chore(ai-review 狀態): 清空 findings 並登記回應摘要告警為誤報
CI / 1. BUILD (pull_request) Successful in 2s
CI / 2. TEST (pull_request) Skipped
CI / 3. RESULT (pull_request) Skipped

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Jeffery
2026-07-15 10:43:21 +08:00
co-authored by Claude Fable 5
parent 4aecd48b5a
commit 888d503d1d
2 changed files with 9 additions and 50 deletions
+8
View File
@@ -142,5 +142,13 @@
"reason": "release 數量預期不大,全量排序成本可忽略;後續同時需要「保留的前 K 筆」與「其餘待刪清單」,一次排序是最直接清楚的實作,引入 top-K 堆反而增加複雜度(與既有「分頁結果先完整收集到陣列」的排除理由一致)。",
"source": "develop...ai-review-resolve/develop-20260711-131608",
"date": "2026-07-15"
},
{
"location": "src/index.js:317",
"role": "Assassin",
"original_finding": "例外訊息只保留 HTTP 狀態碼與請求目標,不要預設帶回應 body;若真的需要除錯資訊,改成在受控的 debug 模式下才輸出,而且要先過濾敏感欄位並更短截斷。",
"reason": "已有等價防護:回應摘要先經 sanitizeLogText 去除控制字元(無法注入換行/ANSI 偽造 log),再截斷至 200 字;請求對象是參數檢查階段驗證過的 HTTPS Gitea 端點,非任意外部來源。保留截斷後的錯誤摘要對排查 API 失敗(如 403 權限訊息)必要,移除反而增加維運成本。",
"source": "develop...master",
"date": "2026-07-15"
}
]