-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathsecurity-review-light.html
More file actions
126 lines (126 loc) · 10.5 KB
/
Copy pathsecurity-review-light.html
File metadata and controls
126 lines (126 loc) · 10.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>TRAE Security Review 执行决策流程图</title>
<style>
* { margin: 0; padding: 0; box-sizing: border-box; }
body {
font-family: system-ui, -apple-system, sans-serif;
background: #ffffff;
color: #2C2C2A;
display: flex;
flex-direction: column;
align-items: center;
padding: 24px 20px;
}
h1 { font-size: 20px; font-weight: 500; margin-bottom: 8px; color: #2C2C2A; }
.subtitle { font-size: 13px; color: #888780; margin-bottom: 16px; }
svg { max-width: 760px; width: 100%; height: auto; }
</style>
</head>
<body>
<h1>TRAE Security Review · AI 执行决策流程图</h1>
<p class="subtitle">代码安全扫描 · 漏洞风险 · 最佳实践</p>
<svg viewBox="-60.0 0 550.0 1376.0" width="100%" role="img">
<title>TRAE Security Review 执行决策流程图</title>
<rect x="-60.0" y="0" width="550.0" height="1376.0" fill="#ffffff"/>
<defs>
<marker id="arrow" viewBox="0 0 10 10" refX="8" refY="5" markerWidth="6" markerHeight="6" orient="auto-start-reverse">
<path d="M2 1L8 5L2 9" fill="none" stroke="#888780" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
</marker>
</defs>
<style>
.t { font-family: system-ui, sans-serif; font-size: 14px; fill: #2C2C2A; }
.ts { font-family: system-ui, sans-serif; font-size: 12px; fill: #888780; }
.th { font-family: system-ui, sans-serif; font-size: 14px; font-weight: 500; fill: #2C2C2A; }
.ths { font-family: system-ui, sans-serif; font-size: 12px; font-weight: 500; fill: #2C2C2A; }
.edge { fill: none; stroke: #888780; stroke-width: 1.2; }
.edge-dash { fill: none; stroke: #B4B2A9; stroke-width: 0.8; stroke-dasharray: 4 3; }
</style>
<line class="edge" x1="340.0" y1="76.0" x2="340.0" y2="108.0" marker-end="url(#arrow)"/>
<line class="edge" x1="265.0" y1="138.0" x2="200.0" y2="138.0" marker-end="url(#arrow)"/>
<text class="ts" x="232.5" y="130.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">否</text>
<line class="edge" x1="340.0" y1="280.0" x2="340.0" y2="312.0" marker-end="url(#arrow)"/>
<line class="edge" x1="265.0" y1="342.0" x2="200.0" y2="342.0" marker-end="url(#arrow)"/>
<text class="ts" x="232.5" y="334.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">失败</text>
<line class="edge" x1="340.0" y1="484.0" x2="340.0" y2="516.0" marker-end="url(#arrow)"/>
<line class="edge" x1="340.0" y1="560.0" x2="340.0" y2="592.0" marker-end="url(#arrow)"/>
<line class="edge" x1="340.0" y1="648.0" x2="340.0" y2="680.0" marker-end="url(#arrow)"/>
<line class="edge" x1="265.0" y1="710.0" x2="150.0" y2="710.0" marker-end="url(#arrow)"/>
<text class="ts" x="207.5" y="702.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">否</text>
<line class="edge" x1="340.0" y1="740.0" x2="340.0" y2="796.0" marker-end="url(#arrow)"/>
<text class="ts" x="340.0" y="762.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">是</text>
<line class="edge" x1="340.0" y1="840.0" x2="340.0" y2="872.0" marker-end="url(#arrow)"/>
<line class="edge" x1="265.0" y1="902.0" x2="150.0" y2="902.0" marker-end="url(#arrow)"/>
<text class="ts" x="207.5" y="894.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">否</text>
