fix(ci): reject TEST revisions without memory protection

2026-11-06 13:59:34 +08:00
parent 9c8273d9a0
commit f4362f6dfd
2 changed files with 67 additions and 1 deletions
@@ -125,6 +125,14 @@ pipeline {
                            git cat-file -e "${RESOLVED_SOURCE_COMMIT}^{commit}"
                            git checkout --detach "${RESOLVED_SOURCE_COMMIT}"
                            test "$(git rev-parse HEAD)" = "$(git rev-parse "${RESOLVED_SOURCE_COMMIT}^{commit}")"
+                            # TEST 重发旧提交也须包含限额文件及部署入口，避免重建时恢复无限制容器。
+                            if [ "$RESOLVED_ENVIRONMENT" = "test" ]; then
+                              if ! git cat-file -e "${RESOLVED_SOURCE_COMMIT}:deploy/docker-compose.test-limits.yml" 2>/dev/null ||
+                                 ! git grep -q -F 'docker-compose.test-limits.yml' "$RESOLVED_SOURCE_COMMIT" -- deploy/scripts/deploy-built-service.sh; then
+                                echo "目标 TEST 提交缺少完整内存保护，请选择包含限额修复的 test 提交" >&2
+                                exit 1
+                              fi
+                            fi
                            if [ "$RESOLVED_ENVIRONMENT" = "production" ]; then
                              git fetch --no-tags origin +refs/heads/main:refs/remotes/origin/main
                              git merge-base --is-ancestor "$RESOLVED_SOURCE_COMMIT" origin/main || {