91 lines
3.1 KiB
Python
91 lines
3.1 KiB
Python
"""
|
||
审计规则模型 - 存储自定义审计规范
|
||
"""
|
||
|
||
import uuid
|
||
from sqlalchemy import Column, String, Text, DateTime, ForeignKey, Boolean, Integer, Float
|
||
from sqlalchemy.sql import func
|
||
from sqlalchemy.orm import relationship
|
||
from app.db.base import Base
|
||
|
||
|
||
class AuditRuleSet(Base):
|
||
"""审计规则集表"""
|
||
__tablename__ = "audit_rule_sets"
|
||
|
||
id = Column(String, primary_key=True, default=lambda: str(uuid.uuid4()))
|
||
name = Column(String(100), nullable=False) # 规则集名称
|
||
description = Column(Text, nullable=True) # 规则集描述
|
||
|
||
# 适用语言: all, python, javascript, java, go, etc.
|
||
language = Column(String(50), default="all")
|
||
|
||
# 规则集类型: security(安全), quality(质量), performance(性能), custom(自定义)
|
||
rule_type = Column(String(50), default="custom")
|
||
|
||
# 严重程度权重配置（JSON格式）
|
||
# {"critical": 10, "high": 5, "medium": 2, "low": 1}
|
||
severity_weights = Column(Text, default='{"critical": 10, "high": 5, "medium": 2, "low": 1}')
|
||
|
||
# 状态标记
|
||
is_default = Column(Boolean, default=False) # 是否默认规则集
|
||
is_system = Column(Boolean, default=False) # 是否系统内置
|
||
is_active = Column(Boolean, default=True) # 是否启用
|
||
|
||
# 排序权重
|
||
sort_order = Column(Integer, default=0)
|
||
|
||
# 创建者
|
||
created_by = Column(String, ForeignKey("users.id"), nullable=True)
|
||
|
||
created_at = Column(DateTime(timezone=True), server_default=func.now())
|
||
updated_at = Column(DateTime(timezone=True), onupdate=func.now())
|
||
|
||
# Relationships
|
||
creator = relationship("User", foreign_keys=[created_by])
|
||
rules = relationship("AuditRule", back_populates="rule_set", cascade="all, delete-orphan")
|
||
|
||
|
||
class AuditRule(Base):
|
||
"""审计规则表"""
|
||
__tablename__ = "audit_rules"
|
||
|
||
id = Column(String, primary_key=True, default=lambda: str(uuid.uuid4()))
|
||
rule_set_id = Column(String, ForeignKey("audit_rule_sets.id"), nullable=False)
|
||
|
||
# 规则标识（唯一标识符，如 SEC001, PERF002）
|
||
rule_code = Column(String(50), nullable=False)
|
||
|
||
# 规则名称
|
||
name = Column(String(200), nullable=False)
|
||
|
||
# 规则描述
|
||
description = Column(Text, nullable=True)
|
||
|
||
# 规则类别: security, bug, performance, style, maintainability
|
||
category = Column(String(50), nullable=False)
|
||
|
||
# 默认严重程度: critical, high, medium, low
|
||
severity = Column(String(20), default="medium")
|
||
|
||
# 自定义检测提示词（可选，用于增强LLM检测）
|
||
custom_prompt = Column(Text, nullable=True)
|
||
|
||
# 修复建议模板
|
||
fix_suggestion = Column(Text, nullable=True)
|
||
|
||
# 参考链接（如CWE、OWASP链接）
|
||
reference_url = Column(String(500), nullable=True)
|
||
|
||
# 是否启用
|
||
enabled = Column(Boolean, default=True)
|
||
|
||
# 排序权重
|
||
sort_order = Column(Integer, default=0)
|
||
|
||
created_at = Column(DateTime(timezone=True), server_default=func.now())
|
||
updated_at = Column(DateTime(timezone=True), onupdate=func.now())
|
||
|
||
# Relationships
|
||
rule_set = relationship("AuditRuleSet", back_populates="rules")
|