Files
ewoooc/.gitignore
ogt 0099543c05
Some checks failed
CD Pipeline / deploy (push) Failing after 5m18s
fix(security): 全域健檢 — 40 項安全/Bug/品質修復
🔴 Critical
- auto_heal_service: 補 import re + sqlalchemy.text + 修正 orchestrator 變數名
  + autoheal_playbook→playbooks 表名 + _alert_and_store cooldown 修復
- aider_heal_executor: shell injection 改 shell=False + list 參數
- docker-compose: DISABLE_LOGIN 改 env var + 移除密碼 fallback + POSTGRES_HOST 修正
- app.py: /api/backup /api/run_task 等 6 個管理 API 加 @login_required
- config.py + pg_sync + e2e_test: 移除 wooo_pg_2026 hardcoded 密碼 fallback
- pg_backup.sh: 移除 TELEGRAM_TOKEN= 中間變數,直接用 $TELEGRAM_BOT_TOKEN
- migration 014: trigger_pattern→match_pattern + 補 error_type NOT NULL 欄位

🟡 High
- telegram_bot_service: str(e) 改通用訊息 + session try/finally + 移除 pa:/pr: 舊 callback
- run_scheduler: ElephantAlpha thread 死亡監控 + 自動重啟 + Telegram 告警
  + agent_context 03:30 TTL 定時清理任務
- openclaw_learning_service: build_rag_context 兩路徑加 .limit(200)
- hooks: commit-quality + momo-prod-guard 空 catch 改 stderr+exit(1)
- scripts/code_review: auto_yes 預設改 false
- db_backup_service: PGPASSWORD 透過 env dict 傳遞

📦 Migrations
- 013_autoheal: 修正建表順序 playbooks→incidents(外鍵前向引用)
- 018_add_missing_indexes: heal_logs/incidents 外鍵索引 + cleanup_expired_agent_context()

🟢 Infrastructure
- requirements.txt: 加版本下界 Flask>=2.3 SQLAlchemy>=1.4 等
- cd.yaml: 新增 run_scheduler.py + run_telegram_bot.py 監聽路徑
- .gitignore: insert_playbook_local.py 加入忽略

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-22 01:12:23 +08:00

139 lines
1.7 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# ==========================================
# MOMO 監控系統 - Git 忽略清單
# ==========================================
# 環境變數檔案(包含敏感資訊)
.env
.env.local
.env.*.local
# Claude Code 本機設定(含 allow list / Secret不可 commit
.claude/settings.local.json
# Python
__pycache__/
*.py[cod]
*$py.class
*.so
.Python
build/
develop-eggs/
dist/
downloads/
eggs/
.eggs/
lib/
lib64/
# 例外:允許部署腳本庫
!deploy/lib/
parts/
sdist/
var/
wheels/
pip-wheel-metadata/
share/python-wheels/
*.egg-info/
.installed.cfg
*.egg
MANIFEST
# 虛擬環境
venv/
ENV/
env/
.venv
# IDE
.vscode/
.idea/
*.swp
*.swo
*~
.DS_Store
# 日誌檔案
logs/
*.log
# 資料庫檔案
data/*.db
data/*.db-journal
data/*.db-shm
data/*.db-wal
data/*.sqlite
data/*.sqlite3
database/*.db
database/*.db-journal
database/*.db-shm
database/*.db-wal
database/*.sqlite
database/*.sqlite3
# 備份檔案
backups/
*.zip
*.tar.gz
*.bak
# Excel 匯出暫存檔
data/excel_exports/
*.xlsx~
~$*.xlsx
# 上傳檔案
web/static/uploads/
web/static/screenshots/
# 測試與覆蓋率報告
.pytest_cache/
.coverage
htmlcov/
.tox/
.nox/
# Jupyter Notebook
.ipynb_checkpoints
# macOS
.DS_Store
.AppleDouble
.LSOverride
# Windows
Thumbs.db
ehthumbs.db
Desktop.ini
# Docker
.dockerignore
docker-compose.override.yml
.docker/
# SSL 憑證
ssl/
*.pem
*.crt
*.key
# Google Drive API 憑證
config/google_credentials.json
config/google_token.pickle
config/*.json
config/*.pickle
data/momo_database.db-shm
data/momo_database.db-wal
k8s/03-secrets.yaml
# 雜項
123
*.db-shm
*.db-wal
.aider*
# Aider
.aider.chat.history.md
.aider.input.history
.aider.tags.cache.v4/
# 本機除錯腳本(不進版本庫)
insert_playbook_local.py