feat: v2.1.0 核心重构与功能增强

## 架构重构 - 全局变量消除，迁移至 Config/State 对象 - SMB 插件融合（smb/smb2/smbghost/smbinfo） - 服务探测重构，实现 Nmap 风格 fallback 机制 - 输出系统重构，TXT 实时刷盘 + 双写机制 - i18n 框架升级至 go-i18n ## 性能优化 - 正则表达式预编译 - 内存优化 map[string]struct{} - 并发指纹匹配 - SOCKS5 连接复用 - 滑动窗口调度 + 自适应线程池 ## 新功能 - Web 管理界面 - 多格式 POC 适配（xray/afrog） - 增强指纹库（3139条） - Favicon hash 指纹识别 - 插件选择性编译（Build Tags） - fscan-lab 靶场环境 - 默认端口扩展（62→133） ## 构建系统 - 添加 no_local tag 支持排除本地插件 - 多版本构建：fscan/fscan-nolocal/fscan-web - CI 添加 snapshot 模式支持仅测试构建 ## Bug 修复 - 修复 120+ 个问题，包括 RDP panic、批量扫描漏报、 JSON 输出格式、Redis 检测、Context 超时等 ## 测试增强 - 单元测试覆盖率 74-100% - 并发安全测试 - 集成测试（Web/端口/服务/SSH/ICMP）
2026-09-22 19:21:52 +08:00 · 2026-01-11 20:16:23 +08:00
parent 6b13b2e84f
commit 71b92d4408
948 changed files with 92335 additions and 24630 deletions
@@ -1,6 +1,6 @@
 name: 🐛 Bug 报告
 description: 报告扫描异常、崩溃或错误行为
-title: "[Bug] "
+title: "[Bug] 简要描述问题"
 labels: ["bug"]

 body:
@@ -70,16 +70,50 @@ body:
      description: 粘贴相关的错误信息或日志（请脱敏敏感信息）
      render: shell

-  - type: textarea
-    id: environment
+  - type: dropdown
+    id: version
    attributes:
-      label: 环境信息
-      description: 请提供运行环境信息
-      value: |
-        - fscan 版本: [如 1.8.4]
-        - 操作系统: [如 Windows 11 / Ubuntu 22.04 / macOS 14]
-        - 架构: [如 amd64 / arm64]
-        - Go 版本 (如自编译): [如 go1.20.10]
+      label: fscan 版本
+      options:
+        - 2.1.0
+        - 2.0.1
+        - 2.0.0
+        - 1.8.4
+        - 其他/自编译
+    validations:
+      required: true
+
+  - type: dropdown
+    id: os
+    attributes:
+      label: 操作系统
+      options:
+        - Windows 11
+        - Windows 10
+        - Windows Server 2022
+        - Windows Server 2019
+        - Ubuntu 22.04
+        - Ubuntu 20.04
+        - CentOS 7
+        - CentOS 8/Stream
+        - Debian 11/12
+        - Kali Linux
+        - macOS 14 (Sonoma)
+        - macOS 13 (Ventura)
+        - 其他 Linux
+        - 其他
+    validations:
+      required: true
+
+  - type: dropdown
+    id: arch
+    attributes:
+      label: 系统架构
+      options:
+        - amd64 (x86_64)
+        - arm64 (aarch64)
+        - 386 (x86)
+        - arm
    validations:
      required: true

@@ -87,4 +121,4 @@ body:
    id: additional
    attributes:
      label: 补充信息
-      description: 其他可能有助于排查问题的信息
+      description: 其他可能有助于排查问题的信息（如自编译请注明 Go 版本）
@@ -1,6 +1,6 @@
 name: 🎯 误报/漏报
 description: 报告扫描结果不准确的问题
-title: "[Accuracy] "
+title: "[Accuracy] 服务名 - 误报/漏报描述"
 labels: ["accuracy"]

 body:
@@ -54,15 +54,33 @@ body:
    validations:
      required: true

-  - type: textarea
-    id: environment
+  - type: dropdown
+    id: target-os
    attributes:
-      label: 目标环境
-      description: 描述目标的环境信息（请脱敏）
-      placeholder: |
-        - 目标系统: Windows Server 2019 / Ubuntu 22.04
-        - 服务版本: MySQL 8.0 / Redis 7.0
-        - 网络环境: 直连 / 通过代理 / VPN
+      label: 目标操作系统
+      options:
+        - Windows Server 2022
+        - Windows Server 2019
+        - Windows Server 2016
+        - Windows 10/11
+        - Ubuntu
+        - CentOS/RHEL
+        - Debian
+        - 其他 Linux
+        - 网络设备
+        - 未知
+    validations:
+      required: true
+
+  - type: dropdown
+    id: network
+    attributes:
+      label: 网络环境
+      options:
+        - 直连
+        - 通过代理
+        - VPN
+        - 跨网段
    validations:
      required: true

@@ -76,11 +94,16 @@ body:
    validations:
      required: true

-  - type: input
+  - type: dropdown
    id: version
    attributes:
      label: fscan 版本
-      placeholder: "如: 1.8.4"
+      options:
+        - 2.1.0
+        - 2.0.1
+        - 2.0.0
+        - 1.8.4
+        - 其他/自编译
    validations:
      required: true

@@ -1,6 +1,6 @@
 name: ✨ 功能请求
 description: 提议新功能或改进现有功能
-title: "[Feature] "
+title: "[Feature] 一句话描述功能"
 labels: ["enhancement"]

 body:
@@ -1,6 +1,6 @@
 name: 🔌 新插件/协议支持
 description: 请求支持新的服务、协议或漏洞检测
-title: "[Plugin] "
+title: "[Plugin] 协议/服务名称"
 labels: ["plugin", "enhancement"]

 body:
@@ -76,6 +76,8 @@ body:
        - 较为常见 (经常遇到)
        - 偶尔遇到
        - 较少见但重要
+    validations:
+      required: true

