From 5e1437679bb2d0f5fecc02ea0a139892cf2a6812 Mon Sep 17 00:00:00 2001
From: Jayway Liu <14022498+bluejayway@user.noreply.gitee.com>
Date: Sat, 26 Sep 2026 16:30:39 +0800
Subject: [PATCH] =?UTF-8?q?fix(ci):=20npm=20audit=20/=20pip-audit=20?=
 =?UTF-8?q?=E7=BD=91=E7=BB=9C=E6=8A=96=E5=8A=A8=E9=87=8D=E8=AF=95=E4=B8=89?=
 =?UTF-8?q?=E6=AC=A1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

runner 到 registry.npmjs.org 的 TLS 连接偶发被断（audit endpoint returned an
error），上一轮测试全绿仍被 audit 步骤标红；改为最多重试 3 次、间隔 15 秒。
真实漏洞是确定性的，重试后依然失败，不会漏报
---
 .gitea/workflows/ci.yml | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 971f0f2..da06626 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -37,8 +37,24 @@ jobs:
       - run: uv run python manage.py makemigrations --check --dry-run
       - run: uv run pytest --cov=finance --cov-report=term-missing --cov-fail-under=85
       - run: npm run build
-      - run: npm audit --omit=dev --registry=https://registry.npmjs.org
-      - run: uv run pip-audit
+      # 审计端点在 runner 网络下偶发 TLS 断开（npm error audit endpoint returned
+      # an error），重试区分网络抖动与真实漏洞：漏洞是确定性的，重试后照样红。
+      - name: npm audit (production deps)
+        run: |
+          for attempt in 1 2 3; do
+            npm audit --omit=dev --registry=https://registry.npmjs.org && exit 0
+            echo "::warning::npm audit 第 ${attempt} 次失败，15 秒后重试"
+            sleep 15
+          done
+          exit 1
+      - name: pip-audit
+        run: |
+          for attempt in 1 2 3; do
+            uv run pip-audit && exit 0
+            echo "::warning::pip-audit 第 ${attempt} 次失败，15 秒后重试"
+            sleep 15
+          done
+          exit 1
       - run: uv run python manage.py migrate --noinput
       - run: uv run python manage.py collectstatic --noinput
       - run: uv run python manage.py bootstrap --username admin --organization CI