build(security): add migration and CI security gates

2026-07-28 16:41:36 +08:00
parent 6b43b77c3b
commit 4bfe2900fb
15 changed files with 186 additions and 97 deletions
@@ -6,9 +6,12 @@ backend_verify:
  stage: verify
  image: python:3.12-slim
  script:
-    - pip install --no-cache-dir -r backend/requirements.txt pytest
+    - pip install --no-cache-dir -r backend/requirements.txt pytest ruff bandit pip-audit
    - PYTHONPATH=backend python -m compileall -q backend/app
+    - ruff check backend/app backend/tests
    - PYTHONPATH=backend pytest -q backend/tests
+    - bandit -q -r backend/app -lll
+    - pip-audit -r backend/requirements.txt

 frontend_build:
  stage: build