Skip to content

fix: gate 的 pyyaml 升级为版本+sha256 双锚定（ADR-0011） #59

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
randypanding merged 1 commit into from
Aug 19, 2026
Merged

fix: gate 的 pyyaml 升级为版本+sha256 双锚定（ADR-0011） #59

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/requirements-gate.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
pyyaml==6.0.3 --hash=sha256:ba1cc08a7ccde2d2ec775841541641e4548226580ab850948cbfda66a1befcdc
6 changes: 5 additions & 1 deletion .github/workflows/gate.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,11 @@ jobs:
python-version: "3.12"
- name: YAML 全量解析（governance + standards）
run: |
pip install pyyaml==6.0.3 -q # 版本钉死（scorecard PinnedDependencies；ADR-0011 版本钉死遗留项）
# 版本+sha256 双锚定（scorecard PinnedDependencies pipCommand not pinned by hash；
# ADR-0011 版本钉死遗留项）。新版 pip 的 --hash 仅支持 requirements 文件形态，
# 故经 .github/requirements-gate.txt 下发；哈希对应 cp312 manylinux x86_64 wheel
# （本 job 固定 python 3.12 + ubuntu-latest），升级版本须同步换哈希
pip install -q --require-hashes -r .github/requirements-gate.txt
python3 - <<'EOF'
import glob, sys, yaml
files = glob.glob("governance/**/*.yaml", recursive=True) + glob.glob("standards/**/*.yaml", recursive=True)
Expand Down