wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 4 Packages Projects Releases Wiki Activity

fix(awooop): 遮罩前台專案與代理敏感識別
All checks were successful
Code Review / ai-code-review (push) Successful in 14s
Details
CD Pipeline / tests (push) Successful in 1m30s
Details
CD Pipeline / build-and-deploy (push) Successful in 4m46s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m34s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-15 07:10:47 +08:00
parent e2ad14d34b
commit 9c4e754d33
8 changed files with 201 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
scripts/security/security-mirror-progress-guard.py
View File

@@ -366,6 +366,56 @@ def validate(root: Path) -> None:
governance_automation_inventory_tab,
"redactPublicIdentifier",
)
for helper in ["publicProjectText", "publicAgentText", "publicInternalCodeSummary"]:
assert_text_contains(f"public_security_redaction.{helper}", public_security_redaction, helper)
for label, text in [
("awooop_runs_page", awooop_runs_page),
("awooop_run_detail_page", awooop_run_detail_page),
("awooop_approvals_page", awooop_approvals_page),
("awooop_approval_detail_page", awooop_approval_detail_page),
("awooop_contracts_page", awooop_contracts_page),
]:
assert_text_contains(f"{label}.public_project_display_redaction", text, "publicProjectText")
for label, text in [
("awooop_runs_page", awooop_runs_page),
("awooop_run_detail_page", awooop_run_detail_page),
("awooop_approvals_page", awooop_approvals_page),
("awooop_approval_detail_page", awooop_approval_detail_page),
]:
assert_text_contains(f"{label}.public_agent_display_redaction", text, "publicAgentText")
for label, text in [
("awooop_work_items_page", awooop_work_items_page),
("awooop_run_detail_page", awooop_run_detail_page),
("awooop_approval_detail_page", awooop_approval_detail_page),
]:
assert_text_contains(f"{label}.public_internal_code_summary", text, "publicInternalCodeSummary")
for label, text, forbidden in [
("awooop_runs_page.raw_project_display", awooop_runs_page, "{run.project_id || \"--\"}"),
("awooop_runs_page.raw_agent_display", awooop_runs_page, "{run.agent_id || \"--\"}"),
("awooop_runs_page.raw_event_project_display", awooop_runs_page, "{event.project_id}"),
("awooop_approvals_page.raw_project_display", awooop_approvals_page, "{approval.project_id || \"--\"}"),
("awooop_approvals_page.raw_agent_display", awooop_approvals_page, "{approval.agent_id || \"--\"}"),
("awooop_contracts_page.raw_project_display", awooop_contracts_page, "{contract.project_id || \"--\"}"),
("awooop_contracts_page.raw_tenant_option", awooop_contracts_page, "{t.display_name || t.project_id}"),
("awooop_run_detail_page.raw_project_detail", awooop_run_detail_page, "value={run?.project_id}"),
("awooop_run_detail_page.raw_agent_detail", awooop_run_detail_page, "value={run?.agent_id}"),
("awooop_run_detail_page.raw_trace_detail", awooop_run_detail_page, "value={run?.trace_id}"),
("awooop_run_detail_page.raw_trigger_detail", awooop_run_detail_page, "value={run?.trigger_type}"),
("awooop_run_detail_page.raw_trigger_ref_detail", awooop_run_detail_page, "value={run?.trigger_ref}"),
("awooop_approval_detail_page.raw_project_detail", awooop_approval_detail_page, "value={run.project_id}"),
("awooop_approval_detail_page.raw_agent_detail", awooop_approval_detail_page, "value={run.agent_id}"),
("awooop_approval_detail_page.raw_trace_detail", awooop_approval_detail_page, "value={run.trace_id}"),
("awooop_approval_detail_page.raw_trigger_detail", awooop_approval_detail_page, "value={run.trigger_type}"),
("awooop_approval_detail_page.raw_trigger_ref_detail", awooop_approval_detail_page, "value={run.trigger_ref}"),
("awooop_work_items_page.raw_blockers_join", awooop_work_items_page, "blockers.join(\", \")"),
("awooop_work_items_page.raw_required_fields_join", awooop_work_items_page, "requiredOwnerFields.join(\", \")"),
(
"awooop_work_items_page.raw_completion_required_fields_join",
awooop_work_items_page,
"item.required_owner_fields.join(\", \")",
),
]:
assert_text_not_contains(label, text, forbidden)
assert_text_not_contains("public_security_redaction.owner_namespace_literal", public_security_redaction, "owenhytsai")
assert_text_not_contains("public_security_redaction.external_namespace_literal", public_security_redaction, "nexu-io")