Meridian Compliance Report

dify

Generated 22 July 2026, 11:22 UTC
Report feb8ef4e2ae3967079841fa4
Meridian provides automated compliance assessments and recommendations, not legal advice. Final compliance determinations should be reviewed by qualified legal, compliance, or security professionals where required.

Executive Summary

Applicable Controls
401
Controls determined to apply to this repository
Implemented
53
Requires Documentation
155
Requires Operational Evidence
12
Code Improvement Recommended
181

Repository Overview

In ProductionTrue

Technology Stack

10391 files · 2002134 lines

Languagesgo, javascript, python, tsx, typescript
FrameworksFastAPI, Flask, Next.js, React
Data & InfrastructureCelery, MySQL, OpenTelemetry, PostgreSQL, Redis, SQL (via SQLAlchemy)
CI/CD & IaCDocker, Docker Compose, GitHub Actions

Business Signals

Stores personal dataTrue
Uses AITrue
Primary jurisdictionUnited States
Processes paymentsTrue
Regulated financial entityFalse

What Meridian Understood

This repository seems to focus on building a complex web application using a range of technologies including frontend libraries like React and Next.js, and backend frameworks FastAPI and Flask. There's a heavy reliance on databases like MySQL, PostgreSQL, and Redis, and advanced AI capabilities using MLflow, PydanticAI, and vector databases such as Milvus.

Architecture: Full-stack web application

Compliance Scope

Applicable Regulations

EU AI ActAI Governance & Responsible AI
Your repository deploys AI models or AI-powered systems.
Required: matched on ai_usage.
PCI DSSPayments & Financial Security
Your application processes payments or handles cardholder data.
Required: matched on processes_payments.
SOC 2 Trust Services CriteriaTrust & Assurance
Your application is in production and handles customer data requiring independent assurance.
Optional: base condition met, but no additional signal beyond production.

Not Applicable Regulations

DPDPA 2023Privacy & Data Protection
Excluded: 'primary_jurisdiction' does not match the condition required for this framework.
DPDPA Rules, 2025Privacy & Data Protection
Excluded: 'primary_jurisdiction' does not match the condition required for this framework.
GDPRPrivacy & Data Protection
Excluded: 'primary_jurisdiction' does not match the condition required for this framework.
RBI FREE-AI FrameworkAI Governance & Responsible AI
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
SEBI AI/ML GuidelinesAI Governance & Responsible AI
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Digital Payment Security ControlsPayments & Financial Security
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI IT Governance & Risk ControlsCybersecurity & Operational Security
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI NBFC IT FrameworkFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI NBFC Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Payments Banks Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
RBI Small Finance Banks Outsourcing DirectionsFinancial Sector Regulations
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
SEBI Cybersecurity FrameworkCybersecurity & Operational Security
Excluded: 'regulated_financial_entity' does not match the condition required for this framework.
CERT-In DirectionsCybersecurity & Operational Security
Excluded: 'primary_jurisdiction' does not match the condition required for this framework.

Compliance Readiness

Implemented

Authentication Cross Border Transfer Controls Data Classification Data Lifecycle Management

Code Improvement Recommended

Access Control Audit Logging Consent Management Data Retention Encryption At Rest Encryption In Transit Key Management

Requires Documentation

Asset Inventory Backup And Recovery Business Impact Analysis Configuration Management Data Deletion Data Masking Data Protection Impact Assessment Data Subject Request Handling Grievance Redressal Incident Response Plan Information Security Policy Log Retention Policy Management Privacy Impact Assessment Records Of Processing

Requires Operational Evidence

AI Risk Assessment Access Review BCP And DR Testing Bias Detection Change Management Data Loss Prevention Data Quality Management Governance Framework Incident Detection Maker Checker Model Monitoring Model Testing Patch Management Penetration Testing Physical Access Control Privileged Access Management Regulatory Change Monitoring Regulatory Reporting SOC Operations Security Awareness Training Third Party Risk Assessment Vendor Contract Management Vulnerability Scanning

Enterprise Readiness

Detected

Authentication

Recommended Improvements

Access Control Audit Logging Encryption At Rest Encryption In Transit Key Management Data Retention

Operational Requirements

Privileged Access Management BCP And DR Testing Penetration Testing Third Party Risk Assessment Vendor Contract Management Security Awareness Training

Documentation Required

Incident Response Plan Information Security Policy

SOC 2 Scope

The subset of the capabilities above that SOC 2's own controls actually reach.

