From 0f8cd900fd3bc101b3ee77e06e3c2b5e62e45aed Mon Sep 17 00:00:00 2001 From: "Gan, Jimmy" Date: Wed, 6 May 2026 13:06:38 +0800 Subject: [PATCH] fix: make gitleaks job tolerant of GitHub network failures Gitea CI runner can't reliably reach github.com (TCP reset from 20.205.243.166). Make gitleaks job non-blocking with continue-on-error and graceful fallback when GitHub is unreachable. --- .gitea/workflows/test.yml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/test.yml b/.gitea/workflows/test.yml index e279f62..c22f7ab 100644 --- a/.gitea/workflows/test.yml +++ b/.gitea/workflows/test.yml @@ -17,12 +17,18 @@ jobs: uses: actions/checkout@v4 with: fetch-depth: 0 + continue-on-error: true - name: Run gitleaks run: | - # Install gitleaks and run directly (avoid Docker-in-Docker bind mount issues) - curl -sL https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz | tar xz - ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks check complete (non-blocking)" + # Try to run gitleaks; GitHub may be unreachable from the runner + if curl -fsSL --connect-timeout 10 "https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz" -o gitleaks.tar.gz 2>/dev/null; then + tar xzf gitleaks.tar.gz + ./gitleaks detect --source . --no-git --verbose 2>&1 || echo "gitleaks found issues (non-blocking)" + else + echo "⚠️ Skipping gitleaks — GitHub unreachable from CI runner" + fi + continue-on-error: true backend-tests: name: Backend Tests