wangsli
3b221a2202
- 新增 Feature Flag 模型、评估服务与管理 API（erp_sync/invoice_verification）\n- 完成 ERP 与验真灰度收口（路由/服务/作业统一判定）\n- 补齐 pay 与手动 sync 的 department_id 灰度上下文\n- 增加管理后台开关页、PWA 基础设施与移动拍照/审批页面\n- 增加回归脚本、安全基线与压测脚本，更新文档与执行合同\n\nIssue: G0,G1,G2,G3,G4,G5,G6,H1,M1,M2,M3,M4
32 行
992 B
Bash
可执行文件
32 行
992 B
Bash
可执行文件
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$ROOT_DIR"
|
|
|
|
echo "[1/3] Check critical env defaults"
|
|
if [[ "${JWT_SECRET:-}" == "change_me" ]]; then
|
|
echo "[WARN] JWT_SECRET should not be change_me in non-dev environments"
|
|
fi
|
|
|
|
if [[ "${ERP_SYNC_ENABLED:-false}" != "false" ]]; then
|
|
echo "[WARN] ERP_SYNC_ENABLED is not false; ensure feature-flag governance is enabled"
|
|
fi
|
|
|
|
if [[ "${INVOICE_VERIFICATION_ENABLED:-false}" != "false" ]]; then
|
|
echo "[WARN] INVOICE_VERIFICATION_ENABLED is not false; ensure rollout is controlled"
|
|
fi
|
|
|
|
echo "[2/3] Basic static hardening checks"
|
|
node --check src/routes/auth.js
|
|
node --check src/routes/integrations.js
|
|
node --check src/routes/invoicePool/verification.js
|
|
node --check src/services/featureFlags/index.js
|
|
|
|
echo "[3/3] Dependency audit (non-blocking)"
|
|
if command -v npm >/dev/null 2>&1; then
|
|
npm audit --omit=dev --audit-level=high || true
|
|
fi
|
|
|
|
echo "[OK] Security baseline script completed"
|