  - type: checkboxes
    id: contribution
@@ -0,0 +1,103 @@
+name: '构建和发布'
+description: 'fscan 可复用构建动作'
+
+inputs:
+  mode:
+    description: '构建模式: release 或 snapshot'
+    required: true
+    default: 'snapshot'
+  go-version:
+    description: 'Go 版本'
+    required: false
+    default: '1.20'
+  retention-days:
+    description: '产物保留天数'
+    required: false
+    default: '7'
+  release-args:
+    description: '额外的 goreleaser 参数'
+    required: false
+    default: ''
+
+runs:
+  using: 'composite'
+  steps:
+    - name: 设置 Go 环境
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ inputs.go-version }}
+        cache: true
+
+    - name: 安装 C 编译工具
+      shell: bash
+      run: |
+        sudo apt-get update -qq
+        sudo apt-get install -y gcc make mingw-w64 gcc-multilib g++-multilib
+
+    - name: 下载依赖
+      shell: bash
+      run: |
+        go mod download
+        go mod verify
+
+    - name: 安装 UPX
+      uses: crazy-max/ghaction-upx@v3
+      with:
+        install-only: true
+
+    - name: 使用 GoReleaser 构建
+      uses: goreleaser/goreleaser-action@v6
+      with:
+        distribution: goreleaser
+        version: latest
+        args: release ${{ inputs.mode == 'snapshot' && '--snapshot' || '' }} --clean -f .github/conf/.goreleaser.yml ${{ inputs.release-args }}
+      env:
+        GITHUB_TOKEN: ${{ github.token }}
+        GITHUB_OWNER: ${{ github.repository_owner }}
+        GITHUB_REPO: ${{ github.event.repository.name }}
+        PROJECT_NAME: ${{ github.event.repository.name }}
+
+    - name: 上传产物
+      uses: actions/upload-artifact@v4
+      if: always()
+      with:
+        name: build-${{ inputs.mode }}-${{ github.run_id }}
+        path: |
+          dist/
+          dist-lite/
+        retention-days: ${{ inputs.retention-days }}
+
+    - name: 生成报告
+      shell: bash
+      if: always()
+      run: |
+        cat >> $GITHUB_STEP_SUMMARY << EOF
+        # 构建报告
+
+        | 项目 | 值 |
+        |------|-----|
+        | 模式 | \`${{ inputs.mode }}\` |
+        | 版本 | \`${GITHUB_REF_NAME}\` |
+        | 提交 | \`${GITHUB_SHA:0:7}\` |
+        | Go | \`$(go version | awk '{print $3}')\` |
+
+        ## 构建产物
+
+        ### fscan (Go 版本)
+        $(if [ -d "dist" ]; then
+          echo "- 文件数: $(find dist -type f 2>/dev/null | wc -l)"
+          echo "- 大小: $(du -sh dist 2>/dev/null | cut -f1)"
+        else
+          echo "- 无产物"
+        fi)
+
+        ### fscan-lite (C 版本)
+        $(if [ -d "dist-lite" ]; then
+          echo "- 文件数: $(find dist-lite -type f 2>/dev/null | wc -l)"
+          echo "- 大小: $(du -sh dist-lite 2>/dev/null | cut -f1)"
+        else
+          echo "- 无产物"
+        fi)
+
+        [查看产物](https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }})
+        EOF
@@ -1,60 +1,116 @@
-# 项目名称 - 直接使用环境变量
-project_name: "{{ .Env.PROJECT_NAME }}"
+project_name: "fscan"

-# 构建前钩子
 before:
  hooks:
    - go mod tidy
    - go mod download
+    - chmod +x .github/scripts/build-lite.sh
+    - bash .github/scripts/build-lite.sh {{ .Version }}

-# 构建配置
 builds:
-  - id: default
-    binary: "{{ .ProjectName }}"
+  # 标准版 - 全部插件
+  - id: fscan
+    binary: fscan
+    main: .
    env:
      - CGO_ENABLED=0
-    goos:
-      - windows
-      - linux
-      - darwin
-    goarch:
-      - amd64
-      - arm64
-      - "386"
-    goarm:
-      - "7"
+    goos: [windows, linux, darwin]
+    goarch: [amd64, arm64, "386"]
+    goarm: ["7"]
    ignore:
      - goos: darwin
        goarch: "386"
      - goos: windows
        goarch: arm64
-    flags:
-      - -trimpath
-    ldflags:
-      - -s -w
-      - -X main.version={{ .Version }}
-      - -X main.commit={{ .ShortCommit }}
-      - -X main.date={{ .Date }}
-      - -X main.builtBy=goreleaser
+    flags: [-trimpath]
+    ldflags: -s -w -X main.version={{ .Version }} -X main.commit={{ .ShortCommit }} -X main.date={{ .Date }} -X main.builtBy=goreleaser
+    mod_timestamp: "{{ .CommitTimestamp }}"
+
+  # 无本地插件版 - 排除本地模块
+  - id: fscan-nolocal
+    binary: fscan
+    main: .
+    env:
+      - CGO_ENABLED=0
+    goos: [windows, linux, darwin]
+    goarch: [amd64, arm64, "386"]
+    goarm: ["7"]
+    ignore:
+      - goos: darwin
+        goarch: "386"
+      - goos: windows
+        goarch: arm64
+    flags: [-trimpath]
+    tags: [no_local]
+    ldflags: -s -w -X main.version={{ .Version }} -X main.commit={{ .ShortCommit }} -X main.date={{ .Date }} -X main.builtBy=goreleaser
+    mod_timestamp: "{{ .CommitTimestamp }}"
+
+  # WebUI版 - 带Web管理界面
+  - id: fscan-web
+    binary: fscan
+    main: .
+    env:
+      - CGO_ENABLED=0
+    goos: [windows, linux, darwin]
+    goarch: [amd64, arm64, "386"]
+    goarm: ["7"]
+    ignore:
+      - goos: darwin
+        goarch: "386"
+      - goos: windows
+        goarch: arm64
+    flags: [-trimpath]
+    tags: [web]
+    ldflags: -s -w -X main.version={{ .Version }} -X main.commit={{ .ShortCommit }} -X main.date={{ .Date }} -X main.builtBy=goreleaser
    mod_timestamp: "{{ .CommitTimestamp }}"

-# UPX 压缩
 upx:
-  - ids: [default]
+  - ids: [fscan, fscan-nolocal, fscan-web]
    enabled: true
-    goos: ["windows", "linux"]
-    goarch: ["amd64", "386"]
+    goos: [windows, linux]
+    goarch: [amd64, "386"]
    compress: best
    brute: false
    lzma: false

