8d1eef2f7f
1. 排除商城直购(source_type=1)：GMV和成本过滤条件从IN(1,2,3,4)改为IN(2,3,4) 2. 排除次卡免费使用订单(actual_amount=0)：避免购买次卡和使用次卡双重计入GMV - source_type=4 一番赏使用次卡：1578单 44032元重复 - source_type=3 对对碰使用次卡：422单 7042元重复 - 合计去除51074元虚增GMV（29.1%） 3. 成本过滤条件同步修正：source_type IN(2,3,4)，total_amount>0 修正后：GMV从175600降至124527元，毛利率从37.4%回到真实的11.8%
34 lines
779 B
Bash
34 lines
779 B
Bash
#!/bin/bash
|
|
# Security Audit - Full Scan Script
|
|
# Run comprehensive security scan pipeline
|
|
|
|
set -e
|
|
|
|
echo "Running full security scan..."
|
|
|
|
# Input validation
|
|
echo "Checking input validation..."
|
|
npx @claude-flow/cli security scan --check input-validation
|
|
|
|
# Path traversal
|
|
echo "Checking path traversal..."
|
|
npx @claude-flow/cli security scan --check path-traversal
|
|
|
|
# SQL injection
|
|
echo "Checking SQL injection..."
|
|
npx @claude-flow/cli security scan --check sql-injection
|
|
|
|
# XSS
|
|
echo "Checking XSS..."
|
|
npx @claude-flow/cli security scan --check xss
|
|
|
|
# Secrets
|
|
echo "Checking for hardcoded secrets..."
|
|
npx @claude-flow/cli security validate --check secrets
|
|
|
|
# CVE scan
|
|
echo "Scanning dependencies for CVEs..."
|
|
npx @claude-flow/cli security cve --scan
|
|
|
|
echo "Security scan complete"
|