taijibaga/heicode-mananger
9
0
Fork 0
Code Issues 12 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

权限与密钥安全需要完成最终检查，确认无明文泄露和越权风险 #61

New Issue
Open
opened 2026-05-26 09:30:38 +00:00 by chenchen · 0 comments
chenchen commented 2026-05-26 09:30:38 +00:00
Owner
Copy Link
Copy Source

任务背景

项目风险里明确关注 Azure Key Vault、云资源权限配置和密钥泄露风险。

验收标准

  • 长期密钥只进入 Azure Key Vault，Manager 数据库只保存 secret_ref
  • 日志、页面、审计、Markdown 不展示明文密钥
  • 权限清单和资源授权边界清晰，撤销后可审计

来源

  • Gitea Projects / chenchen：Heicode Manager 负责人计划
<!-- heicode-manager-plan-id: future-0529-0530-03 --> ## 任务背景 项目风险里明确关注 Azure Key Vault、云资源权限配置和密钥泄露风险。 ## 验收标准 - 长期密钥只进入 Azure Key Vault，Manager 数据库只保存 secret_ref - 日志、页面、审计、Markdown 不展示明文密钥 - 权限清单和资源授权边界清晰，撤销后可审计 ## 来源 - Gitea Projects / chenchen：Heicode Manager 负责人计划
chenchen added this to the 2026-05-29 至 2026-05-30：全面测试、验收与上线风险确认 milestone 2026-05-26 09:30:38 +00:00
chenchen self-assigned this 2026-05-26 09:30:38 +00:00
chenchen started working 2026-05-27 03:35:56 +00:00
xiongwei added this to the chenchen project 2026-05-27 03:37:01 +00:00
chenchen worked for 13 minutes 2026-05-27 03:49:46 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No labels
Milestone
No items
No Milestone 2026-05-29 至 2026-05-30：全面测试、验收与上线风险确认
Projects
Clear projects
No projects
chenchen
Uncategorized
Assignees
Clear assignees
chenchen lizhengwei openclaw qinhao xiaohei xiongwei zhanggangyong zhanghaoqiang zhaosonghao
No Assignees chenchen
1 Participants
Notifications
Total Time Spent: 13 minutes
chenchen
13 minutes
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: taijibaga/heicode-mananger#61