7c0d95385f
refactor: update SVG circle radius and improve code readability in ReportExportDialog
Build and Push CodeReview / build (push) Waiting to run
Details
2026-01-12 15:08:33 +08:00
3ce3767938
Change the log time to China
Build and Push CodeReview / build (push) Waiting to run
Details
2026-01-09 13:23:49 +08:00
5166027e2f
Modify the CI integration address guide
Build and Push CodeReview / build (push) Waiting to run
Details
2026-01-08 16:17:48 +08:00
e537010dfd
feat: remove agent audit page and set dashboard as root path
Build and Push CodeReview / build (push) Waiting to run
Details
2026-01-08 15:12:38 +08:00
0e2a7dfa87
Modify the Agent audit logic to prevent infinite loops until the loop limit is triggered.
Build and Push CodeReview / build (push) Waiting to run
Details
2026-01-08 14:53:34 +08:00
4e7a4c5d9c
feat: Integrate Gitea as the default repository type with corresponding UI updates and icon.
2026-01-06 16:27:54 +08:00
fcb40db556
feat: Add Gitea as a default repository type, refine ChromaDB metadata updates, and enhance indexer logging and file deletion logic.
2026-01-06 16:21:21 +08:00
0656062a4f
feat: Add Rust, Swift, Kotlin, and SQL patterns to the RAG splitter and enhance frontend access token retrieval by checking sessionStorage.
2026-01-06 15:32:17 +08:00
2b0c7f5c2a
feat: Lock LLM and embedding configurations to system environment variables, mask API keys, and refactor frontend logout.
2026-01-05 14:45:00 +08:00
0176cb4d12
chore: Remove explicit version numbers from UI and comments, and apply minor formatting to Docker Compose configurations.
2026-01-05 13:50:23 +08:00
4d3761e0e0
feat: Add Gitea username integration, refactor password hashing with direct bcrypt, and remove frontend version displays.
2026-01-05 13:47:48 +08:00
72478bd047
Remove GitHub link from sidebar and set CI project card titles to normal case.
2026-01-05 09:57:47 +08:00
7a3bb08d48
feat: Introduce reusable AppLogo component and update project activity timestamp to UTC.
2026-01-05 09:50:51 +08:00
b401a26b10
feat: Add CI/CD integration with Gitea webhooks and pull request review functionality.
2025-12-31 16:40:33 +08:00
8644f6f113
refactor(ssh): 将SSH密钥管理功能从账户页面移至系统配置页面
...
重构SSH密钥管理相关代码，将其从Account组件移动到SystemConfig组件
移除Account组件中不再使用的SSH相关代码和状态
保持原有功能不变，仅改变功能位置以更好组织代码结构
2025-12-26 20:51:00 +08:00
869513e0c5
Merge branch 'v3.0.0' of github.com:lintsinghua/DeepAudit into feature/git_ssh
...
# Conflicts:
# backend/app/api/v1/endpoints/agent_tasks.py
2025-12-26 09:39:25 +08:00
f1243245a8
✨ feat(SSH)：添加known_hosts持久化与清理功能
...
- 新增SSH配置目录设置，支持持久化存储known_hosts文件
- 实现known_hosts文件清理API端点，解决主机密钥变更导致的连接问题
- 优化SSH连接策略，使用StrictHostKeyChecking=accept-new自动接受新主机密钥
- 前端添加known_hosts清理按钮，提升SSH密钥管理体验
- 改进SSH测试逻辑，正确处理部署密钥的Anonymous响应
2025-12-26 09:33:55 +08:00
597d19dbfe
🐛 fix(git)：将SSH主机密钥检查从no改为yes以增强安全性
...
✨ feat(git)：改进SSH URL检测和分支克隆逻辑
📝 docs(frontend)：更新SSH公钥添加说明，移除CodeUp链接
2025-12-25 16:17:42 +08:00
9399c01d8c
Merge branch 'v3.0.0' of github.com:lintsinghua/DeepAudit into feature/git_ssh
...
# Conflicts:
# backend/app/services/scanner.py
# backend/uv.lock
# frontend/src/pages/Projects.tsx
2025-12-25 14:41:09 +08:00
84fa2b5266
refactor(frontend): 采用中心化常量动态渲染仓库平台选项
2025-12-25 14:11:30 +08:00
2f28e7e6eb
fix: 修复项目详情页中Gitea类型仍然显示为'其他'的问题
2025-12-25 13:42:51 +08:00
e4f1391a28
merge: 同步上游 v3.0.0 并更新 uv 依赖锁文件
2025-12-25 11:45:52 +08:00
a79b27a6d2
✨ feat(ssh)：新增SSH密钥认证支持，支持通过SSH方式访问Git仓库
...
