Merge branch 'main' of github.com:Lingghh/CodeAnalysis

Author: Lingghh

.cnb.yml

@@ -0,0 +1,16 @@
+# .cnb.yml
+"**": # 触发的分支名，默认所有分支，按需修改
+  push:  # push 触发，可按需修改为 pull_request 等
+    - stages:
+      # 获取 git 变更文件列表，供 TCA 增量分析使用
+      - name: git-change-list
+        image: cnbcool/git-change-list:latest
+        settings:
+          # 变更文件列表输出到文件中
+          changed: changed.txt
+      # 代码分析
+      - name: TCA
+        image: tencentcom/tca-plugin:latest
+        settings:
+          from_file: changed.txt
+          block: false

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Desktop (please complete the following information):**
+ - OS: [e.g. iOS]
+ - Browser [e.g. chrome, safari]
+ - Version [e.g. 22]
+
+**Smartphone (please complete the following information):**
+ - Device: [e.g. iPhone6]
+ - OS: [e.g. iOS8.1]
+ - Browser [e.g. stock browser, safari]
+ - Version [e.g. 22]
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/custom-rule.md

@@ -0,0 +1,37 @@
+---
+name: Custom rule
+about: Regarding the demand for customized rules and false positives and negatives.
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the demand**
+A clear and concise description of what the rule is.
+
+
+**规则概述(Rules Overview)**
+
+
+**规则背景(Rule Background)**
+代码的功能逻辑，按步骤书写。(The functional logic of the code is written in steps.)
+
+
+**目标问题点(Target Problem Points)**
+- 可以按照场景来阐述，比如场景1、场景2这样；(It can be explained by scenario, such as scenario 1 and scenario 2;)
+- 每个场景中是第几个步骤可能出现问题，想要解决/检测什么，可以怎么修复，可以结合右边的Case解释。(In each scenario, which step may cause a problem, what you want to solve/detect, and how to fix it. You can explain it in conjunction with the case on the right.)
+
+
+**错误代码示例(Bad Case)**
+
+
+**正确代码示例(Good Case)**
+
+
+**TCA官网上测试项目链接(TCA official website test project link)**
+tca.tencent.com
+
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/workflows/docs.yml

@@ -25,11 +25,11 @@ jobs:
         uses: actions/checkout@v3
 
       # 下载二进制文件
-      - name: Download Binary Files
-        run: |
-          set -ex
-          pwd
-          bash ./scripts/base/install_bin.sh
+      # - name: Download Binary Files
+      #   run: |
+      #     set -ex
+      #     pwd
+      #     bash ./scripts/base/install_bin.sh
 
       - name: Setup Node 16
         uses: actions/setup-node@v3

.github/workflows/sync.yml

@@ -16,34 +16,33 @@ jobs:
           git remote add origin https://github.com/${GITHUB_REPOSITORY}.git
           git fetch --all
           for branch in `git branch -a | grep remotes | grep -v HEAD`; do
-            git branch --track ${branch##*/} $branch
+            git branch --track ${branch#remotes/origin/} $branch
           done
         env:
           GITHUB_REPOSITORY: Tencent/CodeAnalysis
 
       - name: Push to TGIT
         run: |
           remote_repo="https://${TGIT_USERNAME}:${TGIT_PASSWORD}@git.code.tencent.com/${TGIT_REPOSITORY}.git"
-          git remote add tencent "${remote_repo}"
+          git remote add tgit "${remote_repo}"
           git show-ref
           git branch --verbose
-          git push --all --force tencent
-          git push --tags --force tencent
+          git push --all --force tgit
+          git push --tags --force tgit
         env:
           TGIT_REPOSITORY: Tencent_Open_Source/CodeAnalysis
           TGIT_USERNAME: ${{ secrets.USERNAME }}
           TGIT_PASSWORD: ${{ secrets.PASSWORD }}
+        continue-on-error: true
 
-      - name: Push to Gitee
+      - name: Push to CNB
         run: |
-          remote_repo="https://${GITEE_USERNAME}:${GITEE_PASSWORD}@gitee.com/${GITEE_REPOSITORY}.git"
-          git remote add gitee "${remote_repo}"
-          git show-ref
-          git branch --verbose
-          git push --all --force gitee
-          git push --tags --force gitee
+          remote_repo="https://${CNB_USERNAME}:${CNB_PASSWORD}@cnb.cool/${CNB_REPOSITORY}.git"
+          git remote add cnb "${remote_repo}"
+          git push --all --force cnb
+          git push --tags --force cnb
         env:
-          GITEE_REPOSITORY: zhang9w0v5/CodeAnalysis
-          GITEE_USERNAME: ${{ secrets.GITEE_USERNAME }}
-          GITEE_PASSWORD: ${{ secrets.GITEE_PASSWORD }}
+          CNB_REPOSITORY: tencent/cloud/tca/code-analysis
+          CNB_USERNAME: ${{ secrets.CNB_USERNAME }}
+          CNB_PASSWORD: ${{ secrets.CNB_PASSWORD }}
 

20250609-腾讯云代码分析TCA-产品白皮书.pdf

@@ -38,4 +38,4 @@ Before submitting a pull request, please make sure the followings are done:
 6. Now, you can submit your pull request on `dev` branch.
 
 ## License
-[MIT LICENSE](LICENSE) is the open source license of TCA. Code contributed by anyone is protected by this license. Please make sure that you can accept the license before contributing your code.
+[MIT LICENSE](LICENSE.txt) is the open source license of TCA. Code contributed by anyone is protected by this license. Please make sure that you can accept the license before contributing your code.