一、代码检查概述
1.1 什么是代码检查
代码检查(Code Inspection)是指通过人工或自动化工具对源代码进行系统性审查的过程，目的是在软件交付链路的早期发现缺陷、安全漏洞与规范性问题。检查的范围涵盖语法正确性、逻辑缺陷、安全风险、性能隐患以及编码规范一致性等多个维度。
在现代软件工程实践中，检查已从单纯的人工走查(Code Review)演进为涵盖静态分析、动态检测、依赖扫描的综合性质量门禁。
1.2 代码检查的核心价值
检查的核心价值体现在以下几个方面：
1.3 检查类型分类
根据检查时机与方式，可将检查分为以下几类：
| 检查类型 | 检查时机 | 检查方式 | 典型工具 |
|———|———|———|———-|
| 人工检查 | 提交评审 | 同行评审 | GitLab MR |
| 静态检查 | 编译前 | 静态分析 | ESLint、SonarQube |
| 单元检查 | 构建阶段 | 测试执行 | Jest、JUnit |
| 安全检查 | CI阶段 | 漏洞扫描 | Snyk、Trivy |
| 依赖检查 | CI阶段 | 依赖分析 | Dependabot |
二、代码检查流程设计
2.1 检查流程总览
一个完整的代码检查流程贯穿开发到交付的全生命周期，下图展示了检查在各阶段的分布：
#publish-mermaid-1786506415813-0{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#publish-mermaid-1786506415813-0 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506415813-0 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506415813-0 .error-icon{fill:#552222;}#publish-mermaid-1786506415813-0 .error-text{fill:#552222;stroke:#552222;}#publish-mermaid-1786506415813-0 .edge-thickness-normal{stroke-width:1px;}#publish-mermaid-1786506415813-0 .edge-thickness-thick{stroke-width:3.5px;}#publish-mermaid-1786506415813-0 .edge-pattern-solid{stroke-dasharray:0;}#publish-mermaid-1786506415813-0 .edge-thickness-invisible{stroke-width:0;fill:none;}#publish-mermaid-1786506415813-0 .edge-pattern-dashed{stroke-dasharray:3;}#publish-mermaid-1786506415813-0 .edge-pattern-dotted{stroke-dasharray:2;}#publish-mermaid-1786506415813-0 .marker{fill:#333333;stroke:#333333;}#publish-mermaid-1786506415813-0 .marker.cross{stroke:#333333;}#publish-mermaid-1786506415813-0 svg{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;}#publish-mermaid-1786506415813-0 p{margin:0;}#publish-mermaid-1786506415813-0 .label{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;color:#333;}#publish-mermaid-1786506415813-0 .cluster-label text{fill:#333;}#publish-mermaid-1786506415813-0 .cluster-label span{color:#333;}#publish-mermaid-1786506415813-0 .cluster-label span p{background-color:transparent;}#publish-mermaid-1786506415813-0 .label text,#publish-mermaid-1786506415813-0 span{fill:#333;color:#333;}#publish-mermaid-1786506415813-0 .node rect,#publish-mermaid-1786506415813-0 .node circle,#publish-mermaid-1786506415813-0 .node ellipse,#publish-mermaid-1786506415813-0 .node polygon,#publish-mermaid-1786506415813-0 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506415813-0 .rough-node .label text,#publish-mermaid-1786506415813-0 .node .label text,#publish-mermaid-1786506415813-0 .image-shape .label,#publish-mermaid-1786506415813-0 .icon-shape .label{text-anchor:middle;}#publish-mermaid-1786506415813-0 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#publish-mermaid-1786506415813-0 .rough-node .label,#publish-mermaid-1786506415813-0 .node .label,#publish-mermaid-1786506415813-0 .image-shape .label,#publish-mermaid-1786506415813-0 .icon-shape .label{text-align:center;}#publish-mermaid-1786506415813-0 .node.clickable{cursor:pointer;}#publish-mermaid-1786506415813-0 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#publish-mermaid-1786506415813-0 .arrowheadPath{fill:#333333;}#publish-mermaid-1786506415813-0 .edgePath .path{stroke:#333333;stroke-width:1px;}#publish-mermaid-1786506415813-0 .flowchart-link{stroke:#333333;fill:none;}#publish-mermaid-1786506415813-0 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506415813-0 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415813-0 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415813-0 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#publish-mermaid-1786506415813-0 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#publish-mermaid-1786506415813-0 .cluster text{fill:#333;}#publish-mermaid-1786506415813-0 .cluster span{color:#333;}#publish-mermaid-1786506415813-0 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#publish-mermaid-1786506415813-0 