chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

2026-09-12 23:34:35 +08:00
parent 4f7058f1ea
commit b8f4a3d543
39 changed files with 131 additions and 18 deletions
@@ -13,12 +13,15 @@ with open('/root/cma-management/backend/.env') as f:
            k, v = line.split('=', 1)
            env[k.strip()] = v.strip().strip('"').strip("'")

+if not env.get('CMA_DB_PASS'):
+    raise SystemExit('ERROR: 缺少 CMA_DB_PASS（2026-09-12 凭据治理已移除明文兜底）')
+
 import pymysql
 conn = pymysql.connect(
    host=env.get('CMA_DB_HOST', '127.0.0.1'),
    port=int(env.get('CMA_DB_PORT', '3306')),
    user=env.get('CMA_DB_USER', 'cma_user'),
-    password=env.get('CMA_DB_PASS', 'cma_pass_2026'),
+    password=env.get('CMA_DB_PASS'),
    database=env.get('CMA_DB_NAME', 'cma'),
    charset='utf8mb4',
 )