Skip to content

docs(security): §4 条件 5 反链到 issue #158（台账 ↔ 人守载体双向可达） #159

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ReSerendipity merged 1 commit into from
Sep 24, 2026
Merged

docs(security): §4 条件 5 反链到 issue #158（台账 ↔ 人守载体双向可达） #159

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/SECURITY_DEPENDABOT_TRIAGE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -211,6 +211,8 @@ Dockerfile:38 RUN python3.12 -m pip install --no-cache-dir --user -r requiremen
5. **到期复审**：`.trivyignore.yaml` 三条的 `expiration` 都是 2026-12-31，到期那一步自动变红；
pip-audit 侧没有到期机制（它不支持 expiration），所以 A1–A16 的 16 个号靠本文 + 人守 ——
2026-12-31 之前要么按条件 1 抬版本消掉，要么把这份表带着做一次显式再确认。
那个"人守"的载体是 issue **#158**（`tracking: transformers 16 条 pip-audit 豁免跟踪（复审截止 2026-12-31）`）：
它是本文 §1 表的摘要，判据以本文为准，本文改动需同步到它。到期那次显式再确认在它下面留结论。

## 5. 告警 dismiss 的执行记录与 API 实测（2026-09-21 已全部做完）

Expand Down
Loading