b191f8e9fe
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / tests (push) Failing after 2m6s
CD Pipeline / build-and-deploy (push) Has been skipped
CD Pipeline / post-deploy-checks (push) Has been skipped
71 lines
2.6 KiB
JSON
71 lines
2.6 KiB
JSON
{
|
||
"current_direct_bot_api_calls": [],
|
||
"execution_boundaries": {
|
||
"action_buttons_allowed": false,
|
||
"api_sender_refactor_authorized": false,
|
||
"bot_api_call_authorized": false,
|
||
"bot_token_change_authorized": false,
|
||
"chat_route_change_authorized": false,
|
||
"not_authorization": true,
|
||
"partial_token_collection_allowed": false,
|
||
"production_write_authorized": false,
|
||
"raw_payload_storage_allowed": false,
|
||
"runtime_execution_authorized": false,
|
||
"script_modification_authorized": false,
|
||
"secret_hash_collection_allowed": false,
|
||
"secret_value_collection_allowed": false,
|
||
"telegram_send_authorized": false,
|
||
"workflow_modification_authorized": false
|
||
},
|
||
"generated_at": "2026-07-02T19:29:33+08:00",
|
||
"git_commit": "ca95b95bb",
|
||
"guarded_bot_methods": [
|
||
"sendMessage",
|
||
"sendDocument",
|
||
"sendPhoto",
|
||
"sendMediaGroup",
|
||
"editMessageText",
|
||
"sendAnimation",
|
||
"sendVideo",
|
||
"sendAudio",
|
||
"sendVoice"
|
||
],
|
||
"guarded_roots": [
|
||
".gitea/workflows",
|
||
"scripts/ops",
|
||
"scripts/ci",
|
||
"apps/api/src"
|
||
],
|
||
"mode": "repo_source_scan_no_secret_value_no_telegram_send",
|
||
"new_bypass_findings": [],
|
||
"operator_interpretation": [
|
||
"new_bypass_count 維持 0 才代表沒有新增未登記 Telegram Bot API 直送旁路。",
|
||
"committed inventory 目前有 0 個 direct Bot API call site；若數值大於 0 仍是待 controlled migration 的基線，不代表已批准保留。",
|
||
"sendDocument / sendPhoto / sendMediaGroup 等附件型出口若出現在 repo source，會被視為新增旁路並阻擋。",
|
||
"本 guard 只讀 repo source 與 committed snapshot，不送 Telegram、不讀 Bot token、不修改 workflow / script / API sender。"
|
||
],
|
||
"removed_baseline_signatures": [],
|
||
"schema_version": "telegram_notification_egress_no_new_bypass_guard_v1",
|
||
"source_snapshot": "docs/security/telegram-notification-egress-inventory.snapshot.json",
|
||
"status": "pass_no_new_bypass",
|
||
"summary": {
|
||
"action_button_count": 0,
|
||
"baseline_signature_count": 0,
|
||
"current_direct_bot_api_call_count": 0,
|
||
"current_direct_bot_api_file_count": 0,
|
||
"editMessageText_call_count": 0,
|
||
"guarded_method_count": 9,
|
||
"new_bypass_count": 0,
|
||
"new_bypass_file_count": 0,
|
||
"other_guarded_method_call_count": 0,
|
||
"removed_baseline_call_count": 0,
|
||
"runtime_gate_count": 0,
|
||
"sendDocument_call_count": 0,
|
||
"sendMediaGroup_call_count": 0,
|
||
"sendMessage_call_count": 0,
|
||
"sendPhoto_call_count": 0,
|
||
"source_direct_bot_api_call_count": 0,
|
||
"source_direct_bot_api_file_count": 0
|
||
}
|
||
}
|