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#publish-mermaid-1786506415813-0 rect.text{fill:none;stroke-width:0;}#publish-mermaid-1786506415813-0 .icon-shape,#publish-mermaid-1786506415813-0 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506415813-0 .icon-shape p,#publish-mermaid-1786506415813-0 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#publish-mermaid-1786506415813-0 .icon-shape .label rect,#publish-mermaid-1786506415813-0 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415813-0 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#publish-mermaid-1786506415813-0 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#publish-mermaid-1786506415813-0 .node .neo-node{stroke:#9370DB;}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node rect,#publish-mermaid-1786506415813-0 [data-look=\”neo\”].cluster rect,#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].swimlane.cluster rect{filter:none;}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node path{stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node .neo-line path{stroke:#9370DB;filter:none;}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].node circle .state-start{fill:#000000;}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415813-0 [data-look=\”neo\”].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415813-0 :root{–mermaid-font-family:\”trebuchet ms\”,verdana,arial,sans-serif;}否是否是否是
开发者编写代码
本地预检查
预检查通过
提交代码到仓库
触发CI流水线
静态代码检查
单元测试检查
安全漏洞检查
检查门禁通过
阻断合并并反馈报告
代码评审检查
评审通过
合并到主干分支
部署与回归检查
该流程确保检查在代码进入主干前形成多重门禁，任一环节未通过均会阻断流转。
2.2 提交前检查
提交前检查(Pre-commit Check)发生在开发者本地环境，目的是在代码进入仓库前拦截最基础的问题。其核心实践包括：
提交前检查的重点在于 '快' 与 '准'，规则集应精简，聚焦格式规范与低级错误。
2.3 持续集成检查
持续集成检查(CI Check)在代码推送后由CI服务器执行，承担最全面、最严格的检查职责：
#publish-mermaid-1786506415948-1{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#publish-mermaid-1786506415948-1 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506415948-1 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506415948-1 .error-icon{fill:#552222;}#publish-mermaid-1786506415948-1 .error-text{fill:#552222;stroke:#552222;}#publish-mermaid-1786506415948-1 .edge-thickness-normal{stroke-width:1px;}#publish-mermaid-1786506415948-1 .edge-thickness-thick{stroke-width:3.5px;}#publish-mermaid-1786506415948-1 .edge-pattern-solid{stroke-dasharray:0;}#publish-mermaid-1786506415948-1 .edge-thickness-invisible{stroke-width:0;fill:none;}#publish-mermaid-1786506415948-1 .edge-pattern-dashed{stroke-dasharray:3;}#publish-mermaid-1786506415948-1 .edge-pattern-dotted{stroke-dasharray:2;}#publish-mermaid-1786506415948-1 .marker{fill:#333333;stroke:#333333;}#publish-mermaid-1786506415948-1 .marker.cross{stroke:#333333;}#publish-mermaid-1786506415948-1 svg{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;}#publish-mermaid-1786506415948-1 p{margin:0;}#publish-mermaid-1786506415948-1 .label{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;color:#333;}#publish-mermaid-1786506415948-1 .cluster-label text{fill:#333;}#publish-mermaid-1786506415948-1 .cluster-label span{color:#333;}#publish-mermaid-1786506415948-1 .cluster-label span p{background-color:transparent;}#publish-mermaid-1786506415948-1 .label text,#publish-mermaid-1786506415948-1 span{fill:#333;color:#333;}#publish-mermaid-1786506415948-1 .node rect,#publish-mermaid-1786506415948-1 .node circle,#publish-mermaid-1786506415948-1 .node ellipse,#publish-mermaid-1786506415948-1 .node polygon,#publish-mermaid-1786506415948-1 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506415948-1 .rough-node .label text,#publish-mermaid-1786506415948-1 .node .label text,#publish-mermaid-1786506415948-1 .image-shape .label,#publish-mermaid-1786506415948-1 .icon-shape .label{text-anchor:middle;}#publish-mermaid-1786506415948-1 