Skip to content

fix(scripts): 修 redteam 越权探针路径错 / Redis 健康检查失效 #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
leaderwm wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(scripts): 修 redteam 越权探针路径错 / Redis 健康检查失效 #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion docker-compose.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,8 @@ services:
- ./data/redis:/data
command: redis-server --appendonly yes --maxmemory 300mb --maxmemory-policy noeviction --maxmemory-samples 10 --requirepass grid-langfuse-pass
healthcheck:
test: ["CMD", "redis-cli", "ping"]
# 已开 requirepass：无认证 ping 的 NOAUTH 回复退出码仍为 0，需带密码并校验 PONG
test: ["CMD-SHELL", "redis-cli -a grid-langfuse-pass ping | grep PONG"]
interval: 10s
timeout: 3s
retries: 5
Expand Down
5 changes: 3 additions & 2 deletions scripts/redteam_eval.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -51,8 +51,9 @@
# 越权探测：低权角色请求的 admin-only 端点（RBAC 防线在 dependencies.require_perm）
PRIVILEGE_PROBES = [
("GET", "/system/users", "user:manage"),
("GET", "/system/config", "system:config"),
("GET", "/agent/tool-calls", "audit:read"),
# config/* 与 agent/tool-calls 均挂在 /system 前缀下（config/* 为 require_admin）
("GET", "/system/config/milvus", "admin"),
("GET", "/system/agent/tool-calls", "audit:read"),
]

STALE_KNOWLEDGE_VECTORS = [
Expand Down
Loading