skillhub/scanner
XiaoSeS fc7c59534a
fix(platform): harden sessions, scanner recovery, and CLI guidance (#801)
* fix(auth): recover from unreadable sessions

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(scanner): defer unavailable scan tasks safely

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(web): prefer the SkillHub CLI install command

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(auth): decode session cookies during recovery

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(runtime): address scanner and session review findings

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(scanner): defer all server-side outages

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* docs(scanner): clarify deferred failure semantics

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(scanner): cover recovery boundaries

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* fix(scanner): register startup hook on router

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

* test(e2e): align install defaults and reuse auth session

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>

---------

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
2026-09-02 20:15:42 +08:00
..
backports fix(scanner): backport local LLM base URL handling for #563 2026-06-29 14:34:55 +08:00
docs fix(platform): harden sessions, scanner recovery, and CLI guidance (#801) 2026-09-02 20:15:42 +08:00
examples/vetter-rules feat(security): add security scanning system with multi-scanner support and frontend UI (#144) 2026-03-23 09:56:03 +08:00
tests fix(platform): harden sessions, scanner recovery, and CLI guidance (#801) 2026-09-02 20:15:42 +08:00
.env.example feat(security): add security scanning system with multi-scanner support and frontend UI (#144) 2026-03-23 09:56:03 +08:00
Dockerfile fix(platform): harden sessions, scanner recovery, and CLI guidance (#801) 2026-09-02 20:15:42 +08:00
README.md feat(security): add security scanning system with multi-scanner support and frontend UI (#144) 2026-03-23 09:56:03 +08:00
skillhub_scanner_app.py fix(platform): harden sessions, scanner recovery, and CLI guidance (#801) 2026-09-02 20:15:42 +08:00

Skill Scanner

本目录提供 Cisco skill-scanner 的本地 Docker 构建上下文,用于 make dev-all 开发流程。

开发流程会将 cisco-ai-skill-scanner 构建到本地容器中,并在 http://localhost:8000 上暴露服务。

快速开始

环境变量

Scanner 服务的可选环境变量:

  • SKILL_SCANNER_LLM_API_KEY - LLM API 密钥
  • SKILL_SCANNER_LLM_BASE_URL - LLM API 基础 URL
  • SKILL_SCANNER_LLM_MODEL - LLM 模型名称

启动服务

# 启动所有服务(包括 Scanner
make dev-all

# 检查 Scanner 服务状态
curl http://localhost:8000/health

文档

架构说明

Scanner 服务与 SkillHub 的集成架构:

SkillHub Backend
    ↓
SecurityScanService.triggerScan()
    ↓
Redis Stream (skillhub:scan:requests)
    ↓
ScanTaskConsumer
    ↓
SkillScannerAdapter
    ↓
SkillScannerService (HTTP Client)
    ↓
Cisco skill-scanner API

相关配置

SkillHub 后端的 Scanner 配置位于:

  • server/skillhub-app/src/main/resources/application.yml
  • deploy/k8s/configmap.yaml
  • deploy/k8s/secret.yaml

详见 配置说明