Repository navigation

fix: 安全审计第一批——两个免鉴权口子、读面上界、文档改成实况 - #462

Merged

modusensus merged 9 commits into

mainfrom

fix/security-audit-p0

Oct 17, 2026

Merged

fix: 安全审计第一批——两个免鉴权口子、读面上界、文档改成实况#462
modusensus merged 9 commits into
mainfrom
fix/security-audit-p0

Commits on Oct 17, 2026
- fix(api): 关掉两个免鉴权口子，并给读面加硬上界
   modusensus
  committed
  f41b75f
- fix(cli): 枚举对齐 store.TYPES，补 hybrid 模式
   modusensus
  committed
  75e49f5
- docs: 把安全模型与配置键表改成实况
   modusensus
  committed
  64ba60d
- ci(security): osv 改为拦、发布加 provenance
  modusensus
  committed
  3c92a35
- docs(contributing): 明文禁止任何 Co-Authored-By
  modusensus
  committed
  b4a7f52
- Merge branch 'main' into fix/security-audit-p0
  modusensus
  authored
  01a3365
- fix(api): 超限请求体回 413，而不是把画像/规则清空
   modusensus
  committed
  7b1a772
- fix(api): 超限状态活过 error 分支；工作流权限按 job 断言
   modusensus
  committed
  88c0838
- test: jobs 顶层键兼容带引号的 YAML 写法
   modusensus
  committed
  f32ed48