marvin8/taibai
Watch
1
0
Fork
You've already forked taibai
 0
Code Issues Pull requests Releases 13 Activity Actions

Migrate from codeberg.org to forge.marvin8.zone #26

Manually merged
marvin8 merged 8 commits from chore/migrate-to-forge-marvin8-zone into main 2026-08-08 05:03:39 +00:00
Conversation 4 Commits 8 Files changed 25 +872 -794
agent-pi commented 2026-08-08 01:39:29 +00:00
Collaborator
Copy link

Summary

Migrate taibai from Codeberg.org (MarvinsMastodonTools/taibai) to forge.marvin8.zone (marvin8/taibai).

Changes

  • Remotes: origin updated to forge-marvin8:/marvin8/taibai.git, forge-pi remote added, claude remote removed
  • URLs: All source/docs/issue URLs updated from codeberg.org/MarvinsMastodonTools/taibai to forge.marvin8.zone/marvin8/taibai
  • longwei links: Updated from codeberg.org/MarvinsMastodonTools/longwei to forge.marvin8.zone/marvin8/longwei (already migrated)
  • wuming CI action: Updated to forge.marvin8.zone/marvin8/wuming@main (already migrated)
  • zaojun pre-commit: Updated to forge.marvin8.zone/marvin8/zaojun (already migrated)
  • CI runners: codeberg-small-lazy → suanni across all workflows
  • Docs URL: marvinsmastodontools.codeberg.page/taibai/latest/ → taibai.marvin8.zone/latest/
  • Docs deploy: Git remote URL in CI updated for forge.marvin8.zone; grebedoc step kept as-is
  • Dependencies: Bumped all outdated packages; pre-commit hook revs aligned
  • Redirect JS: Removed dead docs/javascripts/redirect.js (codeberg.page → taibai.marvin8.zone redirect)
  • CLAUDE.md: Push instructions updated from claude to forge-pi remote
## Summary Migrate taibai from Codeberg.org (`MarvinsMastodonTools/taibai`) to forge.marvin8.zone (`marvin8/taibai`). ## Changes - **Remotes:** `origin` updated to `forge-marvin8:/marvin8/taibai.git`, `forge-pi` remote added, `claude` remote removed - **URLs:** All source/docs/issue URLs updated from `codeberg.org/MarvinsMastodonTools/taibai` to `forge.marvin8.zone/marvin8/taibai` - **longwei links:** Updated from `codeberg.org/MarvinsMastodonTools/longwei` to `forge.marvin8.zone/marvin8/longwei` (already migrated) - **wuming CI action:** Updated to `forge.marvin8.zone/marvin8/wuming@main` (already migrated) - **zaojun pre-commit:** Updated to `forge.marvin8.zone/marvin8/zaojun` (already migrated) - **CI runners:** `codeberg-small-lazy` → `suanni` across all workflows - **Docs URL:** `marvinsmastodontools.codeberg.page/taibai/latest/` → `taibai.marvin8.zone/latest/` - **Docs deploy:** Git remote URL in CI updated for forge.marvin8.zone; grebedoc step kept as-is - **Dependencies:** Bumped all outdated packages; pre-commit hook revs aligned - **Redirect JS:** Removed dead `docs/javascripts/redirect.js` (codeberg.page → taibai.marvin8.zone redirect) - **CLAUDE.md:** Push instructions updated from `claude` to `forge-pi` remote
⬆️ (deps) bump dependencies
Some checks failed
/ gitleaks (pull_request) Successful in 19s
Details
/ checks (pull_request) Failing after 3m31s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
/ ai-review (pull_request) Has been cancelled
Details
40fc81d118
🐛 (ci) fix ruff PLR0917 violations and pysentry vulnerabilities
Some checks failed
/ gitleaks (pull_request) Successful in 10s
Details
/ checks (pull_request) Successful in 3m21s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
/ ai-review (pull_request) Has been cancelled
Details
0c5613ee24
♻️ (ci) consolidate checks.yml and ai-review.yml into ci.yml
All checks were successful
/ pr-review (pull_request) Successful in 57s
Details
/ gitleaks (pull_request) Successful in 10s
Details
/ checks (pull_request) Successful in 3m41s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
07ee2f538f
🔧 (ci) use zhuiri runner
Some checks failed
/ gitleaks (pull_request) Successful in 14s
Details
/ pr-review (pull_request) Successful in 56s
Details
/ publish (pull_request) Has been cancelled
Details
/ deploy-docs (pull_request) Has been cancelled
Details
/ checks (pull_request) Has been cancelled
Details
a3dea0f05e
forgejo-actions reviewed 2026-08-08 02:09:14 +00:00
forgejo-actions left a comment
Copy link

WuMing

Found 2 issue(s). See inline comments below.