-# 归档配置
 archives:
-  - id: default
+  # 标准版归档
+  - id: fscan
+    builds: [fscan]
    format: binary
    allow_different_binary_count: true
    name_template: >-
-      {{ .ProjectName }}_{{ .Version }}_
+      fscan_{{ .Version }}_
+      {{- if eq .Os "darwin" }}mac
+      {{- else }}{{ .Os }}{{ end }}_
+      {{- if eq .Arch "amd64" }}x64
+      {{- else if eq .Arch "386" }}x32
+      {{- else }}{{ .Arch }}{{ end }}
+      {{- if .Arm }}v{{ .Arm }}{{ end }}
+      {{- if eq .Os "windows" }}.exe{{ end }}
+
+  # 无本地插件版归档
+  - id: fscan-nolocal
+    builds: [fscan-nolocal]
+    format: binary
+    allow_different_binary_count: true
+    name_template: >-
+      fscan-nolocal_{{ .Version }}_
+      {{- if eq .Os "darwin" }}mac
+      {{- else }}{{ .Os }}{{ end }}_
+      {{- if eq .Arch "amd64" }}x64
+      {{- else if eq .Arch "386" }}x32
+      {{- else }}{{ .Arch }}{{ end }}
+      {{- if .Arm }}v{{ .Arm }}{{ end }}
+      {{- if eq .Os "windows" }}.exe{{ end }}
+
+  # WebUI版归档
+  - id: fscan-web
+    builds: [fscan-web]
+    format: binary
+    allow_different_binary_count: true
+    name_template: >-
+      fscan-web_{{ .Version }}_
      {{- if eq .Os "darwin" }}mac
      {{- else }}{{ .Os }}{{ end }}_
      {{- if eq .Arch "amd64" }}x64
@@ -63,23 +119,17 @@ archives:
      {{- if .Arm }}v{{ .Arm }}{{ end }}
      {{- if eq .Os "windows" }}.exe{{ end }}

-# 校验和
 checksum:
  name_template: 'checksums.txt'
  algorithm: sha256

-# 变更日志
 changelog:
  sort: asc
  use: github
  filters:
    exclude:
-      - "^docs:"
-      - "^test:"
-      - "^ci:"
-      - "^chore:"
-      - "Merge pull request"
-      - "Merge branch"
+      - "^(docs|test|ci|chore):"
+      - "Merge (pull request|branch)"
  groups:
    - title: "🚀 新功能"
      regexp: "^.*feat[(\\w)]*:+.*$"
@@ -87,13 +137,9 @@ changelog:
    - title: "🐛 问题修复"
      regexp: "^.*fix[(\\w)]*:+.*$"
      order: 1
-    - title: "📚 文档更新"
-      regexp: "^.*docs[(\\w)]*:+.*$"
-      order: 2
    - title: "🔧 其他改进"
      order: 999

-# 发布配置
 release:
  github:
    owner: "{{ .Env.GITHUB_OWNER }}"
@@ -102,24 +148,32 @@ release:
  prerelease: auto
  mode: replace
  header: |
-    ## 🎉 {{ .ProjectName }} {{ .Tag }} 发布说明
-    
-    感谢使用 {{ .ProjectName }}！本次发布包含以下改进：
+    ## {{ .ProjectName }} {{ .Tag }}
+
+    感谢使用 {{ .ProjectName }}！
+
+    ### 版本说明
+
+    | 版本 | 说明 |
+    |------|------|
+    | **fscan** | 标准版，包含全部插件（推荐） |
+    | **fscan-nolocal** | 精简版，不含本地模块（体积更小） |
+    | **fscan-web** | WebUI版，带Web管理界面 |
+
+    ### 平台支持
+
+    | 平台 | 架构 |
+    |------|------|
+    | Linux | x64, x32, arm64 |
+    | Windows | x64, x32 |
+    | macOS | x64, arm64 |
  footer: |
-    ## 📥 安装说明
-    
-    下载对应平台的二进制文件即可使用。
-    
    **完整更新日志**: https://github.com/{{ .Env.GITHUB_OWNER }}/{{ .Env.GITHUB_REPO }}/compare/{{ .PreviousTag }}...{{ .Tag }}
-    
-    ---
-    
-    如有问题请提交 [Issue](https://github.com/{{ .Env.GITHUB_OWNER }}/{{ .Env.GITHUB_REPO }}/issues) 💬
+  extra_files:
+    - glob: ./dist-lite/*

-# 快照版本
 snapshot:
  name_template: "{{ incpatch .Version }}-dev-{{ .ShortCommit }}"

