fix(security): 清理硬编码密码/密钥 & 移除 .env.production #53

Closed
xiaoxia wants to merge 2 commits from fix/security-hardening into develop

2 Commits

Author SHA1 Message Date
XiaoXia Bot 37bb18d2d5 chore(security): 将环境配置文件添加到 .gitignore
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- 添加 .env.production, .env.staging, .env.local 等模式到 .gitignore
- 防止敏感配置文件被意外提交
2026-06-27 18:09:14 +08:00
XiaoXia Bot fa285944a2 fix(security): 清理硬编码密码/密钥
- scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取
- infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量
- packages/application/auth/jwt_handler.py: 文档示例中密钥改为占位符

Relates to security audit findings.
2026-06-27 18:07:45 +08:00