<line class="edge" x1="340.0" y1="932.0" x2="340.0" y2="988.0" marker-end="url(#arrow)"/>
<text class="ts" x="340.0" y="954.0" text-anchor="middle" paint-order="stroke" stroke="#ffffff" stroke-width="3">是</text>
<line class="edge" x1="340.0" y1="1044.0" x2="340.0" y2="1076.0" marker-end="url(#arrow)"/>
<line class="edge" x1="340.0" y1="1132.0" x2="340.0" y2="1164.0" marker-end="url(#arrow)"/>
<line class="edge" x1="340.0" y1="168.0" x2="340.0" y2="204.0"/>
<line class="edge" x1="90.0" y1="166.0" x2="90.0" y2="204.0"/>
<line class="edge" x1="90.0" y1="204.0" x2="340.0" y2="204.0"/>
<line class="edge" x1="340.0" y1="204.0" x2="340.0" y2="224.0" marker-end="url(#arrow)"/>
<line class="edge" x1="340.0" y1="372.0" x2="340.0" y2="408.0"/>
<line class="edge" x1="90.0" y1="370.0" x2="90.0" y2="408.0"/>
<line class="edge" x1="90.0" y1="408.0" x2="340.0" y2="408.0"/>
<line class="edge" x1="340.0" y1="408.0" x2="340.0" y2="428.0" marker-end="url(#arrow)"/>
<rect x="230.0" y="32.0" width="220" height="44" rx="10" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="54.0" text-anchor="middle" dominant-baseline="central">安全审查启动</text>
<polygon points="340.0,108.0 415.0,138.0 340.0,168.0 265.0,138.0" fill="#FAEEDA" stroke="#854F0B" stroke-width="0.5"/>
<text class="ths" x="340.0" y="138.0" text-anchor="middle" dominant-baseline="central">范围已指定?</text>
<rect x="-20.0" y="110.0" width="220" height="56" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="90.0" y="131.0" text-anchor="middle" dominant-baseline="central">询问审查范围</text>
<text class="ts" x="90.0" y="148.0" text-anchor="middle" dominant-baseline="central" fill="#888780">4 选项 · AskUserQuestion</text>
<rect x="230.0" y="224.0" width="220" height="56" rx="8" fill="#E1F5EE" stroke="#0F6E56" stroke-width="0.5"/>
<text class="ths" x="340.0" y="245.0" text-anchor="middle" dominant-baseline="central">收集 Diff 数据</text>
<text class="ts" x="340.0" y="262.0" text-anchor="middle" dominant-baseline="central" fill="#0F6E56">git status · diff · log</text>
<polygon points="340.0,312.0 415.0,342.0 340.0,372.0 265.0,342.0" fill="#FAEEDA" stroke="#854F0B" stroke-width="0.5"/>
<text class="ths" x="340.0" y="342.0" text-anchor="middle" dominant-baseline="central">Diff 有效?</text>
<rect x="-20.0" y="314.0" width="220" height="56" rx="8" fill="#E1F5EE" stroke="#0F6E56" stroke-width="0.5"/>
<text class="ths" x="90.0" y="335.0" text-anchor="middle" dominant-baseline="central">降级 Diff 策略</text>
<text class="ts" x="90.0" y="352.0" text-anchor="middle" dominant-baseline="central" fill="#0F6E56">HEAD~1 → workspace → 重询</text>
<rect x="230.0" y="428.0" width="220" height="56" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="449.0" text-anchor="middle" dominant-baseline="central">上下文采集</text>
<text class="ts" x="340.0" y="466.0" text-anchor="middle" dominant-baseline="central" fill="#888780">SearchCodebase · Read</text>
<rect x="230.0" y="516.0" width="220" height="44" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="538.0" text-anchor="middle" dominant-baseline="central">推断作者意图</text>
<rect x="230.0" y="592.0" width="220" height="56" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="613.0" text-anchor="middle" dominant-baseline="central">三遍审计</text>
<text class="ts" x="340.0" y="630.0" text-anchor="middle" dominant-baseline="central" fill="#888780">Pass A 基线 → B 偏差 → C 追踪</text>
