Security Audit Bot 1015bf2b13 fix(security): 移除敏感环境文件的版本追踪并清理硬编码Token ...

- 从版本控制中移除 .env.production 和 .env.staging（git rm --cached）
- 更新 .gitignore：移除 .env.staging 的例外规则，所有 .env 环境文件不再提交
- scripts/ci_failure_check.sh：硬编码 Gitea API Token 改为环境变量 GITEA_API_TOKEN
- scripts/auto_merge_prs.sh：硬编码 Gitea API Token 改为环境变量 GITEA_API_TOKEN

这是对 PR#53 的重新提交，补充了之前遗漏的脚本中硬编码凭证清理。

2026-06-28 09:20:55 +08:00

..

ci

docs(ci): establish runner infrastructure governance

2026-06-19 08:39:33 +08:00

alembic_preflight.py

style: sort Python imports for CI

2026-06-24 19:57:19 +08:00

auto_merge_prs.sh

fix(security): 移除敏感环境文件的版本追踪并清理硬编码Token

2026-06-28 09:20:55 +08:00

backup_postgres.sh

chore(release): script database backup runbook

2026-06-21 13:26:45 +08:00

build_release_images.sh

fix(release): prevent runtime builds on production host

2026-06-22 15:00:23 +08:00

check_schema_metadata.py

ci: detect sqlalchemy schema drift

2026-06-21 08:14:25 +08:00

ci_failure_check.sh

fix(security): 移除敏感环境文件的版本追踪并清理硬编码Token

2026-06-28 09:20:55 +08:00

cleanup_generated_files.py

docs(deploy): document generated file retention

2026-06-21 11:29:33 +08:00

create_tracker_db.py

style: format Python files for CI

2026-06-24 19:54:36 +08:00

deploy_cmd_agent.sh

Fix deploy: use base64 for server.py, simple restart

2026-06-26 15:20:22 +08:00

deploy_production.sh

feat: 标准化部署流程和文档化

2026-06-27 00:09:46 +08:00

deploy_release_images_production.sh

chore(release): add runtime image artifact deploy

2026-06-22 14:48:33 +08:00

deploy_staging.sh

feat: 标准化部署流程和文档化

2026-06-27 00:09:46 +08:00

init_phase4_tasks.py

refactor: remove all workspace_id references from codebase

2026-06-27 22:52:09 +08:00

init_phase6_tasks.py

style: format Python files for CI

2026-06-24 19:54:36 +08:00

init_production_env.sh

chore(release): initialize separated production env

2026-06-21 14:24:23 +08:00

init_tracker_data.ps1

feat: add deployment configs, systemd service, and tracker init scripts

2026-06-16 22:01:24 +08:00

init_tracker_data.py

refactor: remove all workspace_id references from codebase

2026-06-27 22:52:09 +08:00

init_tracker_direct.py

style: format Python files for CI

2026-06-24 19:54:36 +08:00

package_release_artifact.sh

fix(deploy): require prebuilt web artifact for production

2026-06-22 09:34:27 +08:00

production_resource_check.sh

chore(ops): add production resource monitoring check

2026-06-23 08:27:04 +08:00

restore_postgres_plan.sh

chore(release): script database backup runbook

2026-06-21 13:26:45 +08:00

rollback.sh

feat: 标准化部署流程和文档化

2026-06-27 00:09:46 +08:00

smoke_external_services.py

style: format Python files for CI

2026-06-24 19:54:36 +08:00

smoke_public_auth_flow.py

fix(security): 删除 .env.production 并清理硬编码密码

2026-06-27 18:10:52 +08:00

smoke_public_boundary_flow.py

refactor: remove all workspace_id references from codebase

2026-06-27 22:52:09 +08:00

smoke_public_upload_flow.py

refactor: remove all workspace_id references from codebase

2026-06-27 22:52:09 +08:00

start-e2e-api.ps1

docs: record V21 UI validation status

2026-06-24 19:26:58 +08:00

validate_release_env.py

chore(release): initialize separated production env

2026-06-21 14:24:23 +08:00