xiaoxia/xiaoxia-saas

fix(ci): 重新加回gitleaks/pip-audit/vulture扫描步骤 #318

Merged

xiaoxia merged 4 commits from fix/ci-security-scans-reapply into develop

2026-07-14 16:25:08 +08:00

Author	SHA1	Message	Date
CI Bot	aca345fb75	fix(ci): detect-secrets禁用高误报插件，排除e2e/测试文件 CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 1m18s Details CI/CD Pipeline / Unit Tests (pull_request) Successful in 1m26s Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m10s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 2m36s Details CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details - 禁用BasicAuthDetector/KeywordDetector/IPPublicDetector（误报多） - 排除e2e/__tests__/spec目录及spec.ts/test.ts/test.py文件 - 保留AWS/GitHub/JWT/PrivateKey/Stripe等特异性高的检测	2026-07-14 15:43:37 +08:00
CI Bot	33d7e417c1	fix(ci): 密钥检测改用detect-secrets（pip安装，解决CI网络问题） CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 22s Details CI/CD Pipeline / Unit Tests (pull_request) Successful in 1m46s Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m25s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 2m7s Details CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details - 用detect-secrets替代gitleaks，pip安装无需下载二进制 - 排除测试/文档/node_modules/高熵字符串等误报源 - 发现密钥直接阻断CI（P0级别） - 移除不再使用的gitleaks.toml/vulture.conf/vulture_whitelist.py	2026-07-14 15:38:05 +08:00
CI Bot	bcb9f868ee	fix(ci): 修复三个安全扫描的问题 CI/CD Pipeline / Unit Tests (pull_request) Successful in 1m31s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 1m57s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 3m4s Details CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m8s Details - gitleaks: 增加ghproxy镜像源，解决下载失败问题 - pip-audit: 去掉--format text（不支持），用默认columns格式 - vulture: 改用命令行参数，移除有问题的toml配置文件和白名单文件	2026-07-14 15:30:57 +08:00
CI Bot	d642f65028	fix(ci): 重新加回gitleaks/pip-audit/vulture扫描步骤（被并行构建PR覆盖） CI/CD Pipeline / Unit Tests (pull_request) Successful in 1m26s Details CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Successful in 2m7s Details CI/CD Pipeline / Frontend Lint (pull_request) Successful in 2m25s Details CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped Details CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped Details CI/CD Pipeline / Deploy Production (pull_request) Has been skipped Details CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped Details CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped Details CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped Details CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m9s Details	2026-07-14 15:25:20 +08:00