feat(ci): 集成gitleaks + pip-audit + vulture安全扫描到Validate阶段 #311

Merged

xiaoxia merged 1 commits from feat/ci-security-scans into develop

2026-07-14 14:55:58 +08:00

Author	SHA1	Message	Date
CI Bot	a248883c8e	feat(ci): 集成gitleaks + pip-audit + vulture安全扫描到Validate阶段 CI/CD Pipeline / Unit Tests (pull_request) Successful in 1m13s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 1m13s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 9m35s Details CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 2m26s Details - gitleaks: 密钥检测（P0，阻断模式） - PR模式：增量扫描 - Push模式：全量扫描 - 双源下载（GitHub + Gitee镜像），失败优雅降级 - pip-audit: 依赖漏洞扫描（P1，告警模式，不阻断） - 扫描所有requirements文件 - vulture: 死代码检测（P2，告警模式，不阻断） - 置信度80% - 排除tests/migrations/scripts等 - 框架代码白名单	2026-07-14 11:35:42 +08:00