Repository navigation
SCRUM-588 fix: 위키 동기화를 Claude Code CLI 로 실행 - #131
Merged
Merged
Conversation
claude-code-action 이 push 이벤트를 지원하지 않아 첫 실행이 'Unsupported event type: push' 로 실패했다. 로컬 dry run 과 같은 방식으로 Claude Code CLI(2.1.284 고정)를 설치해 구독 OAuth 토큰으로 직접 실행한다. 허용 도구와 모델, 턴 수는 그대로다.
Backend CI 리포트 —
|
| 심각도 | ID | 패키지 | 버전 |
|---|---|---|---|
| HIGH | CVE-2026-89407 | com.fasterxml.jackson.core:jackson-core |
2.21.4 → 2.18.11, 2.21.7, 2.22.3 |
| HIGH | CVE-2026-89425 | com.fasterxml.jackson.core:jackson-core |
2.21.4 → 2.21.7, 2.22.3, 2.18.11 |
| HIGH | CVE-2026-68497 | com.fasterxml.jackson.core:jackson-databind |
2.21.4 → 2.18.10, 2.21.6, 2.22.2 |
| HIGH | CVE-2026-91776 | com.fasterxml.jackson.core:jackson-databind |
2.21.4 → 2.18.11, 2.21.7, 2.22.3 |
| HIGH | CVE-2026-91777 | com.fasterxml.jackson.core:jackson-databind |
2.21.4 → 2.21.7, 2.18.11, 2.22.3 |
| HIGH | CVE-2026-89407 | tools.jackson.core:jackson-core |
3.1.4 → 3.1.7, 3.2.2 |
| HIGH | CVE-2026-89425 | tools.jackson.core:jackson-core |
3.1.4 → 3.1.7, 3.2.3 |
| HIGH | CVE-2026-68497 | tools.jackson.core:jackson-databind |
3.1.4 → 3.2.2, 3.1.6 |
| HIGH | CVE-2026-91776 | tools.jackson.core:jackson-databind |
3.1.4 → 3.1.7, 3.2.3 |
| HIGH | CVE-2026-91777 | tools.jackson.core:jackson-databind |
3.1.4 → 3.1.7, 3.2.3 |
코드 보안 (Trivy fs + Semgrep) ✅
발견 1건
| 종류 | 심각도 | 내용 | 위치 |
|---|---|---|---|
| 🐞 SAST | ERROR | The Python documentation recommends using defusedxml instead of `xml |
.github/scripts/diff_coverage.py:20 |
아키텍처 경계 (ArchUnit) ✅
헥사고날·도메인 분리 경계 규칙 통과 (도메인/레이어/common 격리)
This was referenced Oct 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Jira
SCRUM-588
변경 요약
PR #128 머지 후 첫
Wiki sync (.ai)실행이anthropics/claude-code-action단계에서Unsupported event type: push로 실패했습니다(실행). 이 액션은 push 이벤트를 지원하지 않습니다. 시크릿, 체크아웃, 범위 계산 단계는 정상이었습니다.로컬 dry run 과 같은 방식으로 Claude Code CLI 를 설치(
@anthropic-ai/claude-code@2.1.284, dry run 에서 검증한 버전 고정)해CLAUDE_CODE_OAUTH_TOKEN으로 직접 실행합니다. 허용 도구, 모델(sonnet), 턴 수(60), 이후 검사와 반영 단계는 그대로입니다. 실패한 실행은 처리 기준점이 되지 않아, 이 PR 머지 후 실행이 범위를 다시 잡습니다.변경 유형
체크리스트
./gradlew build통과 (코드 변경 없음, 워크플로만 수정해 CI 로 확인)Summary by CodeRabbit