Detected

Authentication

Recommended Improvements

Access Control Audit Logging Encryption At Rest Encryption In Transit Key Management Data Retention

Operational Requirements

Privileged Access Management BCP And DR Testing Penetration Testing Third Party Risk Assessment Vendor Contract Management Security Awareness Training

Documentation Required

Incident Response Plan

AI Governance

Critical AI Findings
23
AI frameworksPydanticAI
AI infrastructureMLflow
Vector databasesQdrant, ChromaDB, Milvus, Weaviate
Notebooks0
AI regulations evaluatedEU Artificial Intelligence Act

Not mapped (no real control data available): ISO_42001, NIST_AI_RMF, OECD_AI_PRINCIPLES

Deployment Profile

Vector databaseMLOps infrastructure

AI Governance Posture

Replaces a bare AI maturity score with the actual capabilities checked.

Requires Operational Processes

Governance Framework AI Risk Assessment Model Monitoring Model Testing Bias Detection Maker Checker Penetration Testing

Code Improvement Recommended

Audit Logging

Top Priorities

  1. Access Control (CRITICAL) — Can the organization (as a third-country provider) demonstrate that it has appointed an authorised representative in the Union and that the representative fulfils all required tasks?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  2. Authentication (CRITICAL) — Can the multi-tenant service provider demonstrate logical separation between provider and customer environments with authorization controls?
    Improves compliance posture for: PCI DSS.
  3. Encryption In Transit (CRITICAL) — Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  4. Encryption At Rest (CRITICAL) — Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  5. Key Management (CRITICAL) — Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.

Full breakdown by effort below.

Recommended Actions

Quick Wins

  • Access Control (CRITICAL)
    Can the organization (as a third-country provider) demonstrate that it has appointed an authorised representative in the Union and that the representative fulfils all required tasks?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Authentication (CRITICAL)
    Can the multi-tenant service provider demonstrate logical separation between provider and customer environments with authorization controls?
    Improves compliance posture for: PCI DSS.
  • Encryption In Transit (CRITICAL)
    Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  • Encryption At Rest (CRITICAL)
    Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.

Medium Effort

  • Key Management (CRITICAL)
    Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  • Data Subject Request Handling (HIGH)
    Can the organization demonstrate that it has implemented appropriate data governance and management practices for training, validation, and testing data sets of high-risk AI systems?
    Improves compliance posture for: EU AI Act.
  • Consent Management (HIGH)
    Can the organization demonstrate that it has implemented appropriate safeguards when processing special categories of personal data for bias detection and correction?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Audit Logging (HIGH)
    Can the organization demonstrate that high-risk AI systems have logging capabilities for automatic event recording throughout their lifetime?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Privileged Access Management (HIGH)
    Can the organization demonstrate that high-risk AI systems are designed for effective human oversight throughout their use?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Backup And Recovery (HIGH)
    Can the organization demonstrate that high-risk AI systems are resilient to errors and have measures to address feedback loops?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Data Retention (HIGH)
    Can the organization demonstrate that it retains automatically generated logs for at least six months (or as otherwise required) for high-risk AI systems?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Incident Response Plan (HIGH)
    Can the organization demonstrate that it authorizes, designs, implements, maintains, and monitors environmental protections, backup processes, and recovery infrastructure?
    Improves compliance posture for: SOC 2 Trust Services Criteria.
  • Records Of Processing (MEDIUM)
    Can the organization demonstrate that it has drawn up and maintains up-to-date technical documentation for high-risk AI systems as required by Annex IV?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Maker Checker (MEDIUM)
    Can the organization demonstrate that high-risk AI systems are designed for effective human oversight throughout their use?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Model Testing (MEDIUM)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.
  • Business Impact Analysis (MEDIUM)
    Can the organization demonstrate that high-risk AI systems are resilient to errors and have measures to address feedback loops?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Data Lifecycle Management (MEDIUM)
    Can the organization demonstrate that it retains all required documentation for 10 years after placing a high-risk AI system on the market?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Grievance Redressal (MEDIUM)
    Can the organization demonstrate that it has procedures to handle complaints regarding infringement of the AI Act?
    Improves compliance posture for: EU AI Act.
  • Data Masking (MEDIUM)
    Can the entity demonstrate that POS POI terminals using SSL/early TLS are not susceptible to known exploits?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  • Data Classification (MEDIUM)
    Can the designated entity demonstrate that response procedures are in place for cleartext PAN found outside the CDE?
    Improves compliance posture for: PCI DSS, SOC 2 Trust Services Criteria.
  • Configuration Management (MEDIUM)
    Can the organization demonstrate that bespoke and custom software is developed securely according to industry standards and PCI DSS?
    Improves compliance posture for: PCI DSS.
  • Policy Management (LOW)
    Can the organization demonstrate that it has implemented appropriate data governance and management practices for training, validation, and testing data sets of high-risk AI systems?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Security Awareness Training (LOW)
    Can the organization demonstrate that high-risk AI systems are designed for effective human oversight throughout their use?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Data Quality Management (INFORMATIONAL)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.

