From d6d3bb06e387b5bf6587aa7d1fdbedafb3d6effd Mon Sep 17 00:00:00 2001 From: Natsuki Katayama Date: Mon, 15 Jun 2026 15:01:20 +0900 Subject: [PATCH 1/2] ci: add dependency review and gitleaks workflows MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit public化に伴うCI補強。 - dependency-review: PRで新規依存の脆弱性を検出（fail-on-severity: moderate） - gitleaks: PR・main pushでシークレット混入を検出（全履歴スキャン） いずれもアクションはSHAピン留め、permissionsは contents: read の最小権限。 Co-Authored-By: Claude Opus 4.8 --- .github/workflows/dependency-review.yml | 17 +++++++++++++++++ .github/workflows/gitleaks.yml | 22 ++++++++++++++++++++++ 2 files changed, 39 insertions(+) create mode 100644 .github/workflows/dependency-review.yml create mode 100644 .github/workflows/gitleaks.yml diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml new file mode 100644 index 0000000..8c04c06 --- /dev/null +++ b/.github/workflows/dependency-review.yml @@ -0,0 +1,17 @@ +name: Dependency Review + +on: + pull_request: + branches: [ "main" ] + +permissions: + contents: read + +jobs: + dependency-review: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 + with: + fail-on-severity: moderate diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml new file mode 100644 index 0000000..5aae610 --- /dev/null +++ b/.github/workflows/gitleaks.yml @@ -0,0 +1,22 @@ +name: Gitleaks + +on: + pull_request: + branches: [ "main" ] + push: + branches: [ "main" ] + +permissions: + contents: read + +jobs: + gitleaks: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + with: + fetch-depth: 0 + - name: Gitleaks + uses: gitleaks/gitleaks-action@e0c47f4f8be36e29cdc102c57e68cb5cbf0e8d1e # v3.0.0 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} From 7a44718f085c96aec01c93cbc0f5f26b1ad09bc9 Mon Sep 17 00:00:00 2001 From: Natsuki Katayama Date: Mon, 15 Jun 2026 15:01:20 +0900 Subject: [PATCH 2/2] docs: rename project to memetec MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit リポジトリ名変更に合わせ、READMEの表示名とorvalのプロジェクトキーをmemetecに更新。 Co-Authored-By: Claude Opus 4.8 --- README.md | 6 +++--- web/orval.config.ts | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 8c6a441..a73bfaa 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ -# techbook-log +# memetec. -**memetec.** — 技術書の読書記録を管理するWebアプリ。 +技術書の読書記録を管理するWebアプリ。 --- @@ -54,7 +54,7 @@ モノレポ構成。`api/` と `web/` の2パッケージ。 ``` -techbook-log/ +memetec/ ├── api/ # Hono on Cloudflare Workers └── web/ # Next.js（OpenNext）on Cloudflare Workers ``` diff --git a/web/orval.config.ts b/web/orval.config.ts index c26970d..cf2e3b0 100644 --- a/web/orval.config.ts +++ b/web/orval.config.ts @@ -2,7 +2,7 @@ import { defineConfig } from "orval"; import "dotenv/config"; export default defineConfig({ - techbookLog: { + memetec: { output: { mode: "single", target: "./src/external/api.ts",