-# 元数据
 metadata:
-  mod_timestamp: "{{ .CommitTimestamp }}"
+  mod_timestamp: "{{ .CommitTimestamp }}"
@@ -0,0 +1,81 @@
+#!/bin/bash
+# 构建 fscan-lite 并准备发布产物
+
+set -e
+
+VERSION="${1:-dev}"
+LITE_DIR="fscan-lite"
+OUTPUT_DIR="dist-lite"
+
+echo "==> 构建 fscan-lite (版本: $VERSION)"
+
+# 清理旧产物
+rm -rf "$OUTPUT_DIR"
+mkdir -p "$OUTPUT_DIR"
+
+# 进入 lite 目录
+cd "$LITE_DIR"
+
+# 源文件
+SOURCES="src/main.c src/scanner.c src/platform.c"
+INCLUDE="-Iinclude"
+CFLAGS_BASE="-std=c89 -Wall -O2"
+
+# 构建 Linux 版本
+echo "==> 构建 Linux 版本..."
+
+# Linux x64
+echo "  - Linux x64"
+mkdir -p bin
+gcc $CFLAGS_BASE $INCLUDE -o bin/fscan-lite $SOURCES -lpthread
+cp bin/fscan-lite "../$OUTPUT_DIR/fscan-lite_${VERSION}_linux_x64"
+rm -rf bin
+
+# Linux x32
+echo "  - Linux x32"
+mkdir -p bin
+gcc $CFLAGS_BASE -m32 $INCLUDE -o bin/fscan-lite $SOURCES -lpthread 2>/dev/null || echo "    (跳过: 缺少 32-bit 支持)"
+if [ -f bin/fscan-lite ]; then
+    cp bin/fscan-lite "../$OUTPUT_DIR/fscan-lite_${VERSION}_linux_x32"
+fi
+rm -rf bin
+
+# 构建 Windows 版本
+echo "==> 构建 Windows 版本..."
+
+# Windows x64
+echo "  - Windows x64"
+mkdir -p bin
+x86_64-w64-mingw32-gcc $CFLAGS_BASE $INCLUDE -o bin/fscan-lite.exe $SOURCES -lws2_32 -static
+if [ -f bin/fscan-lite.exe ]; then
+    cp bin/fscan-lite.exe "../$OUTPUT_DIR/fscan-lite_${VERSION}_windows_x64.exe"
+    echo "    ✓ 编译成功"
+else
+    echo "    ✗ 编译失败"
+fi
+rm -rf bin
+
+# Windows x32
+echo "  - Windows x32"
+mkdir -p bin
+i686-w64-mingw32-gcc $CFLAGS_BASE $INCLUDE -o bin/fscan-lite.exe $SOURCES -lws2_32 -static
+if [ -f bin/fscan-lite.exe ]; then
+    cp bin/fscan-lite.exe "../$OUTPUT_DIR/fscan-lite_${VERSION}_windows_x32.exe"
+    echo "    ✓ 编译成功"
+else
+    echo "    ✗ 编译失败"
+fi
+rm -rf bin
+
+cd ..
+
+# 统计产物
+echo ""
+echo "==> 构建完成！"
+echo "产物列表："
+if [ -d "$OUTPUT_DIR" ]; then
+    ls -lh "$OUTPUT_DIR" 2>/dev/null || echo "  (无产物)"
+    echo ""
+    FILECOUNT=$(ls "$OUTPUT_DIR" 2>/dev/null | wc -l)
+    echo "总计: $FILECOUNT 个文件"
+fi
@@ -0,0 +1,83 @@
+name: Project 自动化
+
+on:
+  issues:
+    types: [opened, closed, reopened]
+  pull_request:
+    types: [opened, closed, reopened]
+
+env:
+  PROJECT_URL: https://github.com/users/shadow1ng/projects/1
+
+jobs:
+  # Issue/PR 创建时添加到 Project，状态设为"要搞"
+  add-to-project:
+    if: github.event.action == 'opened'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Add to project
+        uses: actions/[email protected]
+        id: add
+        with:
+          project-url: ${{ env.PROJECT_URL }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set status to 要搞
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh project item-edit \
+            --project-id PVT_kwHOAl0Kfs4BCgG2 \
+            --id ${{ steps.add.outputs.itemId }} \
+            --field-id PVTSSF_lAHOAl0Kfs4BCgG2zg0sX8A \
+            --single-select-option-id f75ad846
+
+  # Issue/PR 关闭时状态设为"搞定"
+  close-item:
+    if: github.event.action == 'closed'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get item ID
+        id: get-item
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          ITEM_ID=$(gh project item-list 1 --owner shadow1ng --format json | \
+            jq -r '.items[] | select(.content.number == ${{ github.event.issue.number || github.event.pull_request.number }}) | .id')
+          echo "item_id=$ITEM_ID" >> $GITHUB_OUTPUT
+
+      - name: Set status to 搞定
+        if: steps.get-item.outputs.item_id != ''
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh project item-edit \
+            --project-id PVT_kwHOAl0Kfs4BCgG2 \
+            --id ${{ steps.get-item.outputs.item_id }} \
+            --field-id PVTSSF_lAHOAl0Kfs4BCgG2zg0sX8A \
+            --single-select-option-id 98236657
+
+  # Issue/PR 重新打开时状态设为"在搞"
+  reopen-item:
+    if: github.event.action == 'reopened'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get item ID
+        id: get-item
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          ITEM_ID=$(gh project item-list 1 --owner shadow1ng --format json | \
+            jq -r '.items[] | select(.content.number == ${{ github.event.issue.number || github.event.pull_request.number }}) | .id')
+          echo "item_id=$ITEM_ID" >> $GITHUB_OUTPUT
+
+      - name: Set status to 在搞
+        if: steps.get-item.outputs.item_id != ''
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh project item-edit \
+            --project-id PVT_kwHOAl0Kfs4BCgG2 \
+            --id ${{ steps.get-item.outputs.item_id }} \
+            --field-id PVTSSF_lAHOAl0Kfs4BCgG2zg0sX8A \
+            --single-select-option-id 47fc9ee4
@@ -1,4 +1,4 @@
-name: 发布构建
+name: 发布

 on:
  push:
@@ -6,10 +6,10 @@ on:
      - 'v*'
  workflow_dispatch:
    inputs:
-      tag:
-        description: '发布标签'
-        required: true
-        default: 'v1.0.0'
+      snapshot:
+        description: '仅测试构建（不发布）'
+        type: boolean
+        default: false
      draft:
        description: '创建草稿发布'
        type: boolean
@@ -21,277 +21,22 @@ on:

 permissions:
  contents: write
-  issues: write
-  pull-requests: write

 jobs:
-  goreleaser:
-    name: 构建和发布
+  release:
    runs-on: ubuntu-latest
-    timeout-minutes: 60
-
-    # 设置作业级别的环境变量
-    env:
-      GITHUB_OWNER: ${{ github.repository_owner }}
-      GITHUB_REPO: ${{ github.event.repository.name }}
-      PROJECT_NAME: ${{ github.event.repository.name }}
+    timeout-minutes: 45

    steps:
-      - name: 📥 检出代码
+      - name: 检出代码
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}

