Merge commit '3d83740f88b6aaba6962256be517656496b83f25' into lsp-server

docs/standards/playbook/.gitea/workflows/standards-check.yml

@@ -24,52 +24,48 @@ jobs:
     steps:
       - name: 📥 准备仓库
         run: |
+          set -euo pipefail
+
           echo "========================================"
           echo "📥 准备仓库到 WORKSPACE_DIR"
           echo "========================================"
 
           REPO_NAME="${{ github.event.repository.name }}"
-          REPO_DIR="${{ env.WORKSPACE_DIR }}/$REPO_NAME"
           TOKEN="${{ secrets.WORKFLOW }}"
-          if [ -n "$TOKEN" ]; then
-            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${{ github.repository }}.git"
-          else
-            REPO_URL="${GITHUB_SERVER_URL}/${{ github.repository }}.git"
-          fi
-
-          if [ -d "$REPO_DIR" ]; then
-            if [ -d "$REPO_DIR/.git" ]; then
-              cd "$REPO_DIR"
-              git clean -fdx
-              git reset --hard
-              git fetch --all --tags --force --prune --prune-tags
-            else
-              rm -rf "$REPO_DIR"
-            fi
-          fi
-
-          if [ ! -d "$REPO_DIR/.git" ]; then
-            mkdir -p "${{ env.WORKSPACE_DIR }}"
-            git clone "$REPO_URL" "$REPO_DIR"
-            cd "$REPO_DIR"
-          fi
-
           TARGET_SHA="${{ github.sha }}"
           TARGET_REF="${{ github.ref }}"
-          if git cat-file -e "$TARGET_SHA^{commit}" 2>/dev/null; then
-            git checkout -f "$TARGET_SHA"
+          TARGET_REF_NAME="${{ github.ref_name }}"
+
+          mkdir -p "$WORKSPACE_DIR"
+          REPO_DIR="$(mktemp -d "$WORKSPACE_DIR/${REPO_NAME}.XXXXXX")"
+
+          if [ -n "$TOKEN" ]; then
+            REPO_URL="https://oauth2:${TOKEN}@${GITHUB_SERVER_URL#https://}/${GITHUB_REPOSITORY}.git"
+          else
+            REPO_URL="${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}.git"
+          fi
+
+          git clone "$REPO_URL" "$REPO_DIR"
+
+          if git -C "$REPO_DIR" cat-file -e "${TARGET_SHA}^{commit}" 2>/dev/null; then
+            git -C "$REPO_DIR" checkout -f "$TARGET_SHA"
           else
             if [ -n "$TARGET_REF" ]; then
-              git fetch origin "$TARGET_REF"
-              git checkout -f FETCH_HEAD
+              git -C "$REPO_DIR" fetch origin "$TARGET_REF"
+              git -C "$REPO_DIR" checkout -f FETCH_HEAD
             else
-              git checkout -f "${{ github.ref_name }}"
+              git -C "$REPO_DIR" checkout -f "$TARGET_REF_NAME"
             fi
           fi
 
           git config --global --add safe.directory "$REPO_DIR"
-          echo "REPO_DIR=$REPO_DIR" >> $GITHUB_ENV
+          echo "REPO_DIR=$REPO_DIR" >> "$GITHUB_ENV"
       - name: 🧪 Lint commit message / PR title
         run: |
           cd "$REPO_DIR"
           python3 .gitea/ci/commit_message_lint.py
+
+      - name: 🧹 清理临时仓库
+        if: always()
+        run: |
+          rm -rf "$REPO_DIR"