Strategic Initiatives

  • AI Risk Assessment (HIGH)
    Can the organization demonstrate that high-risk AI systems are designed for effective human oversight throughout their use?
    Improves compliance posture for: EU AI Act, SOC 2 Trust Services Criteria.
  • Bias Detection (HIGH)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.
  • Data Loss Prevention (HIGH)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.
  • Privacy Impact Assessment (HIGH)
    Can the organization demonstrate that it has established, implemented, documented, and maintained a risk management system for high-risk AI systems throughout their lifecycle?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Data Protection Impact Assessment (HIGH)
    Can the organization demonstrate that it has established, implemented, documented, and maintained a risk management system for high-risk AI systems throughout their lifecycle?
    Improves compliance posture for: EU AI Act, PCI DSS, SOC 2 Trust Services Criteria.
  • Physical Access Control (MEDIUM)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.
  • Model Monitoring (MEDIUM)
    Can the organization demonstrate that high-risk AI systems achieve appropriate levels of accuracy, robustness, and cybersecurity throughout their lifecycle?
    Improves compliance posture for: EU AI Act.

Compliance Roadmap

Now · Quick Wins

  • Access Control
  • Authentication
  • Encryption In Transit
  • Encryption At Rest

Next · Medium Effort

  • Key Management
  • Data Subject Request Handling
  • Consent Management
  • Audit Logging
  • Privileged Access Management
  • Backup And Recovery
  • Data Retention
  • Incident Response Plan
  • Records Of Processing
  • Maker Checker
  • Model Testing
  • Business Impact Analysis
  • Data Lifecycle Management
  • Grievance Redressal
  • Data Masking
  • Data Classification
  • Configuration Management
  • Policy Management
  • Security Awareness Training
  • Data Quality Management

Later · Strategic Initiatives

  • AI Risk Assessment
  • Bias Detection
  • Data Loss Prevention
  • Privacy Impact Assessment
  • Data Protection Impact Assessment
  • Physical Access Control
  • Model Monitoring

Next Steps

Start with Top Priorities above, then work through the full Quick Wins/Medium Effort/Strategic Initiatives breakdown. Technical Findings below show exactly where each gap was detected in your repository; export to PDF/HTML for a shareable version, or JSON/SARIF to feed a CI pipeline.

Technical Findings (169)

Showing top 50 of 169, ranked by severity then confidence. Export to JSON or SARIF for the complete list.

