← 返回扫描报告总表 · ← dshlib 图书馆

扫描报告 · YaoApp/yao

自研扫描：⚠️ 待审 · GuardDog 复核：未扫描 · OSV 依赖：未扫描

1. 自研扫描（dshlib-scan）

verified

True

findings

{'dangerous_commands': [{'file': 'yao-main/Makefile', 'line': 503, 'match': 'rm -rf $(HOME)/data/gou-unit/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 504, 'match': 'rm -rf $(HOME)/data/gou-unit/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 516, 'match': 'rm -rf ./tests/plugins/user/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 517, 'match': 'rm -rf ./tests/plugins/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 530, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 531, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 536, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 537, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 538, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 539, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 550, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 551, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 582, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 594, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 654, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 707, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 736, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 773, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 774, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 775, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 776, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 790, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 957, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 958, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 959, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 960, 'match': 'rm -rf .tmp/yao-init/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 967, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 978, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/Makefile', 'line': 979, 'match': 'rm -rf .tmp/', 'label': 'rm -rf 危险删除'}, {'file': 'yao-main/agent/output/safe_writer.go', 'line': 44, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/TODO.md', 'line': 227, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/TODO.md', 'line': 238, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/api/README.md', 'line': 30, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/events/integrations/dingtalk/dingtalk.go', 'line': 102, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/events/integrations/discord/discord.go', 'line': 109, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/events/integrations/dispatcher.go', 'line': 91, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/events/integrations/feishu/feishu.go', 'line': 102, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/events/integrations/telegram/telegram.go', 'line': 103, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/robot/pool/pool.go', 'line': 49, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/claude/runner.go', 'line': 209, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/claude/session.go', 'line': 155, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/claude/session.go', 'line': 165, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/runner.go', 'line': 161, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session.go', 'line': 152, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session.go', 'line': 154, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session.go', 'line': 209, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session.go', 'line': 222, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 94, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 101, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 114, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 120, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 124, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 124, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/dsh/session_unit_test.go', 'line': 129, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/opencode/runner.go', 'line': 234, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/opencode/session.go', 'line': 195, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/sandbox/v2/opencode/session.go', 'line': 203, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/agent/store/types/fields_test.go', 'line': 71, 'match': 'DROP TABLE', 'label': '数据库破坏'}, {'file': 'yao-main/agent/task/daemon.go', 'line': 62, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 182, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 222, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 278, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 292, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 321, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/cmd/sui/watch.go', 'line': 378, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/event/README.md', 'line': 40, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/event/bus_test.go', 'line': 19, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/event/bus_test.go', 'line': 40, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/event/service.go', 'line': 146, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/IMPL.md', 'line': 74, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/pb/yao.pb.go', 'line': 1187, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/pb/yao.proto', 'line': 164, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/sandbox/heartbeat.go', 'line': 29, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/sandbox/heartbeat_test.go', 'line': 54, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/sandbox/heartbeat_test.go', 'line': 66, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/grpc/sandbox/heartbeat_test.go', 'line': 67, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/messenger/messenger_receiver_test.go', 'line': 212, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/agent/robot/TODO.md', 'line': 229, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/agent/robot/TODO.md', 'line': 1180, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/tests/testutils/testutils.go', 'line': 224, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/tests/testutils/testutils.go', 