5 Commits

Author	SHA1	Message	Date
tangmengqiu	0168f766de	fix(ci): Add comprehensive permissions to pr-checks workflow ... Add workflow-level default permissions and explicit per-job permissions following the principle of least privilege: Workflow-level (default): - contents: read - Read repository contents - pull-requests: write - Manage PR labels and comments - issues: write - Manage issues (PRs are issues in GitHub API) Job-level overrides: - validate-pr: Inherits workflow defaults (needs issue/PR write access) - backend-tests: Downgrade to read-only (no write operations needed) - frontend-tests: Downgrade to read-only (no write operations needed) - auto-label: Add missing issues:write (labeler operates on PR issues) - security-check: Add security-events:write (upload SARIF results) - secrets-check: Downgrade to read-only (scanning only) - all-checks: Downgrade to read-only (status checking only) This fixes: 1. Potential 403 errors when auto-label tries to add labels to PR issues 2. Missing permission for uploading security scan results 3. Overly permissive access for read-only jobs Related: #282 Co-Authored-By: tinkle-community <tinklefund@gmail.com>	2025-11-02 18:23:28 -05:00
zbhan	3af9f3e376	fix: github workflow permission	2025-11-01 22:25:32 -04:00
zbhan	2f4f277001	feat: pr validation	2025-11-01 18:25:44 -04:00
zbhan	fcacfbd79d	Feat: Update docs ... - 重构文档结构 - 更新文档内容 - 制定roadmap - 提供中/EN 双语文档	2025-11-01 15:05:24 -04:00
tinkle-community	d0dc58d7ee	Docs: Add bounty templates for Hyperliquid and Aster exchange integration ... Add comprehensive bounty documentation to recruit contributors for exchange integrations: **New Files:** - `.github/ISSUE_TEMPLATE/feature_request.md` - GitHub Issue template - `INTEGRATION_BOUNTY_HYPERLIQUID.md` - Complete Hyperliquid integration spec - `INTEGRATION_BOUNTY_ASTER.md` - Complete Aster integration spec - `HOW_TO_POST_BOUNTY.md` - Step-by-step guide for posting bounties **Bounty Documentation Includes:** - Clear task requirements and acceptance criteria - Technical specifications and interface definitions - File structure and implementation guidelines - Testing and documentation requirements - Contribution workflow - Support resources and community links **HOW_TO_POST_BOUNTY.md Guide:** - Two methods to post GitHub Issues (Web UI + GitHub CLI) - Bounty platform recommendations (Gitcoin, Bountysource, IssueHunt) - Social media promotion templates (Twitter, Telegram, Reddit) - Issue management best practices - Legal and quality control considerations **Benefits:** - Standardized contribution process - Clear technical requirements - Professional bounty presentation - Easy for maintainers to post and manage - Attractive for potential contributors Ready to recruit developers for multi-exchange support! 🚀 Co-Authored-By: tinkle-community <tinklefund@gmail.com>	2025-10-29 19:47:20 +08:00