新增SSH密钥管理功能，包括生成、查看、测试和删除SSH密钥对。在agent_tasks.py中集成SSH私钥解密和SSH克隆逻辑，支持git@格式的SSH URL。在projects.py中为SSH URL添加文件获取支持。新增ssh_keys.py端点提供完整的SSH密钥API管理。前端Account页面新增SSH密钥管理界面，Projects页面支持选择SSH Key认证类型。新增git_ssh_service.py提供SSH密钥生成、验证和Git SSH操作功能。
2025-12-24 16:08:56 +08:00
c0ac7d0544
feat(报告): 添加任务报告导出功能并优化样式
...
- 在 AuditTasks 页面添加快速扫描和 Agent 任务的报告导出功能
- 在 ReportExportDialog 中优化颜色样式以支持亮色/暗色模式
- 修复报告生成器中字段为空时的处理逻辑
2025-12-18 23:58:56 +08:00
87c501b55c
refactor(frontend): 简化审计页面UI样式，移除多余动画效果
...
- 清理代理树节点和日志条目的冗余样式和动画
- 统一颜色和间距设计，优化暗黑模式支持
- 移除背景特效和多余装饰元素，提升性能
2025-12-18 23:11:43 +08:00
cb1cdb77b8
feat(ui): 为暗黑模式添加亮度调整并优化颜色对比度
...
添加暗黑模式下的亮度调整，优化颜色对比度以提高可读性
更新多个组件的颜色变量以支持亮色和暗色主题
添加可折叠的扫描配置区域以改善用户体验
2025-12-18 22:55:05 +08:00
3a9dcdbc7a
feat(前端): 增强UI组件视觉效果和交互体验
...
refactor(认证): 支持记住我功能并优化token存储逻辑
style(字体): 更新字体配置增加CJK回退支持
perf(全局样式): 添加新动画效果和视觉增强样式
fix(AlertDialog): 修复portal容器定位问题
2025-12-18 20:47:11 +08:00
8ee98a20eb
style(ui): 统一组件样式，优化视觉设计和交互体验
...
- 更新颜色系统，使用新的主题变量
- 调整圆角、边框、阴影等视觉样式
- 优化字体大小、间距和排版细节
- 改进表单组件的交互状态
- 增强暗色模式下的显示效果
2025-12-18 19:57:43 +08:00
1c0ec2b13d
feat: enhance Gitea support and merge upstream v3.0.0
...
- Merge upstream v3.0.0 changes
- Fix security vulnerabilities (SSRF, Path Traversal) by introducing `parse_repository_url` utility
- Fix token leakage and handling in `scanner.py` and `projects.py`
- Fix `NameError` in `scanner.py`
- Fix `frontend/docker-entrypoint.sh` API URL escaping
- Standardize Gitea token naming to `gitea_token`
2025-12-17 03:02:42 +00:00
6c080fc5d6
feat(agent): 增加漏洞文件统计功能并优化agent提示词
...
- 在AgentTask模型中添加files_with_findings字段统计有漏洞发现的文件数
- 更新前后端接口和界面展示漏洞文件统计
- 优化各Agent的系统提示词，移除冗余内容并增强工具使用约束
- 增加LLM的max_tokens至8192避免截断
- 添加生产环境docker-compose配置和更新README部署说明
2025-12-16 22:08:45 +08:00
630b8b1a60
更新README.md，gitea仓库支持获取分支
2025-12-16 18:55:07 +08:00
0fb10f6f76
feat: add Gitea repository support
2025-12-16 18:55:07 +08:00
2bba972272
feat(AgentAudit): 添加进度日志功能支持
...
添加 progress 日志类型，支持通过 progressKey 更新或添加进度日志
在日志组件中增加进度日志的样式和显示
处理进度消息的匹配和更新逻辑，避免重复添加日志
2025-12-16 18:04:09 +08:00
e2109647bf
feat(agent): 增强任务执行流程和实时日志反馈
...
- 在任务执行流程中添加实时事件反馈，包括克隆进度和索引进度
- 实现 RAG v2.0 智能索引功能，支持模型变更检测和增量更新
- 改进文件工具兼容性，支持 path 参数作为 directory 别名
- 扩展前端事件处理逻辑，支持更多事件类型显示
- 修复 tree-sitter 版本兼容性问题
2025-12-16 16:56:09 +08:00
e531c8808d
refactor: standardize dialog component styling and layout for improved consistency and responsiveness.
2025-12-15 16:13:47 +08:00
ba00b718e4
feat: Update deployment configurations, dependency management, and documentation, including a new sandbox build service.
2025-12-15 15:18:55 +08:00
3639b3a13e
fix(agent): 修复工具执行结果处理中的 None 值问题
...
修复 AgentTool 和外部工具类中结果处理逻辑，确保 data 字段不为 None
添加调试日志和错误处理，改进工具执行失败时的反馈信息
统一所有工具类的错误处理格式，避免前端显示 "None" 字符串
2025-12-15 10:24:58 +08:00
cdf360dcf7
feat: 增加文件上传大小限制至500MB并优化大文件处理
...
