ci: 彻底使用单行全量 HTTP/1.1 clone 绕过 Drone 插件特有的浅拉取漏洞

.drone.yml

@@ -2,6 +2,9 @@ kind: pipeline
 type: docker
 name: default
 
+clone:
+  disable: true
+
 node:
   name: pve
 
@@ -13,6 +16,14 @@ trigger:
     - custom
 
 steps:
+  - name: clone
+    image: alpine/git
+    commands:
+      - "git config --global http.version HTTP/1.1"
+      - "git config --global protocol.version 1"
+      - "git clone --depth=1 https://git.seahi.me/seahi/blogflare.git ."
+      - "git checkout -qf ${DRONE_COMMIT_SHA}"
+
   - name: install
     image: node:22-slim
     volumes: