From 1d8cf36003bcb9d8689b16d56888fcd1586da4a5 Mon Sep 17 00:00:00 2001 From: lim Date: Thu, 6 Nov 2025 05:40:11 +0000 Subject: [PATCH 1/2] update cicd --- .github/workflows/pr-check.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml index 4bbba9d..6bda102 100644 --- a/.github/workflows/pr-check.yml +++ b/.github/workflows/pr-check.yml @@ -211,6 +211,9 @@ jobs: const commitSha = context.payload.pull_request.head.sha; const branchName = context.payload.pull_request.head.ref; + // Security: Sanitize branch name for safe display in Markdown + const safeBranchName = branchName.replace(/[`\[\]]/g, '\\$&'); + let allPassed = checkResult.lintConclusion === 'success' && checkResult.dockerConclusion === 'success'; let emoji = allPassed ? '✅' : '❌'; let status = allPassed ? 'Passed' : 'Failed'; @@ -247,7 +250,7 @@ jobs: } body += `**Commit:** \`${commitSha}\`\n`; - body += `**Branch:** \`${branchName}\`\n`; + body += `**Branch:** \`${safeBranchName}\`\n`; if (checkResult.lintUrl || checkResult.dockerUrl) { body += `\n**🔗 View Details:**\n`; From 1abb06d1fe242181ac19618ba3a471f3c9ff2f05 Mon Sep 17 00:00:00 2001 From: lim Date: Thu, 6 Nov 2025 05:55:35 +0000 Subject: [PATCH 2/2] chore --- Dockerfile | 1 + prisma/schema.prisma | 3 ++- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 6ff39c2..7437b53 100644 --- a/Dockerfile +++ b/Dockerfile @@ -32,6 +32,7 @@ ENV NEXT_TELEMETRY_DISABLED=1 ENV NEXT_PUBLIC_MOCK_USER='' # Install pnpm and generate Prisma client before build +# Prisma will use binaryTargets from schema.prisma to generate engines for all platforms RUN npm install -g pnpm && \ pnpm prisma generate && \ pnpm run build diff --git a/prisma/schema.prisma b/prisma/schema.prisma index b74ce23..46da6f0 100644 --- a/prisma/schema.prisma +++ b/prisma/schema.prisma @@ -1,5 +1,6 @@ generator client { - provider = "prisma-client-js" + provider = "prisma-client-js" + binaryTargets = ["native", "linux-musl-openssl-3.0.x", "linux-musl-arm64-openssl-3.0.x"] } datasource db {