fix(security): 删除 .env.production 并清理硬编码密码 #54

Merged
xiaoxia merged 1 commits from fix/security-hardening-v2 into develop 2026-06-27 19:01:27 +08:00

1 Commits

Author SHA1 Message Date
XiaoXia Bot 66bb0d87ab fix(security): 删除 .env.production 并清理硬编码密码
ci/cd Manually approved by coordinator
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Has been cancelled
CI/CD Pipeline / Frontend Lint (pull_request) Has been cancelled
- 删除 .env.production(含占位符密钥,已从版本控制移除)
- scripts/smoke_public_*.py: 密码改为从环境变量 SMOKE_TEST_PASSWORD 读取
- infra/docker/infra.yml: POSTGRES_PASSWORD 改为引用环境变量
- packages/application/auth/jwt_handler.py: 文档示例密钥改为占位符
2026-06-27 18:10:52 +08:00