docs(security): 建立高價值配置控管清冊 [skip ci]

2026-06-11 11:28:36 +08:00
parent e427af3cb2
commit 6efd186750
17 changed files with 295 additions and 54 deletions
--- a/apps/api/src/services/ssh_command_whitelist.py
+++ b/apps/api/src/services/ssh_command_whitelist.py
@@ -97,7 +97,7 @@ def extract_inner_command(ssh_cmd: str) -> str:

    範例：
        "ssh 192.168.1.1 'uptime'" → "uptime"
-        "ssh -o StrictHostKeyChecking=no host 'free -m'" → "free -m"
+        "ssh -o StrictHostKeyChecking=accept-new host 'free -m'" → "free -m"

    Args:
        ssh_cmd: 完整 SSH 指令字串