增加ZIP文件上传大小限制从100MB到500MB
在agent工具中添加失败调用追踪和自动跳过机制
优化大文件读取性能，支持流式处理指定行范围
2025-12-15 09:21:37 +08:00
2df1b39e08
feat: Introduce Kunlun agent tool, add Docker and sandbox environment checks, and update agent services and frontend dialogs.
2025-12-15 02:00:34 +08:00
fc3dce7510
feat: Redesign task tabs in AuditTasks with a card-style layout and add `!important` to input padding.
2025-12-14 21:09:29 +08:00
c64eddac7c
feat(agent): 新增多语言代码测试和漏洞验证工具并增强错误处理
...
新增 PHP、Python、JavaScript 等多语言代码测试工具和命令注入、SQL 注入等专用漏洞验证工具
优化错误处理逻辑，提供更详细的错误信息和堆栈跟踪
增强 JSON 解析器，优先使用 json-repair 库处理复杂格式
改进 Agent 响应解析逻辑，更健壮地提取思考内容和操作指令
完善沙箱管理器的初始化和错误处理机制
2025-12-14 17:20:54 +08:00
3d4f90c547
feat: Add `marked` for improved Markdown to HTML report generation and refined download handling.
2025-12-13 21:38:11 +08:00
a9a22b91c7
fix: Display aggregated findings for the orchestrator and task, and show sub-agent duration/status in UI.
2025-12-13 21:06:22 +08:00
2a332d6eda
feat: Improve report generation and statistics by normalizing severity comparisons and leveraging backend-calculated task metrics.
2025-12-13 20:42:10 +08:00
d449e2ba78
Fix: Improve agent stream stability by preventing unnecessary reconnections and correctly draining buffered events.
2025-12-13 20:21:30 +08:00
4e4dd05ddb
feat(agent): 增强漏洞发现处理流程和前端兼容性
...
- 后端添加对旧事件类型'finding'的兼容支持
- 改进漏洞发现标准化和去重逻辑
- 新增PoC生成要求和相关字段
- 优化沙箱配置初始化流程
- 前端添加ADD_FINDING操作和状态管理
- 增强事件流处理和序列号过滤
- 改进历史事件加载和SSE连接逻辑
- 添加漏洞验证状态和PoC信息到报告
2025-12-13 18:45:05 +08:00
6d98f29fa6
feat: 新增安全工具集成和漏洞知识库扩展
...
- 添加 Bandit 和 Safety 安全工具到依赖项
- 新增 CSRF、业务逻辑和开放重定向漏洞知识文档
- 实现安全工具一键安装脚本和文档
- 改进模式匹配工具支持直接文件扫描
- 增强遥测模块和 Agent 审计功能
- 修复验证节点中 findings 合并逻辑
- 优化前端 Agent 审计界面和状态展示
2025-12-13 12:35:03 +08:00
e13218a33e
style: improve code formatting and consistency in AgentAudit.tsx
2025-12-12 16:21:35 +08:00
eed111c04d
chore: reduce logging verbosity and clean up file formatting
...
- Change logger.info to logger.debug in agent_tasks.py streaming and tree endpoints
- Disable SQLAlchemy echo mode in database session configuration
- Suppress uvicorn access logs and LiteLLM INFO level logging in main application
- Remove LogViewer component and LogsPage from frontend
- Add trailing newlines to multiple backend configuration and model files
- Update frontend routing to remove logs page reference
- Improve application startup logging clarity by filtering verbose third-party logs
2025-12-12 15:50:48 +08:00
f05c0073e1
feat(agent): implement comprehensive agent architecture with knowledge base and persistence layer
...
- Add database migrations for agent checkpoints and tree node tracking
- Implement core agent execution framework with executor, state management, and message handling
- Create knowledge base system with framework-specific modules (Django, FastAPI, Flask, Express, React, Supabase)
- Add vulnerability knowledge modules covering authentication, cryptography, injection, XSS, XXE, SSRF, path traversal, deserialization, and race conditions
- Introduce new agent tools: thinking tool, reporting tool, and agent-specific utilities
- Implement LLM memory compression and prompt caching for improved performance
- Add agent registry and persistence layer for checkpoint management
- Refactor agent implementations (analysis, recon, verification, orchestrator) with enhanced capabilities
- Remove legacy agent implementations (analysis_v2, react_agent)
- Update API endpoints for agent task creation and project management
- Add frontend components for agent task creation and enhanced audit UI
- Consolidate agent service architecture with improved separation of concerns
- This refactoring provides a scalable foundation for multi-agent collaboration with knowledge-driven decision making and state persistence
2025-12-12 15:27:12 +08:00
vinland100
lintsinghua
Image
google-labs-jules[bot]