Binbim
b8788c239e
MCP Docker / build-and-push (push) Has been cancelled
- Remove telemetry: disabled all phone-home (installation notify, false positives, behavior tracking, upgrade tips) - Version branding: removed 'ce-' prefix, product name changed to '长亭雷池 WAF' - Detection engine enhancement: strict preset enables all 17 modules with aggressive configs - Multi-user RBAC: admin/operator/viewer roles with password + TOTP 2FA - Rate limiting: nginx limit_req per website (RPS, burst, action) - JS Challenge: browser fingerprint verification page with cookie-based bypass - Security fixes: removed InsecureSkipVerify, hardcoded credentials, NO_AUTH backdoor
42 lines
1.0 KiB
YAML
42 lines
1.0 KiB
YAML
name: MCP Docker
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
tags:
|
|
- "v*"
|
|
paths:
|
|
- "mcp_server/**"
|
|
- ".github/workflows/slmcp-docker.yml"
|
|
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
with:
|
|
platforms: linux/amd64,linux/arm64
|
|
|
|
- name: Login to DockerHub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKERIO_USERNAME }}
|
|
password: ${{ secrets.DOCKERIO_PASSWORD }}
|
|
|
|
- name: Build and push
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: ./mcp_server
|
|
push: true
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: |
|
|
chaitin/safeline-mcp:latest
|
|
chaitin/safeline-mcp:${{ github.ref_name }}
|
|
cache-from: type=registry,ref=chaitin/safeline-mcp:buildcache
|
|
cache-to: type=registry,ref=chaitin/safeline-mcp:buildcache,mode=max
|