Merge pull request 'fix: make gitleaks job tolerant of GitHub network failures' (#62) from dev into main

2026-05-06 13:15:05 +08:00
parent 4dbe437a7a 0f8cd900fd
commit deda3f5104
1 changed files with 9 additions and 3 deletions
@@ -17,12 +17,18 @@ jobs:
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
+        continue-on-error: true

      - name: Run gitleaks
        run: |
-          # Install gitleaks and run directly (avoid Docker-in-Docker bind mount issues)
-          curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar xz
-          ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks check complete (non-blocking)"
+          # Try to run gitleaks; GitHub may be unreachable from the runner
+          if curl -fsSL --connect-timeout 10 "https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz" -o gitleaks.tar.gz 2>/dev/null; then
+            tar xzf gitleaks.tar.gz
+            ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks found issues (non-blocking)"
+          else
+            echo "⚠️  Skipping gitleaks — GitHub unreachable from CI runner"
+          fi
+        continue-on-error: true

  backend-tests:
    name: Backend Tests