This commit is contained in:
@@ -31,6 +31,9 @@ jobs:
|
||||
# 只做 https 形态校验;凭据仅附着于「该基址 + 下方仓库白名单」构造的 URL。
|
||||
# 2026-10-05 修复:此前与硬编码常量严格相等比对,运行器注入值与公网拼写
|
||||
# 不一致时合法检出也被拒绝(PR #213 run 948 实测),仓库白名单不变。
|
||||
print("diag GITHUB_SERVER_URL:", repr(os.environ.get("GITHUB_SERVER_URL")),
|
||||
"GITHUB_API_URL:", repr(os.environ.get("GITHUB_API_URL")),
|
||||
"GITHUB_REPOSITORY:", repr(os.environ.get("GITHUB_REPOSITORY")))
|
||||
SERVER = os.environ.get("GITHUB_SERVER_URL", "").rstrip("/")
|
||||
if urlsplit(SERVER).scheme != "https" or not urlsplit(SERVER).netloc:
|
||||
sys.exit("Checkout server must be the platform-injected https URL")
|
||||
|
||||
Reference in New Issue
Block a user