feat: Audit deployment

.github/workflows/approval.yml

@@ -1,12 +1,13 @@
 name: Deployment Approval
 
 on:
-  pull_request:
-    branches: [ master ]
-  push:
-    branches: [ master ]
-  issue_comment:
-    types: [created]
+#   pull_request:
+#     branches: [ master ]
+#   push:
+#     branches: [ master ]
+#   issue_comment:
+#     types: [created]
+    workflow_dispatch:
 
 # 添加权限配置
 permissions:

.github/workflows/env_approval.yml

@@ -0,0 +1,41 @@
+name: Environment Deployment Approval
+
+on:
+  workflow_dispatch:
+  push:
+    branches: [ master ]
+
+permissions:
+  contents: read
+  deployments: write
+  actions: write
+
+jobs:
+  deployment-approval:
+    runs-on: ubuntu-latest
+    environment: production-approval
+    timeout-minutes: 300
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+
+    steps:
+      - name: Debug Event Info
+        run: |
+          echo "Event name: ${{ github.event_name }}"
+          echo "Ref: ${{ github.ref }}"
+          echo "SHA: ${{ github.sha }}"
+          echo "Actor: ${{ github.actor }}"
+
+      - name: Trigger Deploy Workflow
+        if: success()
+        uses: actions/github-script@v6
+        with:
+          github-token: ${{ secrets.WORKFLOW_PAT }}
+          script: |
+            await github.rest.actions.createWorkflowDispatch({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              workflow_id: 'deploy.yml',
+              ref: 'master'
+            })