chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00
parent 4f7058f1ea
commit b8f4a3d543
39 changed files with 131 additions and 18 deletions
@@ -2,7 +2,18 @@
 """将CMA战略地图完整文档导入知识库"""
 import pymysql, re

-DB = dict(host='127.0.0.1', port=3306, user='cma_user', password='cma_pass_2026', database='cma', charset='utf8mb4')
+# 2026-09-12 库访问治理（ops）：口令改从 .env 读取，清除硬编码
+import os as _os_gov
+try:
+    from dotenv import load_dotenv as _ld_gov
+    _ld_gov('/root/cma-management/backend/.env', override=False)
+except Exception:
+    pass
+_CMA_DB_PASS = _os_gov.getenv('CMA_DB_PASS', '')
+_CMA_DB_USER = _os_gov.getenv('CMA_DB_USER', '')
+_CMA_DB_HOST = _os_gov.getenv('CMA_DB_HOST', '127.0.0.1')
+
+DB = dict(host='127.0.0.1', port=3306, user=_CMA_DB_USER, password=_CMA_DB_PASS, database='cma', charset='utf8mb4')

 DOC = "/root/CMA_Strategy_Map_完整分析.md"