old-docker-actions/ai-code-review
2
0
Fork 0
Code Pull Requests 1 Actions Releases 2 Activity

fix(TLS 驗證): 移除 git 與 OpenRouter 的不安全憑證略過設定

Browse Source
This commit is contained in:
jiantw83
2026-06-29 10:49:22 +00:00
parent f26e9deba7
commit 68ce92b0e5
4 changed files with 4 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/test/git.test.js
+3 -3
View File
@@ -96,7 +96,7 @@ describe('commitAndPush', () => {
for (const { args, opts } of networkCalls) {
assert.ok(opts?.env?.GIT_ASKPASS, `GIT_ASKPASS missing for git ${args[0]}`);
assert.equal(opts.env.GIT_SSL_NO_VERIFY, 'true', `GIT_SSL_NO_VERIFY missing for git ${args[0]}`);
assert.equal(opts.env.GIT_SSL_NO_VERIFY, undefined, `GIT_SSL_NO_VERIFY must not be forced for git ${args[0]}`);
}
});
@@ -267,7 +267,7 @@ describe('cloneRepo', () => {
assert.ok(networkCalls.length > 0, 'expected at least one network git call');
for (const { args, opts } of networkCalls) {
assert.ok(opts?.env?.GIT_ASKPASS, `GIT_ASKPASS missing for git ${args[0]}`);
assert.equal(opts.env.GIT_SSL_NO_VERIFY, 'true', `GIT_SSL_NO_VERIFY missing for git ${args[0]}`);
assert.equal(opts.env.GIT_SSL_NO_VERIFY, undefined, `GIT_SSL_NO_VERIFY must not be forced for git ${args[0]}`);
}
});
@@ -310,7 +310,7 @@ describe('verifyRemoteAccess', () => {
const lsRemote = calls.find(c => c.args[0] === 'ls-remote');
assert.ok(lsRemote, 'expected git ls-remote to run');
assert.ok(lsRemote.opts?.env?.GIT_ASKPASS, 'expected GIT_ASKPASS env for ls-remote');
assert.equal(lsRemote.opts.env.GIT_SSL_NO_VERIFY, 'true');
assert.equal(lsRemote.opts.env.GIT_SSL_NO_VERIFY, undefined);
});
it('does not leak the token in ls-remote args', () => {