-      - name: 🔍 获取项目信息
-        id: project
-        run: |
-          echo "owner=${GITHUB_REPOSITORY_OWNER}" >> $GITHUB_OUTPUT
-          echo "repo=${GITHUB_REPOSITORY#*/}" >> $GITHUB_OUTPUT
-          echo "version=${GITHUB_REF#refs/tags/}" >> $GITHUB_OUTPUT
-          echo "full_sha=${GITHUB_SHA}" >> $GITHUB_OUTPUT
-          echo "short_sha=${GITHUB_SHA:0:7}" >> $GITHUB_OUTPUT
-          echo "build_date=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-          echo "build_timestamp=$(date +%s)" >> $GITHUB_OUTPUT
-
-      - name: 🐹 设置 Go 环境
-        uses: actions/setup-go@v5
+      - name: 构建和发布
+        uses: ./.github/actions/build-release
        with:
+          mode: ${{ inputs.snapshot && 'snapshot' || 'release' }}
          go-version: '1.20'
-          cache: true
-
-      - name: 📦 下载依赖
-        run: |
-          go mod download
-          go mod verify
-
-      - name: 🗜️ 安装 UPX 压缩工具
-        uses: crazy-max/ghaction-upx@v3
-        with:
-          install-only: true
-
-      - name: ℹ️ 显示构建环境信息
-        run: |
-          echo "Go 版本: $(go version)"
-          echo "UPX 版本: $(upx --version)"
-          echo "Git 标签: ${{ steps.project.outputs.version }}"
-          echo "提交: ${{ steps.project.outputs.short_sha }}"
-          echo "仓库: ${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}"
-          echo "构建时间: ${{ steps.project.outputs.build_date }}"
-          echo "环境变量:"
-          echo "- GITHUB_OWNER: $GITHUB_OWNER"
-          echo "- GITHUB_REPO: $GITHUB_REPO"
-          echo "- PROJECT_NAME: $PROJECT_NAME"
-
-      - name: 📊 记录构建开始时间
-        id: build_start
-        run: |
-          echo "start_time=$(date +%s)" >> $GITHUB_OUTPUT
-          echo "start_readable=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-
-      - name: 🚀 构建和发布
-        id: build_step
-        uses: goreleaser/goreleaser-action@v5
-        with:
-          distribution: goreleaser
-          version: latest
-          args: release --clean -f .github/conf/.goreleaser.yml ${{ inputs.draft && '--draft' || '' }} ${{ inputs.prerelease && '--prerelease' || '' }}
-          workdir: .
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITHUB_REPO: ${{ github.event.repository.name }}
-          GITHUB_OWNER: ${{ github.repository_owner }}
-          PROJECT_NAME: ${{ github.event.repository.name }}
-        continue-on-error: true
-
-      - name: 📊 记录构建结束时间
-        id: build_end
-        run: |
-          echo "end_time=$(date +%s)" >> $GITHUB_OUTPUT
-          echo "end_readable=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-          start_time=${{ steps.build_start.outputs.start_time }}
-          end_time=$(date +%s)
-          duration=$((end_time - start_time))
-          echo "duration=${duration}" >> $GITHUB_OUTPUT
-          echo "duration_readable=$(printf '%02d:%02d:%02d' $((duration/3600)) $((duration%3600/60)) $((duration%60)))" >> $GITHUB_OUTPUT
-
-      - name: 📋 上传构建产物
-        uses: actions/upload-artifact@v4
-        if: always()
-        with:
-          name: 构建产物-${{ steps.project.outputs.version }}
-          path: |
-            dist/
-          retention-days: 30
-        continue-on-error: true
-
-      - name: 📊 统计构建产物
-        id: build_stats
-        run: |
-          if [ -d "dist" ]; then
-            total_files=$(find dist/ -type f | wc -l)
-            executable_files=$(find dist/ -type f -executable | wc -l)
-            config_files=$(find dist/ -name "*.json" -o -name "*.yaml" -o -name "*.yml" -o -name "*.txt" | wc -l)
-          
-            # 平台统计
-            linux_count=$(find dist/ -name "*linux*" -type f | wc -l)
-            darwin_count=$(find dist/ -name "*darwin*" -type f | wc -l)
-            windows_count=$(find dist/ -name "*windows*" -type f | wc -l)
-          
-            echo "total_files=$total_files" >> $GITHUB_OUTPUT
-            echo "executable_files=$executable_files" >> $GITHUB_OUTPUT
-            echo "config_files=$config_files" >> $GITHUB_OUTPUT
-            echo "linux_count=$linux_count" >> $GITHUB_OUTPUT
-            echo "darwin_count=$darwin_count" >> $GITHUB_OUTPUT
-            echo "windows_count=$windows_count" >> $GITHUB_OUTPUT
-          else
-            echo "total_files=0" >> $GITHUB_OUTPUT
-            echo "executable_files=0" >> $GITHUB_OUTPUT
-            echo "config_files=0" >> $GITHUB_OUTPUT
-            echo "linux_count=0" >> $GITHUB_OUTPUT
-            echo "darwin_count=0" >> $GITHUB_OUTPUT
-            echo "windows_count=0" >> $GITHUB_OUTPUT
-          fi
-
-      - name: 📊 生成发布报告
-        if: always()
-        run: |
-          # 构建状态判断
-          if [[ "${{ steps.build_step.outcome }}" == "success" ]]; then
-            build_status="![构建状态](https://img.shields.io/badge/构建-成功-brightgreen)"
-            release_status="![发布状态](https://img.shields.io/badge/发布-成功-brightgreen)"
-          else
-            build_status="![构建状态](https://img.shields.io/badge/构建-失败-red)"
-            release_status="![发布状态](https://img.shields.io/badge/发布-失败-red)"
-          fi
-          
-          echo "# 🎉 发布构建报告" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "$build_status $release_status" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 基本信息
-          echo "## 📋 发布基本信息" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 项目 | 值 |" >> $GITHUB_STEP_SUMMARY
-          echo "|------|-----|" >> $GITHUB_STEP_SUMMARY
-          echo "| 🏷️ **项目名称** | ${{ steps.project.outputs.repo }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 👤 **拥有者** | ${{ steps.project.outputs.owner }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🏷️ **版本** | \`${{ steps.project.outputs.version }}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| 📝 **提交SHA** | \`${{ steps.project.outputs.short_sha }}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| 📅 **构建时间** | ${{ steps.project.outputs.build_date }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| ⏱️ **构建耗时** | ${{ steps.build_end.outputs.duration_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🚀 **触发方式** | ${{ github.event_name }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🔧 **Go版本** | $(go version | cut -d' ' -f3) |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🗜️ **UPX版本** | $(upx --version | head -1 | cut -d' ' -f2) |" >> $GITHUB_STEP_SUMMARY
-          echo "| 📦 **发布类型** | $(if [[ "${{ inputs.draft }}" == "true" ]]; then echo "草稿"; elif [[ "${{ inputs.prerelease }}" == "true" ]]; then echo "预发布"; else echo "正式发布"; fi) |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建环境信息
-          echo "## 🖥️ 构建环境" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 环境变量 | 值 |" >> $GITHUB_STEP_SUMMARY
-          echo "|----------|-----|" >> $GITHUB_STEP_SUMMARY
-          echo "| **GITHUB_OWNER** | $GITHUB_OWNER |" >> $GITHUB_STEP_SUMMARY
-          echo "| **GITHUB_REPO** | $GITHUB_REPO |" >> $GITHUB_STEP_SUMMARY
-          echo "| **PROJECT_NAME** | $PROJECT_NAME |" >> $GITHUB_STEP_SUMMARY
-          echo "| **RUNNER_OS** | $RUNNER_OS |" >> $GITHUB_STEP_SUMMARY
-          echo "| **RUNNER_ARCH** | $RUNNER_ARCH |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建时间统计
-          echo "## ⏰ 构建时间统计" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 阶段 | 时间 |" >> $GITHUB_STEP_SUMMARY
-          echo "|------|------|" >> $GITHUB_STEP_SUMMARY
-          echo "| 🚀 **开始时间** | ${{ steps.build_start.outputs.start_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🏁 **结束时间** | ${{ steps.build_end.outputs.end_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| ⏱️ **总耗时** | ${{ steps.build_end.outputs.duration_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建结果
-          echo "## 🚀 构建结果" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 构建阶段 | 状态 |" >> $GITHUB_STEP_SUMMARY
-          echo "|----------|------|" >> $GITHUB_STEP_SUMMARY
-          
-          if [[ "${{ steps.build_step.outcome }}" == "success" ]]; then
-            echo "| 🏗️ **构建发布** | ✅ 成功 |" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "| 🏗️ **构建发布** | ❌ 失败 |" >> $GITHUB_STEP_SUMMARY
-          fi
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 发布产物统计
-          if [ -d "dist" ]; then
-            echo "## 📦 发布产物统计" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            # 文件类型统计
-            echo "### 📊 文件类型统计" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "| 文件类型 | 数量 |" >> $GITHUB_STEP_SUMMARY
-            echo "|----------|------|" >> $GITHUB_STEP_SUMMARY
-            echo "| 📁 **总文件数** | ${{ steps.build_stats.outputs.total_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 🔧 **可执行文件** | ${{ steps.build_stats.outputs.executable_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 📄 **配置文件** | ${{ steps.build_stats.outputs.config_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            # 平台分布统计
-            echo "### 🌍 平台分布统计" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            echo "| 平台 | 数量 |" >> $GITHUB_STEP_SUMMARY
-            echo "|------|------|" >> $GITHUB_STEP_SUMMARY
-            echo "| 🐧 **Linux** | ${{ steps.build_stats.outputs.linux_count }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 🍎 **macOS** | ${{ steps.build_stats.outputs.darwin_count }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 🪟 **Windows** | ${{ steps.build_stats.outputs.windows_count }} |" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            # 总产物大小
-            echo "### 📦 产物大小" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-            total_size=$(du -sh dist/ 2>/dev/null | cut -f1 || echo "未知")
-            echo "**总产物大小**: $total_size" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          # 发布总结
-          echo "## 📈 发布总结" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          if [[ "${{ steps.build_step.outcome }}" == "success" ]]; then
-            echo "🎉 **构建状态**: ✅ 成功" >> $GITHUB_STEP_SUMMARY
-            echo "🎉 **发布状态**: ✅ 成功" >> $GITHUB_STEP_SUMMARY
-            echo "🔗 **发布链接**: https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/releases/tag/${{ steps.project.outputs.version }}" >> $GITHUB_STEP_SUMMARY
-          else
-            echo "🎉 **构建状态**: ❌ 失败" >> $GITHUB_STEP_SUMMARY
-            echo "🎉 **发布状态**: ❌ 失败" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          echo "📊 **可执行文件**: ${{ steps.build_stats.outputs.executable_files }} 个" >> $GITHUB_STEP_SUMMARY
-          echo "⏱️ **构建耗时**: ${{ steps.build_end.outputs.duration_readable }}" >> $GITHUB_STEP_SUMMARY
-          echo "📦 **产物大小**: $(du -sh dist/ 2>/dev/null | cut -f1 || echo "未知")" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 快速链接
-          echo "## 🔗 快速链接" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "- 🎯 [查看发布页面](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/releases/tag/${{ steps.project.outputs.version }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 📋 [查看产物列表](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 📥 [下载产物](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 🔍 [查看提交](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/commit/${{ steps.project.outputs.full_sha }})" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          echo "---" >> $GITHUB_STEP_SUMMARY
-          echo "*报告生成时间: $(date -u +"%Y-%m-%d %H:%M:%S UTC")*" >> $GITHUB_STEP_SUMMARY
-
-      - name: 📬 发送通知
-        if: always()
-        run: |
-          if [[ "${{ steps.build_step.outcome }}" == "success" ]]; then
-            echo "✅ 发布成功！版本 ${{ steps.project.outputs.version }} 已发布"
-            # 这里可以添加发送成功通知的逻辑（如 Slack、邮件等）
-          else
-            echo "❌ 发布失败！请检查构建日志"
-            # 这里可以添加发送失败通知的逻辑
-          fi
+          retention-days: '90'
+          release-args: ${{ inputs.draft && '--draft' || '' }} ${{ inputs.prerelease && '--prerelease' || '' }}
@@ -6,224 +6,195 @@ on:
      - dev
      - develop
      - feature/*
+    paths-ignore:
+      - '*.md'
+      - '*.txt'
+      - 'README*'
+      - 'LICENSE*'
+      - 'image/**'
+      - 'TestDocker/**'
+      - '**/*.png'
+      - '**/*.jpg'
+      - '**/*.jpeg'
  pull_request:
    branches:
      - main
      - master
      - dev
+    paths-ignore:
+      - '*.md'
+      - '*.txt'
+      - 'README*'
+      - 'LICENSE*'
+      - 'image/**'
+      - 'TestDocker/**'
+      - '**/*.png'
+      - '**/*.jpg'
+      - '**/*.jpeg'
  workflow_dispatch:
-    inputs:
-      branch:
-        description: '测试分支'
-        required: false
-        default: 'dev'

