From ad54073690593e5cb141f079b91917c8529da89f Mon Sep 17 00:00:00 2001 From: Jeffery Date: Fri, 26 Jun 2026 15:16:25 +0800 Subject: [PATCH] =?UTF-8?q?chore(ai-review):=20=E8=87=AA=20findings=20?= =?UTF-8?q?=E7=A7=BB=E9=99=A4=E5=B7=B2=E8=A7=A3=E6=B1=BA=E7=9A=84=20Docker?= =?UTF-8?q?file=20=E4=BE=9B=E6=87=89=E9=8F=88=E5=95=8F=E9=A1=8C?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitea/ai-review/findings.json | 8 -------- 1 file changed, 8 deletions(-) diff --git a/.gitea/ai-review/findings.json b/.gitea/ai-review/findings.json index 5499c9a..f7a09dc 100644 --- a/.gitea/ai-review/findings.json +++ b/.gitea/ai-review/findings.json @@ -13,14 +13,6 @@ "problem": "Git 操作存在嚴重安全性與穩定性隱患:命令列傳遞敏感 Token(竊取風險)、使用全域 Git 配置(污染環境/權限衝突)、衝突偵測邏輯缺乏測試且復原不健壯(工作區殘留狀態)。", "suggestion": "改用 Git 憑證輔助工具或環境變數傳遞 Token;使用 --local 設定而非 --global;針對偵測與清理邏輯補寫單元測試,引入時間戳記/UUID 確保分支唯一性,並嚴謹處理資源清理(finally 區塊)。" }, - { - "level": "warning", - "role": "Assassin", - "location": "Dockerfile:11", - "problem": "Dockerfile 中使用全域 `npm install` 存在供應鏈風險。", - "suggestion": "使用 lockfile(如 `package-lock.json`)確保依賴版本一致性,並定期審查更新。", - "is_new": false - }, { "level": "warning", "role": "Maya/Mage/Leo",