zealotchen 03a5a2971e fix(yml): fix GitHub Actions self-hosted runner RCE vulnerability (#4570) ...

- Remove android_build_tests.yml and android_build_tests_bypass.yml to
  eliminate the self-hosted runner attack surface on PR events
- Expand RISK_PATTERNS in reuse_approve_checks_run.yml to cover
  build.gradle, gradlew, CMakeLists.txt, shell/Python scripts, and
  Dockerfiles, preventing auto-approval of PRs that modify CI-executed
  build files

Fixes: RCE via malicious build.gradle injected through fork PR +
Docker socket escape to host root shell

2026-06-04 14:58:31 +08:00

..

ISSUE_TEMPLATE

feat(github): delete old issue templates

2025-09-12 11:02:07 +08:00

workflows

fix(yml): fix GitHub Actions self-hosted runner RCE vulnerability (#4570)

2026-06-04 14:58:31 +08:00

CODE_OF_CONDUCT.md

chore(docs): perf documents

2021-07-07 12:56:35 +08:00

CODEOWNERS

fix(core): fix code owner file (#4163)

2025-01-02 14:36:48 +08:00

CONTRIBUTING.md

chore(pr): change guideline index

2022-02-22 16:43:57 +08:00

PULL_REQUEST_TEMPLATE.md

chore(docs): perf documents

2021-07-07 12:56:35 +08:00