Critical PCI_REQ_3_6_1 — Define and Implement Procedures to Protect Cryptographic Keys Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_6_1_2 — Store Secret and Private Keys in Secure Forms Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_7_1 — Implement Key Management for Strong Key Generation Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_7_2 — Implement Key Management for Secure Distribution Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_7_3 — Implement Key Management for Secure Storage Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_4_2_1 — Implement Strong Cryptography and Security Protocols for PAN Transmission Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical SOC2_CC6_6 — External Threat Protection Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical SOC2_CC6_8 — Unauthorized and Malicious Software Control Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_10_2_1_2 — Audit Logs Capture All Actions by Individuals with Administrative Access Code Improvement Recommended
Satisfied: Authentication
Missing: Access Control, Audit Logging
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:321-321 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:353-353 (authentication)
api/libs/jws.py:97-102 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:74-74 (authentication)
dify-agent/tests/local/dify_agent/server/test_app.py:232-232 (authentication)
api/tests/unit_tests/services/test_account_service.py:249-249 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:84-84 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:181-181 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:54-54 (authentication)
api/controllers/openapi/auth/pipeline.py:220-220 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:39-39 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:261-266 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:210-210 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:235-235 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:263-263 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:74-74 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:226-226 (authentication)
api/controllers/console/auth/login.py:399-399 (authentication)
api/libs/passport.py:16-16 (authentication)
dify-agent/src/dify_agent/agent_stub/server/tokens/agent_stub.py:146-146 (authentication)
api/tests/unit_tests/services/test_account_service.py:180-180 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:299-299 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:300-300 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:333-333 (authentication)
Critical PCI_REQ_10_2_1_3 — Audit Logs Capture All Access to Audit Logs Code Improvement Recommended
Satisfied: Authentication
Missing: Access Control, Audit Logging
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:321-321 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:353-353 (authentication)
api/libs/jws.py:97-102 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:74-74 (authentication)
dify-agent/tests/local/dify_agent/server/test_app.py:232-232 (authentication)
api/tests/unit_tests/services/test_account_service.py:249-249 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:84-84 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:181-181 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:54-54 (authentication)
api/controllers/openapi/auth/pipeline.py:220-220 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:39-39 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:261-266 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:210-210 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:235-235 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:263-263 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:74-74 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:226-226 (authentication)
api/controllers/console/auth/login.py:399-399 (authentication)
api/libs/passport.py:16-16 (authentication)
dify-agent/src/dify_agent/agent_stub/server/tokens/agent_stub.py:146-146 (authentication)
api/tests/unit_tests/services/test_account_service.py:180-180 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:299-299 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:300-300 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:333-333 (authentication)
Critical PCI_REQ_10_2_1_5 — Audit Logs Capture All Changes to Identification and Authentication Credentials Code Improvement Recommended
Satisfied: Authentication
Missing: Access Control, Audit Logging
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:321-321 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:353-353 (authentication)
api/libs/jws.py:97-102 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:74-74 (authentication)
dify-agent/tests/local/dify_agent/server/test_app.py:232-232 (authentication)
api/tests/unit_tests/services/test_account_service.py:249-249 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:84-84 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:181-181 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:54-54 (authentication)
api/controllers/openapi/auth/pipeline.py:220-220 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:39-39 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:261-266 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:210-210 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:235-235 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:263-263 (authentication)
api/tests/unit_tests/libs/test_oauth_bearer_rate_limit_ordering.py:74-74 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:226-226 (authentication)
api/controllers/console/auth/login.py:399-399 (authentication)
api/libs/passport.py:16-16 (authentication)
dify-agent/src/dify_agent/agent_stub/server/tokens/agent_stub.py:146-146 (authentication)
api/tests/unit_tests/services/test_account_service.py:180-180 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:299-299 (authentication)
api/tests/test_containers_integration_tests/services/test_webapp_auth_service.py:300-300 (authentication)
api/tests/test_containers_integration_tests/services/test_account_service.py:333-333 (authentication)