 permissions:
  contents: read

 jobs:
-  test-build:
-    name: 测试构建
+  lint:
+    name: 代码检查
    runs-on: ubuntu-latest
-    timeout-minutes: 30
-
-    # 设置作业级别的环境变量
-    env:
-      GITHUB_OWNER: ${{ github.repository_owner }}
-      GITHUB_REPO: ${{ github.event.repository.name }}
-      PROJECT_NAME: ${{ github.event.repository.name }}
+    timeout-minutes: 10

    steps:
-      - name: 📥 检出代码
+      - name: 检出代码
        uses: actions/checkout@v4
+
+      - name: 设置 Go 环境
+        uses: actions/setup-go@v5
        with:
-          fetch-depth: 0
-          ref: ${{ github.event.inputs.branch || github.ref }}
+          go-version: '1.23'
+          cache: true

-      - name: 🔍 获取项目信息
-        id: project
+      - name: 运行 golangci-lint
        run: |
-          echo "owner=${GITHUB_REPOSITORY_OWNER}" >> $GITHUB_OUTPUT
-          echo "repo=${GITHUB_REPOSITORY#*/}" >> $GITHUB_OUTPUT
-          echo "branch=${GITHUB_REF#refs/heads/}" >> $GITHUB_OUTPUT
-          echo "short_sha=${GITHUB_SHA:0:7}" >> $GITHUB_OUTPUT
-          echo "full_sha=${GITHUB_SHA}" >> $GITHUB_OUTPUT
-          echo "build_date=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-          echo "timestamp=$(date +%s)" >> $GITHUB_OUTPUT
+          # 下载 golangci-lint v2
+          curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin latest