## WuMing Found **2** issue(s). See inline comments below.
.forgejo/workflows/ci.yml
@ -0,0 +12,4 @@
runs-on: zhuiri
if: github.event_name == 'pull_request'
steps:
- uses: https://forge.marvin8.zone/marvin8/wuming@main
forgejo-actions commented 2026-08-08 02:09:14 +00:00
Copy link

security [HIGH]

External action referenced via branch '@main' instead of a pinned commit SHA. This allows arbitrary code changes to be executed without review, which could lead to credential exfiltration (forge.token and wuming_deepseek_key are passed to it). Pin to a specific commit hash or use a verified tag. (A08: Software and Data Integrity Failures)

**security** [HIGH] External action referenced via branch '@main' instead of a pinned commit SHA. This allows arbitrary code changes to be executed without review, which could lead to credential exfiltration (forge.token and wuming_deepseek_key are passed to it). Pin to a specific commit hash or use a verified tag. (A08: Software and Data Integrity Failures) <!-- wuming:sha256:4717384c43089eea254f9cffdb6e73e15cc4fb8571083b07ca8a73b416117375 -->
marvin8 marked this conversation as resolved
.forgejo/workflows/ci.yml
@ -0,0 +88,4 @@
run: |
git config user.email "ci@forgejo"
git config user.name "Forgejo Actions"
git remote set-url origin https://x-token-auth:$FORGEJO_TOKEN@forge.marvin8.zone/${{ github.repository }}.git
forgejo-actions commented 2026-08-08 02:09:14 +00:00
Copy link

security [MEDIUM]

Access token passed directly in a shell command may be exposed in build logs if CI masking fails. Use a credential helper or environment variable with Git's credential store instead of embedding the token in the URL. (A09: Security Logging and Monitoring Failures)

**security** [MEDIUM] Access token passed directly in a shell command may be exposed in build logs if CI masking fails. Use a credential helper or environment variable with Git's credential store instead of embedding the token in the URL. (A09: Security Logging and Monitoring Failures) <!-- wuming:sha256:f244f41e647a0631d521b3d20ebe4149190f305f0e23b179b704f917773692df -->
marvin8 marked this conversation as resolved
🔧 (ci) revert weekly-checks.yml back to suanni
All checks were successful
/ gitleaks (pull_request) Successful in 14s
Details
/ pr-review (pull_request) Successful in 54s
Details
/ checks (pull_request) Successful in 2m39s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
01e8ff5ed6
📝 (docs) merge CLAUDE.md into AGENTS.md, replace CLAUDE.md with symlink
All checks were successful
/ pr-review (pull_request) Successful in 5s
Details
/ gitleaks (pull_request) Successful in 16s
Details
/ checks (pull_request) Successful in 2m37s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
f86a81846b
forgejo-actions commented 2026-08-08 04:41:16 +00:00
Copy link

This PR is too large to review automatically (2272 lines; limit is 2000). Please consider splitting it into smaller PRs.

This PR is too large to review automatically (2272 lines; limit is 2000). Please consider splitting it into smaller PRs.
♻️ (refactor) make optional CLI args and internal helpers keyword-only
All checks were successful
/ pr-review (pull_request) Successful in 6s
Details
/ gitleaks (pull_request) Successful in 19s
Details
/ checks (pull_request) Successful in 2m40s
Details
/ publish (pull_request) Has been skipped
Details
/ deploy-docs (pull_request) Has been skipped
Details
0b51237077
forgejo-actions commented 2026-08-08 04:56:16 +00:00
Copy link

This PR is too large to review automatically (2438 lines; limit is 2000). Please consider splitting it into smaller PRs.

This PR is too large to review automatically (2438 lines; limit is 2000). Please consider splitting it into smaller PRs.
marvin8 approved these changes 2026-08-08 05:01:32 +00:00
marvin8 manually merged commit 929a9f8d3d into main 2026-08-08 05:03:39 +00:00
marvin8 deleted branch chore/migrate-to-forge-marvin8-zone 2026-08-08 05:07:15 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
marvin8
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
marvin8/taibai!26
No description provided.