'line': 244, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/tests/testutils/testutils.go', 'line': 246, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/openapi/tests/testutils/testutils.go', 'line': 252, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/sandbox/v2/DESIGN.md', 'line': 507, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/sandbox/v2/IMPL.md', 'line': 74, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/service/service.go', 'line': 24, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/service/service.go', 'line': 35, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/tai/heartbeat.go', 'line': 40, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/tai/heartbeat.go', 'line': 41, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/BUGFIX.md', 'line': 76, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/BUGFIX.md', 'line': 94, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/BUGFIX.md', 'line': 102, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/KNOWN_ISSUES.md', 'line': 17, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/KNOWN_ISSUES.md', 'line': 53, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/KNOWN_ISSUES.md', 'line': 95, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/KNOWN_ISSUES.md', 'line': 97, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/trace_lifecycle_test.go', 'line': 314, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/trace_subscription_leak_test.go', 'line': 102, 'match': 'shutdown', 'label': '系统关机'}, {'file': 'yao-main/trace/trace_subscription_leak_test.go', 'line': 132, 'match': 'shutdown', 'label': '系统关机'}], 'excessive_permissions': [{'file': 'yao-main/agent/sandbox/v2/prepare.go', 'line': 186, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/pipe/context.go', 'line': 89, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/pipe/context.go', 'line': 112, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/pipe/context.go', 'line': 116, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/pipe/context.go', 'line': 179, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/tai/runtime/docker.go', 'line': 51, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/tai/runtime/docker_core.go', 'line': 106, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/tai/runtime/local.go', 'line': 54, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/tai/runtime/runtime_test.go', 'line': 1413, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/tools/secret/SKILL.md', 'line': 32, 'match': 'execSync(', 'label': '命令执行'}, {'file': 'yao-main/unit-test/agent/README.md', 'line': 27, 'match': 'exec (', 'label': '命令执行'}, {'file': 'yao-main/unit-test/agent/testprepare/sandboxtest/sandboxtest.go', 'line': 122, 'match': 'exec (', 'label': '命令执行'}, {'file': 'yao-main/widget/instance.go', 'line': 17, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widget/instance.go', 'line': 32, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widget/instance.go', 'line': 46, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widget/instance.go', 'line': 51, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/chart/handler.go', 'line': 43, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/chart/handler.go', 'line': 74, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/dashboard/handler.go', 'line': 43, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/dashboard/handler.go', 'line': 76, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/form/handler.go', 'line': 43, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/form/handler.go', 'line': 82, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/list/handler.go', 'line': 43, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/list/handler.go', 'line': 82, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/table/handler.go', 'line': 50, 'match': 'exec(', 'label': '命令执行'}, {'file': 'yao-main/widgets/table/handler.go', 'line': 89, 'match': 'exec(', 'label': '命令执行'}], 'data_exfiltration': [{'file': 'yao-main/agent/store/CHAT_STORAGE_DESIGN.md', 'line': 45, 'match': 'tokens) | `openapi/request` | `openapi_request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/agent/store/CHAT_STORAGE_DESIGN.md', 'line': 534, 'match': 'tokens, duration) is handled by [OpenAPI Request Middleware](../../openapi/reque', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/agent/store/CHAT_STORAGE_DESIGN.md', 'line': 551, 'match': 'token usage in openapi_request (via request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/agent/store/CHAT_STORAGE_DESIGN.md', 'line': 634, 'match': 'token usage in OpenAPI request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/integrations/dingtalk/bot.go', 'line': 87, 'match': 'credentials by fetch', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/integrations/dingtalk/e2e_test.go', 'line': 9, 'match': 'credentials by request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/integrations/discord/e2e_test.go', 'line': 7, 'match': 'token by fetch', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/kb/providers/README.md', 'line': 168, 'match': 'tokens`     | `int`/`float64` | `4000`  | Maximum tokens per request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/README.md', 'line': 180, 'match': 'token in API request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/README.md', 'line': 189, 'match': 'credentials flow to obtain an access token, then include it in subsequent API re', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/docs/oauth.md', 'line': 8, 'match': 'token`      | POST        | Token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/docs/oauth.md', 'line': 99, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth.go', 'line': 124, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth.go', 'line': 230, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth.go', 'line': 246, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth.go', 'line': 304, 'match': 'token exchange request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth.go', 'line': 536, 'match': 'credentials grant from HTTP DCR request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/ERRORS.md', 'line': 37, 'match': 'token_missing`         | `ErrTokenMissing`        | 401         | No access