-      - name: 🐹 设置 Go 环境
+          # 运行检查并灵活处理结果
+          set +e
+          golangci-lint run --timeout=5m > lint_output.txt 2>&1
+          LINT_EXIT_CODE=$?
+          cat lint_output.txt
+          set -e
+
+          # 只关注真正的 bug，忽略代码质量建议
+          # 过滤规则：
+          # - gocognit/gocyclo: 复杂度警告（阈值已在配置中设置）
+          # - QF/S/ST: staticcheck 的代码质量改进建议（非bug）
+          if [ $LINT_EXIT_CODE -ne 0 ]; then
+            CRITICAL_ISSUES=$(grep -E "\.go:[0-9]+:[0-9]+:" lint_output.txt | grep -v "gocognit" | grep -v "gocyclo" | grep -v "QF[0-9]" | grep -v " S[0-9]" | grep -v "ST[0-9]" || true)
+            if [ -n "$CRITICAL_ISSUES" ]; then
+              echo "❌ Linting failed with critical issues:"
+              echo "$CRITICAL_ISSUES" | head -20
+              exit 1
+            else
+              echo "⚠️  Only quality suggestions - PASSING"
+              exit 0
+            fi
+          fi
+          echo "✅ No lint issues found"
+
+      - name: 检查代码复杂度（质量门禁）
+        run: |
+          echo "### 🚦 复杂度质量门禁" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # 检查认知复杂度>80的函数
+          COMPLEX_FUNCS=$(golangci-lint run --disable-all --enable=gocognit --out-format=line-number 2>&1 | grep "cognitive complexity" | grep -v "typechecking" || true)
+
+          if [ -n "$COMPLEX_FUNCS" ]; then
+            HIGH_COMPLEX=$(echo "$COMPLEX_FUNCS" | awk '{print $NF}' | sed 's/[()]//g' | awk -F'>' '{if ($1 > 80) print}' | wc -l)
+
+            if [ "$HIGH_COMPLEX" -gt 0 ]; then
+              echo "❌ **发现 $HIGH_COMPLEX 个复杂度>80的函数**" >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "$COMPLEX_FUNCS" | awk '{print $NF}' | sed 's/[()]//g' | awk -F'>' '{if ($1 > 80) print "复杂度:", $1, "- 必须重构"}' >> $GITHUB_STEP_SUMMARY
+              echo '```' >> $GITHUB_STEP_SUMMARY
+              echo "" >> $GITHUB_STEP_SUMMARY
+              echo "⚠️ 请重构复杂度>80的函数后再提交" >> $GITHUB_STEP_SUMMARY
+              exit 1
+            fi
+          fi
+
+          echo "✅ 代码复杂度检查通过（所有函数≤80）" >> $GITHUB_STEP_SUMMARY
+
+  test:
+    name: 单元测试和构建
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    needs: lint
+
+    steps:
+      - name: 检出代码
+        uses: actions/checkout@v4
+
+      - name: 设置 Go 环境
        uses: actions/setup-go@v5
        with:
          go-version: '1.20'
          cache: true

-      - name: 📦 下载依赖
+      - name: 下载依赖
        run: |
          go mod download
          go mod verify

-      - name: 🗜️ 安装 UPX 压缩工具
-        uses: crazy-max/ghaction-upx@v3
-        with:
-          install-only: true
-
-      - name: ℹ️ 显示构建环境信息
+      - name: 运行测试
        run: |
-          echo "Go 版本: $(go version)"
-          echo "UPX 版本: $(upx --version)"
-          echo "分支: ${{ steps.project.outputs.branch }}"
-          echo "提交: ${{ steps.project.outputs.short_sha }}"
-          echo "仓库: ${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}"
-          echo "构建时间: ${{ steps.project.outputs.build_date }}"
-          echo "环境变量:"
-          echo "- GITHUB_OWNER: $GITHUB_OWNER"
-          echo "- GITHUB_REPO: $GITHUB_REPO"
-          echo "- PROJECT_NAME: $PROJECT_NAME"
+          # 排除第三方grdp库测试（存在环境依赖问题）
+          go test -vet=off -race -coverprofile=coverage.out -covermode=atomic $(go list ./... | grep -v '/mylib/grdp/')

-      - name: 📊 记录构建开始时间
-        id: build_start
-        run: |
-          echo "start_time=$(date +%s)" >> $GITHUB_OUTPUT
-          echo "start_readable=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-
-      - name: 🚀 测试构建 (Snapshot 模式)
-        uses: goreleaser/goreleaser-action@v5
-        with:
-          distribution: goreleaser
-          version: latest
-          args: release --snapshot --clean -f .github/conf/.goreleaser.yml
-          workdir: .
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: 📊 记录构建结束时间
-        id: build_end
-        run: |
-          echo "end_time=$(date +%s)" >> $GITHUB_OUTPUT
-          echo "end_readable=$(date -u +"%Y-%m-%d %H:%M:%S UTC")" >> $GITHUB_OUTPUT
-          start_time=${{ steps.build_start.outputs.start_time }}
-          end_time=$(date +%s)
-          duration=$((end_time - start_time))
-          echo "duration=${duration}" >> $GITHUB_OUTPUT
-          echo "duration_readable=$(printf '%02d:%02d:%02d' $((duration/3600)) $((duration%3600/60)) $((duration%60)))" >> $GITHUB_OUTPUT
-
-      - name: 📋 上传测试产物
+      - name: 上传覆盖率
        uses: actions/upload-artifact@v4
        with:
-          name: 测试构建-${{ steps.project.outputs.branch }}-${{ steps.project.outputs.short_sha }}
-          path: |
-            dist/
+          name: coverage-report
+          path: coverage.out
          retention-days: 7

-      - name: 📊 统计构建产物
-        id: build_stats
+      - name: 显示覆盖率
        run: |
-          if [ -d "dist" ]; then
-            total_files=$(find dist/ -type f | wc -l)
-            executable_files=$(find dist/ -type f -executable | wc -l)
-            config_files=$(find dist/ -name "*.json" -o -name "*.yaml" -o -name "*.yml" -o -name "*.txt" | wc -l)
-          
-            echo "total_files=$total_files" >> $GITHUB_OUTPUT
-            echo "executable_files=$executable_files" >> $GITHUB_OUTPUT
-            echo "config_files=$config_files" >> $GITHUB_OUTPUT
-          else
-            echo "total_files=0" >> $GITHUB_OUTPUT
-            echo "executable_files=0" >> $GITHUB_OUTPUT
-            echo "config_files=0" >> $GITHUB_OUTPUT
+          echo "### 测试覆盖率报告" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          go tool cover -func=coverage.out >> $GITHUB_STEP_SUMMARY
+
+      - name: 检查覆盖率（质量门禁）
+        run: |
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### 🚦 覆盖率质量门禁" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # 提取总体覆盖率
+          TOTAL_COVERAGE=$(go tool cover -func=coverage.out | grep total | awk '{print $3}' | sed 's/%//')
+
+          echo "总体覆盖率: ${TOTAL_COVERAGE}%" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          # 检查核心模块覆盖率（core, common/parsers必须>50%）
+          CORE_COVERAGE=$(go tool cover -func=coverage.out | grep "^github.com/shadow1ng/fscan/core/" | grep -v "_test.go" | awk '{sum+=$3; count++} END {if(count>0) print sum/count; else print 0}')
+          PARSERS_COVERAGE=$(go tool cover -func=coverage.out | grep "^github.com/shadow1ng/fscan/common/parsers/" | grep -v "_test.go" | awk '{sum+=$3; count++} END {if(count>0) print sum/count; else print 0}')
+
+          # 警告阈值：总体<40%, 核心模块<50%
+          if (( $(echo "$TOTAL_COVERAGE < 40" | bc -l) )); then
+            echo "⚠️ **警告**: 总体覆盖率 ${TOTAL_COVERAGE}% < 40%，建议补充测试" >> $GITHUB_STEP_SUMMARY
          fi