Critical PCI_REQ_3_2_1 — Implement Data Retention and Disposal Policies to Minimize Account Data Storage Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Data Retention, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/controllers/web/login.py:57-57 (data_minimization_module_fanin)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/extensions/ext_celery.py:18-18 (data_minimization_module_fanin)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_minimization_module_fanin)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_minimization_module_fanin)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_minimization_module_fanin)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_minimization_module_fanin)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_minimization_module_fanin)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_minimization_module_fanin)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_minimization_module_fanin)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_minimization_module_fanin)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_minimization_module_fanin)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_minimization_module_fanin)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_minimization_module_fanin)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_minimization_module_fanin)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_minimization_module_fanin)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_minimization_module_fanin)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_minimization_module_fanin)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_3_1 — Do Not Store Sensitive Authentication Data After Authorization Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/controllers/web/login.py:57-57 (data_minimization_module_fanin)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/extensions/ext_celery.py:18-18 (data_minimization_module_fanin)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_minimization_module_fanin)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_minimization_module_fanin)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_minimization_module_fanin)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_minimization_module_fanin)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_minimization_module_fanin)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_minimization_module_fanin)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_minimization_module_fanin)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_minimization_module_fanin)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_minimization_module_fanin)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_minimization_module_fanin)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_minimization_module_fanin)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_minimization_module_fanin)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_minimization_module_fanin)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_minimization_module_fanin)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_minimization_module_fanin)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_3_1_1 — Do Not Store Full Track Data After Authorization Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/controllers/web/login.py:57-57 (data_minimization_module_fanin)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/extensions/ext_celery.py:18-18 (data_minimization_module_fanin)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_minimization_module_fanin)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_minimization_module_fanin)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_minimization_module_fanin)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_minimization_module_fanin)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_minimization_module_fanin)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_minimization_module_fanin)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_minimization_module_fanin)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_minimization_module_fanin)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_minimization_module_fanin)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_minimization_module_fanin)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_minimization_module_fanin)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_minimization_module_fanin)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_minimization_module_fanin)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_minimization_module_fanin)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_minimization_module_fanin)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_3_1_2 — Do Not Store Card Verification Code After Authorization Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/controllers/web/login.py:57-57 (data_minimization_module_fanin)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/extensions/ext_celery.py:18-18 (data_minimization_module_fanin)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_minimization_module_fanin)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_minimization_module_fanin)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_minimization_module_fanin)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_minimization_module_fanin)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_minimization_module_fanin)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_minimization_module_fanin)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_minimization_module_fanin)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_minimization_module_fanin)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_minimization_module_fanin)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_minimization_module_fanin)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_minimization_module_fanin)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_minimization_module_fanin)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_minimization_module_fanin)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_minimization_module_fanin)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_minimization_module_fanin)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical PCI_REQ_3_3_1_3 — Do Not Store PIN or PIN Block After Authorization Code Improvement Recommended
