cshandClaude Opus 4.8 94d968d68d 🔒 security(ci): keep sync token out of remote url via GIT_ASKPASS ...

- inline .gitea/ci/sync_tsl_playbook.sh into sync-tsl-playbook.yml
- clone over plain repo url; credentials flow through an ephemeral
  GIT_ASKPASS helper removed in cleanup
- rewrite tests to extract and exercise the workflow run block

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-08 13:11:58 +08:00

..

ci

🔒 security(ci): keep sync token out of remote url via GIT_ASKPASS

2026-07-08 13:11:58 +08:00

workflows

🔒 security(ci): keep sync token out of remote url via GIT_ASKPASS

2026-07-08 13:11:58 +08:00