Skip to content

v2.1.24

Choose a tag to compare

View all tags
@madneal madneal released this 17 Aug 14:00
· 19 commits to master since this release
v2.1.24
ee6a81c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

变更说明

  • 新增 AI 入库前分析：搜索结果写入数据库前，可使用 OpenAI 兼容接口判断是否为真实、可利用的密钥；误报、格式错误、HTTP/传输失败均默认拒绝入库，功能默认关闭。
  • 支持配置多个 AI Provider，并按顺序在连接、认证或 HTTP 失败时自动切换；有效的 real:false 判断会作为最终结果保留。
  • 新增系统配置页的 AI 配置测试接口和按钮。测试仅发送合成占位证据，不会发送真实密钥，也不会写入扫描结果。
  • 移除旧的手动 StartAITask 历史结果分析流程，分析统一发生在结果入库之前；AI 超时（30 秒）和内容上限（6000 字符）采用内置默认值。
  • 数据库迁移： 现有部署请执行 sql.md 中 v2.1.16 的迁移语句，为 /system/testAIConfig API 增加权限和接口记录；全新数据库初始化会自动包含该配置。

关联 PR：#347

What's Changed

  • Add optional AI pre-ingest filtering for search results. Only findings classified as real by a strict JSON verdict are persisted; false, malformed, or failed analyses fail closed.
  • Add multiple OpenAI-compatible AI providers with ordered fallback for transport, authentication, and HTTP failures, while retaining legacy single-provider fields as a fallback.
  • Add a system-page AI configuration test that sends synthetic placeholder evidence and reports each provider without exposing endpoint details or persisting results.
  • Remove the legacy manual StartAITask reprocessing flow and use built-in 30-second / 6000-character analysis limits.
  • Database migration: existing installations must apply the v2.1.16 statements in sql.md to register and authorize POST /system/testAIConfig; fresh databases include it during initialization.

Related PR: #347

完整变更 / Full Changelog: v2.1.23...v2.1.24

Assets 6
Loading