toke', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/ERRORS.md', 'line': 41, 'match': 'token_missing` | `ErrRefreshTokenMissing` | 401         | No refresh token provi', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/ERRORS.md', 'line': 202, 'match': 'token provided in the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/client.go', 'line': 50, 'match': 'secret (use the client ID from the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/guard.go', 'line': 113, 'match': 'token from the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/guard.go', 'line': 264, 'match': 'token from the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/guard.go', 'line': 282, 'match': 'token from the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/types/errors.go', 'line': 19, 'match': 'token_missing", ErrorDescription: "No access token provided in the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/types/errors.go', 'line': 21, 'match': 'token_missing", ErrorDescription: "No refresh token provided in the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/oauth/types/interfaces.go', 'line': 368, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/otp/README.md', 'line': 89, 'match': 'token, not the request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/request/REQUEST_DESIGN.md', 'line': 75, 'match': 'token usage via request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/request/REQUEST_DESIGN.md', 'line': 924, 'match': 'token usage for a request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/request/REQUEST_DESIGN.md', 'line': 1170, 'match': 'tokens via gin context**: `request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/response/response.go', 'line': 119, 'match': 'credentials) or refresh token is invalid, expired, revoked, does not match the r', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 37, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 45, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 83, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 90, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 111, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 118, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 150, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 155, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 197, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 201, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 262, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 268, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 314, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 319, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 335, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 340, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 370, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 374, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 395, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/oauth/token_test.go', 'line': 399, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/testutils/testutils.go', 'line': 859, 'match': 'tokenInfo.AccessToken to make authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/invitation_test.go', 'line': 1060, 'match': 'token in request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/member_test.go', 'line': 36, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/member_test.go', 'line': 440, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/member_test.go', 'line': 562, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/member_test.go', 'line': 739, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/member_test.go', 'line': 1423, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 33, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 151, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 329, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 480, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 672, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 784, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 882, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/tests/user/team_test.go', 'line': 964, 'match': 'token for authenticated request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/README.md', 'line': 28, 'match': 'password/reset/request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/provider.go', 'line': 1093, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/provider.go', 'line': 1110, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/provider.go', 'line': 1113, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/team_invitation.go', 'line': 859, 'match': 'token string, teamConfig *TeamConfig, request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/team_invitation.go', 'line': 1539, 'match': 'token, teamConfig, request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/openapi/user/user.go', 'line': 266, 'match': 'password/reset/request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/tools/ocr/handler_baidu.go', 'line': 294, 'match': 'token request', 'label': '凭据字段进入网络请求'}, {'file': 'yao-main/tools/ocr/handler_baidu.go', 'line': 301, 'match': 'token request', 'label': '凭据字段进入网络请求'}], 'hardcoded_secrets': [{'file': 'yao-main/integrations/telegram/webhook_e2e_test.go', 'line': 33, 'match': 'secret = "e2e-webhook-test-secret"', 'label': '明文凭据'}, {'file': 'yao-main/openapi/README.md', 'line': 318, 'match': 'api_key = "your-oauth-token"', 'label': '明文凭据'}, {'file': 'yao-main/openapi/README.md', 'line': 632, 'match': 'api_key = "your-oauth-token"', 'label': '明文凭据'}, {'file': 'yao-main/openapi/oauth/security_test.go', 'line': 669, 'match': 'token:")\n\t\tassert.Contains(t, service.refreshTokenKey(token), "', 'label': '明文凭据'}, {'file': 'yao-main/openapi/oauth/security_test.go', 'line': 670, 'match': 'token:")\n\t\tassert.Contains(t, service.authorizationCodeKey(token), "', 'label': '明文凭据'}, {'file': 'yao-main/openapi/user/entry.go', 'line': 161, 'match': 'token: " + err.Error(),\n\t\t}\n\t\tresponse.RespondWithError(c, response.StatusIntern', 'label': '明文凭据'}, {'file': 'yao-main/utils/README.md', 'line': 562, 'match': 'token: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."', 'label': '明文凭据'}]}

mode

git-refresh

branch

main

2. 第三方复核（GuardDog 3.2.0）

未复核。

3. 依赖漏洞（OSV.dev）

未查询。