feat: Add audit logging (#38189)

Co-authored-by: bircni <bircni@users.noreply.github.com>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

services/audit/export_test.go

@@ -0,0 +1,48 @@
+// Copyright 2026 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package audit
+
+import (
+	"strings"
+	"testing"
+	"time"
+
+	audit_model "gitea.dev/models/audit"
+	repository_model "gitea.dev/models/repo"
+	user_model "gitea.dev/models/user"
+	"gitea.dev/modules/reqctx"
+	"gitea.dev/modules/timeutil"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestWriteEventsAsJSON(t *testing.T) {
+	r := &repository_model.Repository{ID: 3, Name: "TestRepo", OwnerName: "TestUser"}
+	m := &repository_model.PushMirror{ID: 4, RemoteAddress: "git@example.com:repo.git"}
+	doer := &user_model.User{ID: 2, Name: "Doer"}
+
+	ctx := reqctx.NewRequestContextForTest(t)
+	SetRequestInfo(ctx, audit_model.OriginUI, "127.0.0.1")
+
+	e := buildEvent(ctx, RecordParams{
+		Action: audit_model.RepositoryMirrorPushAdd,
+		Actor:  actorRef(doer),
+		Scope:  ScopeFromRepository(r),
+		Metadata: metaPairs(
+			"mirror_id", m.ID,
+			"remote_address", m.RemoteAddress,
+		),
+	})
+	e.TimestampUnix = timeutil.TimeStamp(time.Time{}.Unix())
+
+	sb := strings.Builder{}
+	assert.NoError(t, WriteEventsAsJSON(&sb, []*audit_model.Event{e, e}))
+	out := sb.String()
+	assert.Equal(t, 2, strings.Count(out, "\n"))
+	assert.Contains(t, out, `"action":"repository:mirror:push:add"`)
+	assert.Contains(t, out, `"name":"Doer"`)
+	assert.Contains(t, out, `"metadata"`)
+	assert.Contains(t, out, `"remote_address":"git@example.com:repo.git"`)
+	assert.Contains(t, out, `"ip_address":"127.0.0.1"`)
+}