zealotchen 03a5a2971e fix(yml): fix GitHub Actions self-hosted runner RCE vulnerability (#4570) ...

- Remove android_build_tests.yml and android_build_tests_bypass.yml to
  eliminate the self-hosted runner attack surface on PR events
- Expand RISK_PATTERNS in reuse_approve_checks_run.yml to cover
  build.gradle, gradlew, CMakeLists.txt, shell/Python scripts, and
  Dockerfiles, preventing auto-approval of PRs that modify CI-executed
  build files

Fixes: RCE via malicious build.gradle injected through fork PR +
Docker socket escape to host root shell

2026-06-04 14:58:31 +08:00

..

config

feat(voltron): optimize voltron demo and add voltron architecture

2023-06-20 20:00:09 +08:00

tools

feat(android): v8 10.6.194.26 version support 16k pages patch

2025-08-13 10:44:36 +08:00

3rd_prebuilt_sqlite.yml

chore(build): add sqlite build action

2023-06-26 07:16:32 +00:00

3rd_prebuilt_v8.yml

feat(android): v8 10.6.194.26 version support 16k pages patch

2025-08-13 10:44:36 +08:00

docker_build_image.yml

chore(docker): move docker files folder into buildconfig

2023-02-01 08:28:29 +00:00

docs_markdown_lint_bypass.yml

ci(workflows): adjust optional status checks to be required

2022-05-26 05:17:33 -05:00

docs_markdown_lint.yml

chore(ci): update ci configuration

2022-08-15 17:33:37 +08:00

frontend_build_tests_bypass.yml

chore(ci): update ci configuration

2022-08-15 17:33:37 +08:00

frontend_build_tests.yml

fix(vue): fix rootview conditional statement (#3355)

2023-07-05 21:04:34 +08:00

gh_action_approve_checks.yml

fix(workflows): update Github bot app key and id configuration (#2811)

2022-12-16 06:44:34 +00:00

gh_action_merge.yml

feat(workflows): skip privilege escalation when conditions are met

2023-01-30 08:06:37 +00:00

gh_issue_crash_report.yml

fix(action): github action RCE (#4547)

2026-04-01 15:22:23 +08:00

gh_licence_checks_bypass.yml

chore(ci): update ci configuration

2022-08-15 17:33:37 +08:00

gh_licence_checks.yml

feat(workflows): change license check configuration file path

2022-12-06 15:23:20 +08:00

gh_mark_and_close_stalled.yml

feat(workflows): change stale label name

2022-12-06 15:23:20 +08:00

gh_pr_auto_merger.yml

fix(workflows): each head SHA will only trigger one merge action

2023-02-10 07:29:59 +00:00

gh_pr_auto_updater.yml

feat(workflows): use classic PAT instead of Github App Token

2023-01-16 10:26:54 +00:00

gh_pr_checks_approval.yml

fix(workflow): fix workflow yml file syntax error

2023-03-27 11:02:11 +08:00

gh_pr_guide.yml

fix(workflows): change pull_request_help_needed label name

2022-12-15 11:06:23 +08:00

gh_pr_labeler.yml

feat(workflows): add pull request merge guard and update it's action

2022-12-15 11:06:23 +08:00

gh_pr_merge_guard.yml

fix(workflows): fix unexpected passing when synchronize action occurs

2023-02-07 07:19:02 +00:00

gh_pr_review_notification.yml

feat(workflows): change review notification schedule

2023-01-13 11:27:40 +00:00

gh_pr_review.yml

refactor(workflows): refactor pull requests checks approval process

2022-12-15 11:06:23 +08:00

gh_runners_monitor.yml

feat(workflows): optimize self-hosted runner alarm strategy

2023-02-01 02:57:12 +00:00

gh_webhook_retrier.yml

feat(workflows): add webhook retrier

2023-02-06 08:20:50 +00:00

git_commit_lint.yml

chore(ci): update ci configuration

2022-08-15 17:33:37 +08:00

hip_archive_artifact.yml

ci(workflows): replaced obsolete workflow command

2022-11-08 11:41:19 +08:00

hip_info_artifacts.yml

chore(ci): update ci configuration

2022-08-15 17:33:37 +08:00

ios_build_tests_bypass.yml

chore(ios): remove unnecessary workflow for ios

2023-05-09 03:41:54 +00:00

ios_build_tests.yml

build(ios): fix workflow build script

2024-05-20 11:42:14 +08:00

project_artifact_compare.yml

build(ios): remove xcodegen usage due to test support issues

2024-05-17 11:12:29 +08:00

project_artifact_release.yml

fix(action): fix 3.0 release and compare action

2023-07-05 13:01:04 +00:00

project_artifact_snapshot.yml

fix(action): change project_artifact_snapshot name (#3818)

2024-04-09 20:43:36 +08:00

project_dependency_review.yml

chore(workflows): add project dependency review

2023-02-10 07:44:38 +00:00

reuse_approve_checks_run.yml

fix(yml): fix GitHub Actions self-hosted runner RCE vulnerability (#4570)

2026-06-04 14:58:31 +08:00

reuse_classify_commits.yml

feat(workflows): only uses non-merge commits as valid commits (#2862)

2023-01-13 08:03:40 +00:00

reuse_get_workflow_output.yml

refactor(workflows): refactor pull requests checks approval process

2022-12-15 11:06:23 +08:00

security_codeql_analyses.yml

chore(workflow): fix action runner failed

2023-06-20 13:18:52 +00:00

voltron_build_tests_bypass.yml

feat(workflows): limit workflow concurrency to save resources

2023-02-01 11:21:59 +08:00

voltron_build_tests.yml

feat(voltron): update workflow xcode version

2023-07-04 02:33:16 +00:00