@@ -10,6 +10,7 @@ on:
1010type: choice
1111options:
1212 - all
13+ - core-auth-secrets
1314 - channel-runtime-boundary
1415 - gateway-runtime-boundary
1516 - memory-runtime-boundary
@@ -27,6 +28,16 @@ on:
2728 - "packages/plugin-package-contract/**"
2829 - "packages/plugin-sdk/**"
2930 - "packages/memory-host-sdk/**"
31+ - "src/agents/*auth*.ts"
32+ - "src/agents/**/*auth*.ts"
33+ - "src/agents/auth-health*.ts"
34+ - "src/agents/auth-profiles"
35+ - "src/agents/auth-profiles/**"
36+ - "src/agents/bash-tools.exec-host-shared.ts"
37+ - "src/agents/sandbox"
38+ - "src/agents/sandbox/**"
39+ - "src/agents/sandbox.ts"
40+ - "src/agents/sandbox-*.ts"
3041 - "src/channels/**"
3142 - "src/auto-reply/reply/post-compaction-context.ts"
3243 - "src/auto-reply/reply/queue/**"
@@ -36,6 +47,16 @@ on:
3647 - "src/commands/doctor-session-*.ts"
3748 - "src/commands/session-store-targets.ts"
3849 - "src/commands/sessions*.ts"
50+ - "src/cron/service/jobs.ts"
51+ - "src/cron/stagger.ts"
52+ - "src/gateway/*auth*.ts"
53+ - "src/gateway/**/*auth*.ts"
54+ - "src/gateway/*secret*.ts"
55+ - "src/gateway/**/*secret*.ts"
56+ - "src/gateway/protocol/**/*secret*.ts"
57+ - "src/gateway/resolve-configured-secret-input-string*.ts"
58+ - "src/gateway/security-path*.ts"
59+ - "src/gateway/server-methods/secrets*.ts"
3960 - "src/gateway/server-startup-memory.ts"
4061 - "src/gateway/method-scopes.ts"
4162 - "src/gateway/protocol/**"
@@ -45,6 +66,7 @@ on:
4566 - "src/infra/diagnostic-*.ts"
4667 - "src/infra/diagnostics-timeline.ts"
4768 - "src/infra/outbound/**"
69+ - "src/infra/secret-file*.ts"
4870 - "src/infra/session-delivery-queue*.ts"
4971 - "src/logging/diagnostic*.ts"
5072 - "src/memory/**"
@@ -54,6 +76,8 @@ on:
5476 - "src/plugin-sdk/**"
5577 - "src/plugins/**"
5678 - "src/process/**"
79+ - "src/secrets/**"
80+ - "src/security/**"
5781schedule:
5882 - cron: "30 6 * * *"
5983@@ -77,6 +101,7 @@ jobs:
77101timeout-minutes: 5
78102outputs:
79103channel: ${{ steps.detect.outputs.channel }}
104+core_auth_secrets: ${{ steps.detect.outputs.core_auth_secrets }}
80105gateway: ${{ steps.detect.outputs.gateway }}
81106memory: ${{ steps.detect.outputs.memory }}
82107mcp_process: ${{ steps.detect.outputs.mcp_process }}
@@ -97,6 +122,7 @@ jobs:
97122 set -euo pipefail
9812399124 channel=false
125+ core_auth_secrets=false
100126 gateway=false
101127 memory=false
102128 mcp_process=false
@@ -108,6 +134,7 @@ jobs:
108134109135 if [[ "${EVENT_NAME}" != "pull_request" ]]; then
110136 channel=true
137+ core_auth_secrets=true
111138 gateway=true
112139 memory=true
113140 mcp_process=true
@@ -121,6 +148,7 @@ jobs:
121148 case "${file}" in
122149 .github/codeql/*|.github/workflows/codeql-critical-quality.yml)
123150 channel=true
151+ core_auth_secrets=true
124152 gateway=true
125153 memory=true
126154 mcp_process=true
@@ -136,6 +164,13 @@ jobs:
136164 src/channels/*)
137165 channel=true
138166 ;;
167+ src/gateway/protocol/*secret*.ts|src/gateway/server-methods/secrets*.ts)
168+ core_auth_secrets=true
169+ gateway=true
170+ ;;
171+ src/agents/*auth*.ts|src/agents/auth-health*.ts|src/agents/auth-profiles|src/agents/auth-profiles/*|src/agents/bash-tools.exec-host-shared.ts|src/agents/sandbox|src/agents/sandbox.ts|src/agents/sandbox-*.ts|src/agents/sandbox/*|src/cron/service/jobs.ts|src/cron/stagger.ts|src/gateway/*auth*.ts|src/gateway/*secret*.ts|src/gateway/resolve-configured-secret-input-string*.ts|src/gateway/security-path*.ts|src/infra/secret-file*.ts|src/secrets/*|src/security/*)
172+ core_auth_secrets=true
173+ ;;
139174 src/gateway/method-scopes.ts|src/gateway/protocol/*|src/gateway/server-methods/*|src/gateway/server-methods.ts|src/gateway/server-methods-list.ts)
140175 gateway=true
141176 ;;
@@ -189,6 +224,7 @@ jobs:
189224190225 {
191226 echo "channel=${channel}"
227+ echo "core_auth_secrets=${core_auth_secrets}"
192228 echo "gateway=${gateway}"
193229 echo "memory=${memory}"
194230 echo "mcp_process=${mcp_process}"
@@ -201,7 +237,8 @@ jobs:
201237202238 core-auth-secrets:
203239name: Critical Quality (core-auth-secrets)
204-if: ${{ github.event_name != 'pull_request' && (github.event_name != 'workflow_dispatch' || inputs.profile == 'all') }}
240+needs: quality-shards
241+if: ${{ needs.quality-shards.outputs.core_auth_secrets == 'true' && (github.event_name != 'pull_request' || !github.event.pull_request.draft) && (github.event_name == 'pull_request' || github.event_name != 'workflow_dispatch' || inputs.profile == 'all' || inputs.profile == 'core-auth-secrets') }}
205242runs-on: blacksmith-4vcpu-ubuntu-2404
206243timeout-minutes: 25
207244steps:
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。