feat: 数据导出审批流程模板 - SQLE CE 部分

.github/ISSUE_TEMPLATE/bug-report.md

@@ -0,0 +1,35 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: bug
+assignees: LordofAvernus
+
+---
+
+<!-- 创建issue请填写 -->
+
+## 版本信息（Version）
+
+## 问题描述（Describe）
+
+## 截图或日志（Log）
+
+## 如何复现（To Reproduce）
+
+<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
+<!-- 以下内容为issue处理人填写，创建工单时请不要不要删除 -->
+## 问题原因
+
+## 解决方案
+
+## 变更影响面
+<!-- 必须包含但不限于从以下方面进行影响面评估（更详细信息参考研发内部开发规范） -->
+#### 受影响的模块或功能
+<!-- 必须指明对用户使用流程和后台工作流的影响 -->
+#### 外部引用的潜在问题或风险
+<!-- 包括替换第三方包、引入新包的影响 -->
+#### 版本兼容性
+<!-- 破坏性变更的说明和处理措施 -->
+#### 测试建议
+<!-- 如果有特定的测试方法或策略可用于验证变更的影响，建议提供相应的测试建议 -->

.github/ISSUE_TEMPLATE/new-feature-.md

@@ -0,0 +1,29 @@
+---
+name: 'New feature '
+about: Suggest an feature for this project
+title: ''
+labels: ''
+assignees: LordofAvernus
+
+---
+
+<!-- 创建issue请填写 -->
+
+## 需求描述（Describe）
+
+
+<!-- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -->
+<!-- 以下内容为issue处理人填写，创建工单时请不要不要删除 -->
+
+## 实现方案
+
+## 变更影响面
+<!-- 必须包含但不限于从以下方面进行影响面评估（更详细信息参考研发内部开发规范） -->
+#### 受影响的模块或功能
+<!-- 必须指明对用户使用流程和后台工作流的影响 -->
+#### 外部引用的潜在问题或风险
+<!-- 包括替换第三方包、引入新包的影响 -->
+#### 版本兼容性
+<!-- 破坏性变更的说明和处理措施 -->
+#### 测试建议
+<!-- 如果有特定的测试方法或策略可用于验证变更的影响，建议提供相应的测试建议 -->

.github/pull_request_template.md

@@ -0,0 +1,15 @@
+## 关联的 issue
+
+## 描述你的变更
+
+## 确认项（pr提交后操作）
+> [!TIP]
+> 请在指定**复审人**之前，确认并完成以下事项，完成后✅
+----------------------------------------------------------------------
+- [ ] 我已完成自测
+- [ ] 我已记录完整日志方便进行诊断
+- [ ] 我已在关联的issue里补充了实现方案
+- [ ] 我已在关联的issue里补充了测试影响面
+- [ ] 我已确认了变更的兼容性，如果不兼容则在issue里标记 `not_compatible`
+- [ ] 我已确认了是否要更新文档，如果要更新则在issue里标记 `need_update_doc`
+----------------------------------------------------------------------

.github/workflows/check-pr-files.yml

@@ -0,0 +1,36 @@
+name: prevent-file-change
+on:
+  pull_request:
+    branches:
+      - '*-ee'
+jobs:
+  prevent-file-change:
+    if: github.head_ref != 'main' && !startsWith(github.head_ref, 'release')
+    runs-on: ubuntu-latest
+    steps:
+      - uses: xalvarez/prevent-file-change-action@68e23e206c9680e3a4f13d3b10b9d7f506c90d2b
+        name: Prevent file change
+        with:
+          githubToken: ${{ secrets.GITHUB_TOKEN }}
+          pattern: ^(?!.*_ee\/.*$)(?!.*_ee\.go$)(?!.*_ee\.md$)(?!.*_ee_test\.go$)(?!.*_rel\.go$)(?!.*_rel_test\.go$)(?!go\.mod$)(?!go\.sum$)(?!\.github\/workflows\/check-pr-files\.yml$)(?!vendor\/.*)(?!.*_qa\.go$)(?!.*\.xml$).*
+          trustedAuthors: xalvarez
+
+  # 禁止actions自动提交commit
+  check-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the code
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0  # 检出完整历史
+
+      - name: Check commit authors
+        run: |
+          # 获取所有提交的作者
+          authors=$(git log --pretty=format:"%an" origin/main..HEAD)
+
+          # 检查是否包含不允许的用户
+          if echo "$authors" | grep -q "actions-user"; then
+            echo "Error: actions-user has made a commit in this PR."
+            exit 1
+          fi