<polygon points="340.0,680.0 415.0,710.0 340.0,740.0 265.0,710.0" fill="#FAEEDA" stroke="#854F0B" stroke-width="0.5"/>
<text class="ths" x="340.0" y="710.0" text-anchor="middle" dominant-baseline="central">通过 Pass C?</text>
<rect x="30.0" y="688.0" width="120" height="44" rx="8" fill="#FCEBEB" stroke="#A32D2D" stroke-width="0.5"/>
<text class="th" x="90.0" y="710.0" text-anchor="middle" dominant-baseline="central">丢弃</text>
<rect x="230.0" y="796.0" width="220" height="44" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="818.0" text-anchor="middle" dominant-baseline="central">评估严重性 & 置信度</text>
<polygon points="340.0,872.0 415.0,902.0 340.0,932.0 265.0,902.0" fill="#FAEEDA" stroke="#854F0B" stroke-width="0.5"/>
<text class="ths" x="340.0" y="902.0" text-anchor="middle" dominant-baseline="central">Confidence ≥ 0.80?</text>
<rect x="30.0" y="880.0" width="120" height="44" rx="8" fill="#FCEBEB" stroke="#A32D2D" stroke-width="0.5"/>
<text class="th" x="90.0" y="902.0" text-anchor="middle" dominant-baseline="central">丢弃</text>
<rect x="230.0" y="988.0" width="220" height="56" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="1009.0" text-anchor="middle" dominant-baseline="central">硬性排除检查</text>
<text class="ts" x="340.0" y="1026.0" text-anchor="middle" dominant-baseline="central" fill="#888780">§8 分类排除 · 框架豁免</text>
<rect x="230.0" y="1076.0" width="220" height="56" rx="8" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="th" x="340.0" y="1097.0" text-anchor="middle" dominant-baseline="central">最终自检</text>
<text class="ts" x="340.0" y="1114.0" text-anchor="middle" dominant-baseline="central" fill="#888780">6 项清单逐条过</text>
<rect x="230.0" y="1164.0" width="220" height="56" rx="10" fill="#EEEDFE" stroke="#534AB7" stroke-width="0.5"/>
<text class="th" x="340.0" y="1185.0" text-anchor="middle" dominant-baseline="central">输出报告</text>
<text class="ts" x="340.0" y="1202.0" text-anchor="middle" dominant-baseline="central" fill="#534AB7">Clean ✅ 或 Findings 表</text>
<line x1="-20.0" y1="1284.0" x2="450.0" y2="1284.0" stroke="#B4B2A9" stroke-width="0.5"/>
<text class="ts" x="215.0" y="1296.0" text-anchor="middle" dominant-baseline="central">图例</text>
<rect x="12.0" y="1308.0" width="94" height="24" rx="6" fill="#E6F1FB" stroke="#185FA5" stroke-width="0.5"/>
<text class="ts" x="59.0" y="1320.0" text-anchor="middle" dominant-baseline="central">AI 执行</text>
<rect x="118.0" y="1308.0" width="94" height="24" rx="6" fill="#EEEDFE" stroke="#534AB7" stroke-width="0.5"/>
<text class="ts" x="165.0" y="1320.0" text-anchor="middle" dominant-baseline="central">输出/报告</text>
<rect x="224.0" y="1308.0" width="66" height="24" rx="6" fill="#FAEEDA" stroke="#854F0B" stroke-width="0.5"/>
<text class="ts" x="257.0" y="1320.0" text-anchor="middle" dominant-baseline="central">决策点</text>
<rect x="302.0" y="1308.0" width="52" height="24" rx="6" fill="#E1F5EE" stroke="#0F6E56" stroke-width="0.5"/>
<text class="ts" x="328.0" y="1320.0" text-anchor="middle" dominant-baseline="central">脚本</text>
<rect x="366.0" y="1308.0" width="52" height="24" rx="6" fill="#FCEBEB" stroke="#A32D2D" stroke-width="0.5"/>
<text class="ts" x="392.0" y="1320.0" text-anchor="middle" dominant-baseline="central">终止</text>
</svg>
</body>
</html>