-      - name: 📊 生成构建报告
-        if: always()
-        run: |
-          echo "# 🎯 测试构建报告" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 基本信息表格
-          echo "## 📋 构建基本信息" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 项目 | 值 |" >> $GITHUB_STEP_SUMMARY
-          echo "|------|-----|" >> $GITHUB_STEP_SUMMARY
-          echo "| 🏷️ **项目名称** | ${{ steps.project.outputs.repo }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 👤 **拥有者** | ${{ steps.project.outputs.owner }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🌿 **分支** | ${{ steps.project.outputs.branch }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 📝 **提交SHA** | \`${{ steps.project.outputs.short_sha }}\` |" >> $GITHUB_STEP_SUMMARY
-          echo "| 📅 **构建时间** | ${{ steps.project.outputs.build_date }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| ⏱️ **构建耗时** | ${{ steps.build_end.outputs.duration_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🚀 **触发方式** | ${{ github.event_name }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🔧 **Go版本** | $(go version | cut -d' ' -f3) |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🗜️ **UPX版本** | $(upx --version | head -1 | cut -d' ' -f2) |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建环境信息
-          echo "## 🖥️ 构建环境" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 环境变量 | 值 |" >> $GITHUB_STEP_SUMMARY
-          echo "|----------|-----|" >> $GITHUB_STEP_SUMMARY
-          echo "| **GITHUB_OWNER** | $GITHUB_OWNER |" >> $GITHUB_STEP_SUMMARY
-          echo "| **GITHUB_REPO** | $GITHUB_REPO |" >> $GITHUB_STEP_SUMMARY
-          echo "| **PROJECT_NAME** | $PROJECT_NAME |" >> $GITHUB_STEP_SUMMARY
-          echo "| **RUNNER_OS** | $RUNNER_OS |" >> $GITHUB_STEP_SUMMARY
-          echo "| **RUNNER_ARCH** | $RUNNER_ARCH |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建时间统计
-          echo "## ⏰ 构建时间统计" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "| 阶段 | 时间 |" >> $GITHUB_STEP_SUMMARY
-          echo "|------|------|" >> $GITHUB_STEP_SUMMARY
-          echo "| 🚀 **开始时间** | ${{ steps.build_start.outputs.start_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| 🏁 **结束时间** | ${{ steps.build_end.outputs.end_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "| ⏱️ **总耗时** | ${{ steps.build_end.outputs.duration_readable }} |" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 构建产物统计
-          if [ -d "dist" ]; then
-            echo "## 📦 构建产物统计" >> $GITHUB_STEP_SUMMARY
+          # 检查是否有新增的未测试文件（0%覆盖率）
+          ZERO_COVERAGE_FILES=$(go tool cover -func=coverage.out | awk '$3 == "0.0%" && $1 !~ /_test\.go/' | wc -l)
+          if [ "$ZERO_COVERAGE_FILES" -gt 0 ]; then
+            echo "⚠️ **警告**: 发现 $ZERO_COVERAGE_FILES 个文件覆盖率为0%" >> $GITHUB_STEP_SUMMARY
            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            # 文件类型统计
-            echo "### 📊 文件类型统计" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            echo "| 文件类型 | 数量 |" >> $GITHUB_STEP_SUMMARY
-            echo "|----------|------|" >> $GITHUB_STEP_SUMMARY
-            echo "| 📁 **总文件数** | ${{ steps.build_stats.outputs.total_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 🔧 **可执行文件** | ${{ steps.build_stats.outputs.executable_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "| 📄 **配置文件** | ${{ steps.build_stats.outputs.config_files }} |" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            # 总产物大小
-            echo "### 📦 产物大小" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          
-            total_size=$(du -sh dist/ 2>/dev/null | cut -f1 || echo "未知")
-            echo "**总产物大小**: $total_size" >> $GITHUB_STEP_SUMMARY
-            echo "" >> $GITHUB_STEP_SUMMARY
-          fi
-          
-          # 总结
-          echo "## 📈 构建总结" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          if [ "${{ job.status }}" == "success" ]; then
-            echo "🎉 **构建状态**: ✅ 成功" >> $GITHUB_STEP_SUMMARY
+            echo "请为新代码补充单元测试" >> $GITHUB_STEP_SUMMARY
          else
-            echo "🎉 **构建状态**: ❌ 失败" >> $GITHUB_STEP_SUMMARY
+            echo "✅ 覆盖率检查通过" >> $GITHUB_STEP_SUMMARY
          fi
-          
-          echo "📊 **可执行文件**: ${{ steps.build_stats.outputs.executable_files }} 个" >> $GITHUB_STEP_SUMMARY
-          echo "⏱️ **构建耗时**: ${{ steps.build_end.outputs.duration_readable }}" >> $GITHUB_STEP_SUMMARY
-          echo "📦 **产物大小**: $(du -sh dist/ 2>/dev/null | cut -f1 || echo "未知")" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          # 添加快速链接
-          echo "## 🔗 快速链接" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          echo "- 📋 [查看产物列表](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 📥 [下载产物](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/actions/runs/${{ github.run_id }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 🔍 [查看提交](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/commit/${{ steps.project.outputs.full_sha }})" >> $GITHUB_STEP_SUMMARY
-          echo "- 🌿 [查看分支](https://github.com/${{ steps.project.outputs.owner }}/${{ steps.project.outputs.repo }}/tree/${{ steps.project.outputs.branch }})" >> $GITHUB_STEP_SUMMARY
-          echo "" >> $GITHUB_STEP_SUMMARY
-          
-          echo "---" >> $GITHUB_STEP_SUMMARY
-          echo "*报告生成时间: $(date -u +"%Y-%m-%d %H:%M:%S UTC")*" >> $GITHUB_STEP_SUMMARY
+
+  build:
+    name: 构建验证
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    needs: test
+
+    steps:
+      - name: 检出代码
+        uses: actions/checkout@v4
+
+      - name: 设置 Go 环境
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.20'
+          cache: true
+
+      - name: 构建验证
+        run: |
+          # 只验证能否编译通过，不需要多平台构建
+          echo "🔨 验证 Linux/amd64 构建..."
+          CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o /dev/null .
+          echo "✅ 构建成功"