.github/workflows/ci.yml

@@ -0,0 +1,49 @@
+name: CI (no build)
+
+on:
+  pull_request:
+    branches:
+      - 'main*'
+      - 'release*'
+
+jobs:
+  lint:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up repository
+        uses: actions/checkout@v2
+
+      - name: Set up Go
+        uses: actions/setup-go@v2
+        with:
+          # Should be consistent with go.mod
+          go-version: '1.19.6'
+
+      - name: Lint
+        uses: golangci/golangci-lint-action@v2
+        with:
+          # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
+          version: v1.45.2
+
+          # If set to true then the action will use pre-installed Go
+          skip-go-installation: true
+
+          # Optional: golangci-lint command line arguments. 
+          # The config file has lower priority than command-line options.
+          args: --config=.golangci.yml
+
+  test:
+    name: test
+    runs-on: ubuntu-latest
+    steps:
+      - name: Set up repository
+        uses: actions/checkout@v2
+
+      - name: Set up Go
+        uses: actions/setup-go@v2
+        with:
+          # Should be consistent with go.mod
+          go-version: '1.19.6'
+      - name: Unit test
+        run: make test

.github/workflows/pr-agent.yml

@@ -0,0 +1,28 @@
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review, synchronize]
+jobs:
+  pr_agent_job:
+    if: ${{ github.event.sender.type != 'Bot' && github.actor != 'actiontech-bot' }}
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+      contents: write
+    name: Run pr agent on every pull request, respond to user comments
+    steps:
+      - name: PR Agent action step
+        id: pragent
+        uses: qodo-ai/pr-agent@main
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          github_action_config.pr_actions: '["opened", "reopened", "ready_for_review", "review_requested", "synchronize"]'
+          OPENAI_API_VERSION: ${{ vars.AZURE_API_VERSION }}
+          github_action_config.auto_review: "true"
+          github_action_config.auto_describe: "true"
+          github_action_config.auto_improve: "true"
+          OPENAI_KEY: ${{ secrets.OPENAI_KEY }}
+          OPENAI.API_TYPE: "azure"
+          OPENAI.API_BASE: ${{ secrets.OPENAI_API_BASE }}
+          AZURE_API_VERSION: ${{ vars.AZURE_API_VERSION }}
+          OPENAI.DEPLOYMENT_ID: ${{ secrets.DEPLOYMENT_ID }}

.github/workflows/pr-ce-release-2-main.yml

@@ -0,0 +1,25 @@
+on:
+  pull_request:
+    branches:
+      - release*
+    types: ["closed"]
+
+jobs:
+  cherry_pick_release_2_main:
+    if: contains(github.event.pull_request.labels.*.name, 'need_cherry_pick')
+    runs-on: ubuntu-latest
+    name: Cherry pick into main
+    steps:
+    - name: checkout
+      uses: actions/checkout@v2
+      with:
+        fetch-depth: 0
+    - name: Create PR to main
+      uses: carloscastrojumo/github-cherry-pick-action@v1.0.1
+      with:
+        branch: ${{ github.repository == 'actiontech/sqle-ee' && 'main-ee' || 'main' }}
+        labels: |
+          cherry-pick
+
+env:
+  GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/trigger-ee-workflow.yml

@@ -0,0 +1,22 @@
+name: Trigger sqle-ee Workflow
+
+on:
+  push:
+    branches:
+      - main
+      - 'release*'
+
+jobs:
+  trigger-sync-workflow:
+    # this file will sync to sqle-ee, we only execute job on actiontech/sqle
+    if: github.repository == 'actiontech/sqle' 
+    name: Create workflow dispatch on sqle-ee
+    runs-on: ubuntu-latest
+    steps:
+      - name: Trigger sqle-ee workflow
+        uses: benc-uk/workflow-dispatch@v1
+        with:
+          token: ${{ secrets.DOWNSTREAM_REPO_SECRET }}
+          repo: actiontech/sqle-ee
+          workflow: Sync with SQLE
+          ref: ${{ github.ref }}-ee

.gitignore

@@ -4,10 +4,14 @@
 #build
 /docs
 *.rpm
+*.rpm.md5
 *.log
 /sqled
-/sqled.yml*
+/sqled.yml
+etc
 /swag
 bin/
 ui/
-.vscode/
+static/
+.vscode/
+jdk/

