feat(security): 新增主機服務配置只讀清冊
Some checks failed
CD Pipeline / tests (push) Successful in 1m28s
Code Review / ai-code-review (push) Successful in 14s
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled

This commit is contained in:
Your Name
2026-06-11 21:41:41 +08:00
parent 0a82648ef6
commit 118967cabc
16 changed files with 1362 additions and 21 deletions

View File

@@ -2076,7 +2076,7 @@ const highValueConfigControlCoverageSummary = [
] as const
const highValueConfigControlCoverageItems: HighValueConfigControlCoverageItem[] = [
{ key: 'dockerSystemd', rank: 'P1-1', value: '42%', icon: Server, tone: 'warn' },
{ key: 'dockerSystemd', rank: 'P1-1', value: '50%', icon: Server, tone: 'warn' },
{ key: 'sshNetwork', rank: 'P1-2', value: '48%', icon: Network, tone: 'warn' },
{ key: 'backupRestore', rank: 'P1-3', value: '52%', icon: Database, tone: 'warn' },
{ key: 'monitoring', rank: 'P1-4', value: '56%', icon: Radar, tone: 'warn' },
@@ -2095,6 +2095,13 @@ const highValueConfigControlCoverageBoundaries = [
'high_value_config_control_coverage_owner_response_accepted_count=0',
'high_value_config_control_coverage_runtime_gate_count=0',
'high_value_config_control_coverage_action_button_count=0',
'host_service_config_inventory_surface_count=9',
'host_service_config_inventory_write_capable_surface_count=3',
'host_service_config_inventory_runtime_gate_count=0',
'docker_compose_action_authorized=false',
'systemctl_action_authorized=false',
'repair_bot_execution_authorized=false',
'ansible_apply_authorized=false',
'runtime_execution_authorized=false',
'host_write_authorized=false',
'nginx_reload_authorized=false',