DeepAudit Files

自 v2.0.0-beta.8 以来的变更：

• fix(ci): switch to node:20-slim to resolve arm64 build hang (3525842)
• fix(ci): optimize pnpm install for arm64 builds (4bdae31)
• chore: release v3.0.1 (7589599)
• fix(agent): 修复任务取消和LLM流式处理的多项问题 (a980fa3)
• docs: remove CHANGELOG.md (be0bdcb)
• feat(agent): 增加漏洞文件统计功能并优化agent提示词 (6c080fc)
• feat: 一键部署沙箱 + Docker 镜像发布工作流 (cd79242)
• feat(embedding): 支持前端配置嵌入模型的API密钥 (f71b8da)
• fix(rag): 修复代码块ID重复问题 (7efb89d)
• feat(RAG): 添加索引任务取消检查并支持目标文件过滤 (96560e6)
• feat(RAG): 添加嵌入进度显示和取消支持 (e068924)
• feat(AgentAudit): 添加进度日志功能支持 (2bba972)
• feat(agent_tasks): 优化仓库获取逻辑，优先使用ZIP下载 (18a91f2)
• feat(agent): 实现任务取消和超时处理机制 (5974323)
• feat(nginx): 增加大文件上传支持 (a27d379)
• feat(agent): 增强任务执行流程和实时日志反馈 (e210964)
• chore: 从 git 跟踪中移除向量数据库数据文件 (a313724)
• feat(retriever): 添加自动适配不同 embedding 配置的功能 (17889dc)
• chore: 忽略后端向量数据库数据目录 (3176c35)
• feat(agent): 增强 RAG 配置和工具集成 (5f07403)
• feat(agent): 将模型选择从下拉框改为输入框并添加预设模型按钮 (3bdbbf2)
• feat: 将最大分析文件数默认值改为0表示无限制 (15743e0)
• Merge branch 'v3.0.0' of https://github.com/lintsinghua/XCodeReviewer into v3.0.0 (323b4ac)
• 修复Agent审计任务识别不到文件的错误 (364b8ce)
• Update README.md (e116e77)
• docs: update README documentation (9f0d774)
• Update README.md (b1daff4)
• Update README.md (e9a20c7)
• Update README.md (8a3561f)
• docs: update project documentation in README. (b282980)
• update (67595b1)
• refactor: standardize dialog component styling and layout for improved consistency and responsiveness. (e531c88)
• fix: disable proxy environment variables in docker-compose.yml to ensure external API connectivity (7d29fe0)
• feat: Update deployment configurations, dependency management, and documentation, including a new sandbox build service. (ba00b71)
• fix(agent): 修复工具执行结果处理中的 None 值问题 (3639b3a)
• feat: 增加文件上传大小限制至500MB并优化大文件处理 (cdf360d)
• feat: Introduce Kunlun agent tool, add Docker and sandbox environment checks, and update agent services and frontend dialogs. (2df1b39)
• feat: Release v3.0.0 with multi-agent architecture, RAG, and Docker sandbox vulnerability verification, alongside cleanup of old scripts and build artifacts. (39a57b9)
• feat: Redesign task tabs in AuditTasks with a card-style layout and add !important to input padding. (fc3dce7)
• feat(agent): 新增多语言代码测试和漏洞验证工具并增强错误处理 (c64edda)
• refactor(agent): 重构Agent架构并实现动态Agent树 (a85cdb6)
• feat(安全扫描): 扩展高风险文件模式和危险模式库支持更多语言和文件类型 (e29231c)
• feat(沙箱): 强制使用沙箱验证并增强沙箱功能 (95929a4)
• feat(sandbox): 重构安全工具以使用沙箱环境执行 (189274f)
• feat: Add marked for improved Markdown to HTML report generation and refined download handling. (3d4f90c)
• fix: Display aggregated findings for the orchestrator and task, and show sub-agent duration/status in UI. (a9a22b9)
• feat: Improve report generation and statistics by normalizing severity comparisons and leveraging backend-calculated task metrics. (2a332d6)
• Fix: Improve agent stream stability by preventing unnecessary reconnections and correctly draining buffered events. (d449e2b)
• fix(agent): 改进沙盒工具初始化的日志记录 (507fe39)
• feat(agent): 增强漏洞发现处理流程和前端兼容性 (4e4dd05)
• feat: 新增安全工具集成和漏洞知识库扩展 (6d98f29)
• feat(agent): enhance error handling and project scope filtering (3db20a3)
• feat: Improve streaming LLM token usage reporting by adding input estimation, requesting usage via stream_options, and providing fallback estimation. (31dc476)
• style: improve code formatting and consistency in AgentAudit.tsx (e13218a)
• fix(agent_tasks): update task phase to REPORTING on completion (b392e04)
• chore: reduce logging verbosity and clean up file formatting (eed111c)
• feat(agent): implement comprehensive agent architecture with knowledge base and persistence layer (f05c007)
• feat(agent): enhance streaming with in-memory event manager and fallback polling (147dfba)
• feat: Introduce structured agent collaboration with TaskHandoff and analysis_v2 agent, updating core agent logic, tools, and audit UI. (70776ee)
• feat(agent): enhance agent functionality with LLM-driven decision-making and event handling (8938a8a)
• feat(agent): implement streaming support for agent events and enhance UI components (58c918f)
• refactor(agent): update task completion fields and enhance status handling (a43ebf1)
• refactor(agent): rename metadata fields and enhance task configuration (129112e)
• refactor(agent_tasks): streamline task configuration parameters (a33f60b)
• feat(agent): implement Agent audit module with LangGraph integration (9bc114a)
• Update README.md (7c9b9ea)

🚀 v3.0.0 新特性

• 🤖 Multi-Agent 架构: Orchestrator/Analysis/Recon/Verification 多智能体协作
• 🧠 RAG 知识库增强: 代码语义理解 + CWE/CVE 漏洞知识库
• 🔒 沙箱漏洞验证: Docker 安全容器自动执行 PoC
• 🛠️ 专业安全工具集成: Semgrep, Bandit, Gitleaks, OSV-Scanner
• 🐛 稳定性增强: 修复多智能体工具调用循环、UI 显示及 Docker 环境兼容性问题

📦 下载说明

构建产物

• deepaudit-frontend-*.tar.gz: 前端构建产物（用于生产部署）
• deepaudit-backend-*.tar.gz: 后端源码包
• deepaudit-docker-*.tar.gz: Docker 配置文件（包含沙箱配置）
• deepaudit-source-*.tar.gz: 完整源码包
• checksums.txt: 文件校验和

Docker 镜像

• Frontend: ghcr.io/lintsinghua/deepaudit-frontend:v3.0.1
• Backend: ghcr.io/lintsinghua/deepaudit-backend:v3.0.1

快速部署

:::bash
# 部署
docker compose up -d

Full Changelog: https://github.com/lintsinghua/DeepAudit/compare/v1.3.4...v3.0.1