Satisfied: Data Classification, Data Lifecycle Management
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/controllers/web/login.py:57-57 (data_minimization_module_fanin)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/extensions/ext_celery.py:18-18 (data_minimization_module_fanin)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_minimization_module_fanin)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_minimization_module_fanin)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_minimization_module_fanin)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_minimization_module_fanin)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_minimization_module_fanin)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_minimization_module_fanin)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_minimization_module_fanin)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_minimization_module_fanin)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_minimization_module_fanin)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_minimization_module_fanin)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_minimization_module_fanin)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_minimization_module_fanin)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_minimization_module_fanin)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_minimization_module_fanin)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_minimization_module_fanin)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_minimization_module_fanin)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_minimization_module_fanin)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_minimization_module_fanin)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_minimization_module_fanin)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_minimization_module_fanin)
api/controllers/console/init_validate.py:20-20 (data_classification)
Critical EU_AI_ART_20_001 — Corrective Actions and Duty of Information Code Improvement Recommended
Missing: Audit Logging
Critical EU_AI_ART_27_001 — Fundamental Rights Impact Assessment Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_001 — Prohibition of Subliminal Manipulative Techniques Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_002 — Prohibition of Exploiting Vulnerabilities Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_003 — Prohibition of Social Scoring Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_004 — Prohibition of Predictive Policing Risk Assessments Based Solely on Profiling Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_006 — Prohibition of Emotion Recognition in Workplace and Education Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_007 — Prohibition of Biometric Categorisation for Sensitive Characteristics Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_5_008 — Restrictions on Real-Time Remote Biometric Identification for Law Enforcement Code Improvement Recommended
Missing: Consent Management
Critical EU_AI_ART_73_001 — Reporting of Serious Incidents Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_2_1 — Enable and Activate Audit Logs for All System Components Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_2_1_1 — Audit Logs Capture All Individual User Access to Cardholder Data Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_2_1_6 — Audit Logs Capture Initialization, Starting, Stopping, or Pausing of Audit Logs Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_2_2 — Audit Logs Record Specific Details for Each Auditable Event Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_3_2 — Protect Audit Logs from Modification Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_10_4_1 — Review Security Events and Logs of Critical Systems Daily Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_11_3_1 — Perform Internal Vulnerability Scans Quarterly and Resolve High-Risk/Critical Vulnerabilities Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_11_3_2 — Perform External Vulnerability Scans Quarterly by ASV and Pass Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_11_4_4 — Correct Exploitable Vulnerabilities and Security Weaknesses from Penetration Testing Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_11_5_1 — Deploy Intrusion-Detection/Prevention Techniques at CDE Perimeter and Critical Points Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_12_10_1 — Maintain Incident Response Plan with Required Elements Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_5_2_1 — Deploy Anti-Malware Solution on All System Components Except Those Evaluated Not at Risk Code Improvement Recommended
Missing: Audit Logging
Critical PCI_REQ_5_2_2 — Ensure Anti-Malware Detects, Removes, Blocks, or Contains All Known Malware Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_CC7_3 — Security Event Evaluation Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_CC7_4 — Incident Response Program Execution Code Improvement Recommended
Missing: Audit Logging
Critical SOC2_P6_6 — Notification of Breaches and Incidents Code Improvement Recommended
Missing: Audit Logging, Consent Management
High PCI_APP_A3_2_5_2 — DESV: Implement Response Procedures for Cleartext PAN Outside CDE Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_APP_A3_2_6 — DESV: Implement Mechanisms to Detect and Prevent Cleartext PAN Leaving CDE Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_APP_A3_2_6_1 — DESV: Implement Response Procedures for Attempts to Remove Cleartext PAN Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_REQ_12_10_7 — Establish Incident Response Procedures for Detected Stored PAN Outside Expected Location Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Audit Logging, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_REQ_3_5_1_1 — Use Keyed Cryptographic Hashes for PAN with Key Management Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_REQ_3_6_1_4 — Store Cryptographic Keys in Fewest Possible Locations Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_REQ_3_7_4 — Implement Key Management for Cryptographic Key Changes at End of Cryptoperiod Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)
