && apt-get install -y --no-install-recommends docker.io; } - name: Caddy and alert rule syntax (compose-pinned images; skipped fails here) run: | pnpm check:caddy pnpm check:otel env: CHECK_SYNTAX_REQUIRED: "1" - name: Governance checks (exact engineering package; public contracts dependencies) run: | pnpm check:module-imports pnpm check:canonical-ids pnpm check:code-sets pnpm check:omni-platform pnpm check:fact-pii pnpm check:catalog pnpm check:migration-decs pnpm test pnpm contracts:check:local - name: Pack publishable packages (contracts + governance; no publish) run: | rm -rf dist-artifacts pnpm --dir contracts build pnpm --dir governance pack --pack-destination ../dist-artifacts pnpm --dir contracts pack --pack-destination ../dist-artifacts ls -la dist-artifacts - if: ${{ always() && env.CANDIDATE_TAG != '' }} name: Upload package tarballs uses: ./.git/ci-actions/upload-artifact with: if-no-files-found: error name: platform-packages-${{ env.CANDIDATE_TAG }} path: dist-artifacts/*.tgz retention-days: "30" - if: ${{ always() && env.CANDIDATE_TAG != '' }} name: Upload public static evidence uses: ./.git/ci-actions/upload-artifact with: if-no-files-found: warn name: platform-public-static-${{ env.CANDIDATE_TAG }} path: reports/*.latest.json retention-days: "30" timeout-minutes: "15" permissions: contents: read
...
job_id
public-static
needs
null
runs_on
["ubuntu-latest"]
task_id
39371
status
2
started
1794247805
stopped
1794247805
created
1794247805
updated
1794247805
raw_concurrency
is_concurrency_evaluated
0
concurrency_group
concurrency_cancel
0
Delete
Cancel