Bound advisory network retries while keeping audits fail closed

2026-10-08 20:22:55 +08:00
parent 5c1665b4b9
commit cb9f1cd44a
4 changed files with 195 additions and 1 deletions
@@ -321,3 +321,22 @@ Photos configuration or stored connection is missing. These checks do not prove
 session validity or scan the complete catalog: after restoring a source, also
 verify its read-only `/api/v1/photo-sources/{id}/images?limit=1` endpoint before
 running an automation task.
+
+### Advisory-service network resilience
+
+CI dependency installation uses the domestic `CI_PIP_INDEX_URL` first and the
+`CI_PIP_FALLBACK_INDEX_URL` sequentially on failure. These package indexes do not
+replace PyPI's vulnerability JSON API.
+
+`python scripts/ci-audit.py` retains the pinned `requirements.lock`, PyPI advisory
+service and `--no-deps --disable-pip` checks. It uses a 60-second socket timeout,
+at most three attempts, and 5/10-second backoff only for network failures. Known
+vulnerabilities, malformed/incomplete reports and skipped dependencies fail
+immediately. Every attempt has a five-minute process limit. A timeout or failed
+final attempt still blocks deployment.
+
+The advisory HTTP cache is reused within the job (including retries) and follows
+the audit client's normal HTTP freshness rules. It is not a permanent offline
+snapshot or a cross-job cache. Raw network exceptions are omitted because proxy
+URLs may contain credentials. Logs identify the advisory host and whether the
+complete audit succeeded.