High PCI_REQ_3_7_5 — Implement Key Management for Retirement, Replacement, or Destruction of Keys Code Improvement Recommended
Satisfied: Data Classification
Missing: Access Control, Encryption At Rest, Encryption In Transit, Key Management
api/models/dataset.py:1404-1404 (data_classification)
api/models/account.py:97-97 (data_classification)
api/controllers/console/setup.py:20-20 (data_classification)
api/controllers/console/workspace/members.py:83-83 (data_classification)
api/fields/conversation_fields.py:199-199 (data_classification)
api/providers/vdb/vdb-couchbase/src/dify_vdb_couchbase/couchbase_vector.py:33-33 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:27-27 (data_classification)
api/libs/oauth.py:50-50 (data_classification)
api/providers/vdb/vdb-pgvecto-rs/src/dify_vdb_pgvecto_rs/pgvecto_rs.py:31-31 (data_classification)
api/fields/member_fields.py:47-47 (data_classification)
api/fields/member_fields.py:14-14 (data_classification)
api/controllers/console/auth/forgot_password.py:39-39 (data_classification)
cli/src/commands/get/member/handlers.ts:19-19 (data_classification)
api/controllers/console/explore/trial.py:354-354 (data_classification)
api/controllers/console/auth/email_register.py:33-33 (data_classification)
api/controllers/console/workspace/account.py:139-139 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:42-42 (data_classification)
api/providers/vdb/vdb-myscale/src/dify_vdb_myscale/myscale_vector.py:28-28 (data_classification)
api/services/entities/auth_entities.py:85-85 (data_classification)
api/controllers/console/auth/activate.py:22-22 (data_classification)
api/providers/vdb/vdb-oracle/src/dify_vdb_oracle/oraclevector.py:30-30 (data_classification)
api/libs/oauth.py:41-41 (data_classification)
api/controllers/console/workspace/members.py:77-77 (data_classification)
api/controllers/console/workspace/account.py:156-156 (data_classification)
api/providers/vdb/vdb-matrixone/src/dify_vdb_matrixone/matrixone_vector.py:40-40 (data_classification)
api/fields/member_fields.py:29-29 (data_classification)
api/providers/vdb/vdb-alibabacloud-mysql/src/dify_vdb_alibabacloud_mysql/alibabacloud_mysql_vector.py:29-29 (data_classification)
api/providers/vdb/vdb-opengauss/src/dify_vdb_opengauss/opengauss.py:24-24 (data_classification)
api/controllers/web/login.py:57-57 (data_classification)
api/controllers/openapi/_models.py:156-156 (data_classification)
api/services/enterprise/rbac_service.py:176-176 (data_classification)
api/controllers/openapi/_models.py:420-420 (data_classification)
api/providers/vdb/vdb-opensearch/src/dify_vdb_opensearch/opensearch_vector.py:46-46 (data_classification)
api/extensions/ext_redis.py:254-254 (data_classification)
api/libs/oauth.py:55-55 (data_classification)
api/extensions/storage/clickzetta_volume/clickzetta_volume_storage.py:29-29 (data_classification)
api/providers/trace/trace-mlflow/src/dify_trace_mlflow/config.py:15-15 (data_classification)
api/controllers/console/auth/activate.py:28-28 (data_classification)
api/controllers/console/auth/oauth_server.py:60-60 (data_classification)
api/providers/vdb/vdb-clickzetta/src/dify_vdb_clickzetta/clickzetta_vector.py:39-39 (data_classification)
api/controllers/openapi/_models.py:394-394 (data_classification)
api/extensions/ext_celery.py:18-18 (data_classification)
api/providers/vdb/vdb-elasticsearch/src/dify_vdb_elasticsearch/elasticsearch_vector.py:30-30 (data_classification)
api/controllers/openapi/_models.py:432-432 (data_classification)
api/controllers/openapi/auth/data.py:39-39 (data_classification)
api/providers/vdb/vdb-vastbase/src/dify_vdb_vastbase/vastbase_vector.py:24-24 (data_classification)
api/providers/vdb/vdb-oceanbase/src/dify_vdb_oceanbase/oceanbase_vector.py:38-38 (data_classification)
api/services/entities/auth_entities.py:43-43 (data_classification)
api/providers/vdb/vdb-tidb-vector/src/dify_vdb_tidb_vector/tidb_vector.py:28-28 (data_classification)
api/providers/vdb/vdb-milvus/src/dify_vdb_milvus/milvus_vector.py:40-40 (data_classification)
api/controllers/console/auth/login.py:79-79 (data_classification)
scripts/stress-test/common/config_helper.py:11-11 (data_classification)
api/controllers/console/auth/activate.py:56-56 (data_classification)
api/services/entities/auth_entities.py:53-53 (data_classification)
api/controllers/console/workspace/account.py:163-163 (data_classification)
api/controllers/console/workspace/account.py:174-174 (data_classification)
api/controllers/console/workspace/account.py:122-122 (data_classification)
api/controllers/console/auth/email_register.py:38-38 (data_classification)
api/models/agent_config_entities.py:489-489 (data_classification)
api/providers/vdb/vdb-relyt/src/dify_vdb_relyt/relyt_vector.py:36-36 (data_classification)
api/controllers/web/login.py:62-62 (data_classification)
api/controllers/console/auth/login.py:84-84 (data_classification)
api/services/enterprise/rbac_service.py:96-96 (data_classification)
api/core/workflow/human_input_adapter.py:52-52 (data_classification)
api/controllers/openapi/_models.py:371-371 (data_classification)
api/controllers/common/fields.py:99-99 (data_classification)
api/controllers/console/app/workflow_comment.py:58-58 (data_classification)
api/providers/vdb/vdb-huawei-cloud/src/dify_vdb_huawei_cloud/huawei_cloud_vector.py:43-43 (data_classification)
api/controllers/console/workspace/members.py:89-89 (data_classification)
api/providers/vdb/vdb-lindorm/src/dify_vdb_lindorm/lindorm_vector.py:41-41 (data_classification)
api/services/entities/auth_entities.py:48-48 (data_classification)
api/services/account_service.py:100-100 (data_classification)
api/core/app/apps/common/workflow_response_converter.py:100-100 (data_classification)
api/providers/vdb/vdb-pgvector/src/dify_vdb_pgvector/pgvector.py:29-29 (data_classification)
api/controllers/console/init_validate.py:20-20 (data_classification)

Control Mapping Appendix

Raw control-level mapping (control IDs, clause text) is intentionally not inlined here — export to JSON or SARIF for the complete, machine-readable control mapping.