WaterRain f203149f4f security: 修复 CI/Release workflow 签名凭据风险 ... - 所有 action 引用改为 commit SHA pin（checkout/setup-java/setup-android/action-gh-release/upload-artifact） - build.gradle.kts 移除硬编码签名密码 fallback，改用 takeIf 防御 null 和空字符串 - release.yml 构建完成后清理 release.jks（if: always()） - ci.yml 补充最小权限声明 permissions: contents: read		2026-08-04 22:58:00 +00:00
..
ci.yml	security: 修复 CI/Release workflow 签名凭据风险	2026-08-04 22:58:00 +00:00
release.yml	security: 修复 CI/Release workflow 签名凭据风险	2026-08-04 22:58:00 +00:00