build(security): add migration and CI security gates

2026-07-28 16:41:36 +08:00
parent 6b43b77c3b
commit 4bfe2900fb
15 changed files with 186 additions and 97 deletions
@@ -0,0 +1,11 @@
+[tool.ruff]
+target-version = "py312"
+
+[tool.ruff.lint]
+# Fail CI for parse errors and undefined names. Broader style cleanup is tracked
+# separately because the existing codebase has a substantial legacy backlog.
+select = ["E9", "F63", "F7", "F82"]
+
+[tool.ruff.lint.per-file-ignores]
+# SQLAlchemy resolves these relationship targets from strings after model import.
+"app/models/*.py" = ["F821"]