sxbh_admin/cma-management
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(security): 凭据治理收口 — 清除硬编码DB账号/口令，脚本与API统一从 backend/.env 读取(无明文兜底)；取消跟踪 .pyc 构建产物 (credential-governance-20260912)

Browse Source
This commit is contained in:
Hermes CI Fix
2026-09-12 23:34:35 +08:00
parent 4f7058f1ea
commit b8f4a3d543
39 changed files with 131 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
check.sh
+6 -1
View File
@@ -23,7 +23,12 @@ fi
# 3. 数据库
echo "[3] 数据库"
if mysql -ucma_user -pcma_pass_2026 -h127.0.0.1 cma -e "SELECT 1;" &>/dev/null; then
# 2026-09-12 凭据治理：账号必须与口令同源（backend/.env 已切 cma_api），禁止硬编码账号名
CMA_DB_USER="${CMA_DB_USER:-$(grep -m1 '^CMA_DB_USER=' /root/cma-management/backend/.env 2>/dev/null | cut -d= -f2- | tr -d '"')}"
CMA_DB_PASS="${CMA_DB_PASS:-$(grep -m1 '^CMA_DB_PASS=' /root/cma-management/backend/.env 2>/dev/null | cut -d= -f2- | tr -d '"')}"
if [ -z "$CMA_DB_USER" ] || [ -z "$CMA_DB_PASS" ]; then
echo " ! 未取到 CMA_DB_USER/PASS（2026-09-12 凭据治理：无明文兜底），跳过直连自检"
elif mysql -u"$CMA_DB_USER" -p"$CMA_DB_PASS" -h127.0.0.1 cma -e "SELECT 1;" &>/dev/null; then
echo " ✓ MariaDB 连接正常"
else
echo " ✗ MariaDB 连接失败"