.golangci.yml

@@ -0,0 +1,32 @@
+run:
+  timeout: 5m
+
+linters:
+  disable-all: true
+  enable:
+    - errcheck
+    - govet
+    - bodyclose
+    - durationcheck
+    - makezero
+    - nilerr
+    - rowserrcheck
+    - sqlclosecheck
+    - staticcheck
+    # - forcetypeassert
+    - prealloc
+    - deadcode
+    - gosimple
+    - unconvert
+    - errname
+    #- dupl
+    - misspell
+
+linters-settings:
+
+issues:
+  exclude-rules:
+    - path: _test\.go
+      linters:
+        - errcheck
+        - gosec

.pr_agent.toml

@@ -0,0 +1,65 @@
+[config]
+response_language="zh-CN"
+verbosity_level=2
+
+[pr_reviewer] # /review #
+# enable/disable features
+# general options
+extra_instructions = """
+- Please describe the issue_content,issue_header field in Chinese.
+
+- In Golang code, using db.Query() and using stmt, err := db.Prepare() followed by stmt.Query() have the same effect. For example, db.Query(\"SELECT * FROM tb1 WHERE a = ? AND b = ?\", aa, bb) also uses parameter passing with ? placeholders. Please do not flag such cases as SQL injection risks.
+- During review, if a specific type of code issue is encountered, please do not overlook this issue in subsequent reviews and continue to provide suggestions for all code blocks exhibiting the problem. 
+"""
+final_update_message = true
+# review labels
+enable_review_labels_security=false
+enable_review_labels_effort=false
+# specific configurations for incremental review (/review -i)
+enable_intro_text=false
+enable_help_text=false
+
+[pr_description] # /describe #
+publish_labels = false
+add_original_user_description = true
+generate_ai_title = false
+use_bullet_points = true
+extra_instructions = "Please describe all the contents of the Description field in Chinese."
+enable_pr_type = false
+
+[pr_code_suggestions] # /improve #
+extra_instructions = """
+- Please describe all the contents of the Suggestions field in Chinese.
+- Please describe in Chinese why these code modification suggestions are being provided.
+- When a new commit is submitted, please re-review all code changes and update the persistent review.
+- When reviewing, if identical issues are found in multiple code blocks, please offer recommendations for each instance.
+
+- In Golang code, using db.Query() and using stmt, err := db.Prepare() followed by stmt.Query() have the same effect. Please do not suggest replacing db.Query() with db.Prepare() in code review suggestions.
+
+These issues require special attention, and should be highlighted in review suggestions along with explanations of their severity:
+# Things about panic #
+- Nil pointer dereferences.
+- Array or slice out-of-bounds access.
+- Invalid type assertions.
+- Operations on nil or closed channels.
+- Division by zero.
+- Concurrent map access without proper synchronization.
+- Use of uninitialized variables.
+- Improper use of defer functions.
+- Any other conditions that could trigger a panic.
+
+- Failure to close an opened file leads to a file descriptor leak. This is a crucial issue that the AI should prioritize during code reviews to prevent resource exhaustion.
+- Network connection leaks
+- Database connection leaks
+- Memory leaks
+- Other system resource leaks
+
+- Make certain that all the reviewer's questions have received corresponding suggestions.
+"""
+
+[github_app]
+# settings for "pull_request" event with "synchronize" action - used to detect and handle push triggers for new commits
+handle_push_trigger = true
+
+[litellm]
+drop_params = true

Add-On-LICENSE

@@ -0,0 +1,9 @@
+许可信息申明
+这是云树SQL审核软件（简称：CTREE SQLE）的一个开源发行版本，由上海爱可生信息技术股份有限公司的SQLE开发团队为您提供。本软件基于 Mozilla Public License 第2版发布。
+上海爱可生信息技术股份有限公司对其发行的作品享有版权，受各国版权法及国际版权公约的保护。
+对于上述版权内容，超越合理使用范畴、并未经本公司书面许可的使用行为，我公司均保留追究法律责任的权利。
+本“许可信息申明”以中英文双语表述，中英文版本具有同等法律效力。如果中英文版本存在任何不一致，以中文版为准。
+Licensing Information
+This is an open source SQL audit software, brought to you by the SQLE team at Shanghai Action Information Technology Co., Ltd.(ActionTech). This software is released under Mozilla Public License Version 2.0.
+Copyright (c)  ActionTech and/or its affiliates.
+THIS "Licensing Information" IS WRITTEN IN BOTH CHINESE AND ENGLISH, AND THE CHINESE VERSION AND ENGLISH VERSION SHALL HAVE THE SAME LEGAL EFFECT. IN THE CASE OF DIVERGENCE BETWEEN THE CHINESE AND ENGLISH VERSIONS, THE CHINESE VERSION SHALL PREVAIL.