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#publish-mermaid-1786506415948-1 .rough-node .label,#publish-mermaid-1786506415948-1 .node .label,#publish-mermaid-1786506415948-1 .image-shape .label,#publish-mermaid-1786506415948-1 .icon-shape .label{text-align:center;}#publish-mermaid-1786506415948-1 .node.clickable{cursor:pointer;}#publish-mermaid-1786506415948-1 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#publish-mermaid-1786506415948-1 .arrowheadPath{fill:#333333;}#publish-mermaid-1786506415948-1 .edgePath .path{stroke:#333333;stroke-width:1px;}#publish-mermaid-1786506415948-1 .flowchart-link{stroke:#333333;fill:none;}#publish-mermaid-1786506415948-1 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506415948-1 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415948-1 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415948-1 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#publish-mermaid-1786506415948-1 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#publish-mermaid-1786506415948-1 .cluster text{fill:#333;}#publish-mermaid-1786506415948-1 .cluster span{color:#333;}#publish-mermaid-1786506415948-1 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#publish-mermaid-1786506415948-1 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#publish-mermaid-1786506415948-1 rect.text{fill:none;stroke-width:0;}#publish-mermaid-1786506415948-1 .icon-shape,#publish-mermaid-1786506415948-1 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506415948-1 .icon-shape p,#publish-mermaid-1786506415948-1 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#publish-mermaid-1786506415948-1 .icon-shape .label rect,#publish-mermaid-1786506415948-1 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506415948-1 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#publish-mermaid-1786506415948-1 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#publish-mermaid-1786506415948-1 .node .neo-node{stroke:#9370DB;}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node rect,#publish-mermaid-1786506415948-1 [data-look=\”neo\”].cluster rect,#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].swimlane.cluster rect{filter:none;}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node path{stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node .neo-line path{stroke:#9370DB;filter:none;}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].node circle .state-start{fill:#000000;}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415948-1 [data-look=\”neo\”].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506415948-1 :root{–mermaid-font-family:\”trebuchet ms\”,verdana,arial,sans-serif;}
代码推送
拉取代码
安装依赖
Lint检查
类型检查
单元测试
覆盖率检查
安全扫描
构建产物
质量门禁判定
报告归档
CI检查的特点是全面性与可追溯性，每次检查结果均会生成报告并归档，便于趋势分析。
三、自动化检查工具实践
3.1 ESLint 检查配置
ESLint是JavaScript生态中最主流的静态检查工具，支持自定义规则与插件扩展。以下是一个生产级ESLint检查配置示例：
// .eslintrc.js
module.exports = {
root: true,
env: {
browser: true,
es2021: true,
node: true,
},
extends: [
'eslint:recommended',
'plugin:@typescript-eslint/recommended',
'plugin:react/recommended',
'plugin:security/recommended',
],
parser: '@typescript-eslint/parser',
parserOptions: {
ecmaFeatures: { jsx: true },
ecmaVersion: 12,
sourceType: 'module',
},
plugins: ['@typescript-eslint', 'react', 'security'],
rules: {
'no-console': ['warn', { allow: ['warn', 'error'] }],
'no-unused-vars': 'off',
'@typescript-eslint/no-unused-vars': ['error', { argsIgnorePattern: '^_' }],
'@typescript-eslint/explicit-module-boundary-types': 'off',
'security/detect-object-injection': 'off',
'react/react-in-jsx-scope': 'off',
'no-eval': 'error',
'no-implied-eval': 'error',
},
overrides: [
{
files: ['**/*.test.ts', '**/*.test.tsx'],
rules: { '@typescript-eslint/no-explicit-any': 'off' },
},
],
};
配置完成后，通过以下命令执行检查：
# 检查指定文件
npx eslint src/**/*.ts –ext .ts
# 检查并自动修复
npx eslint src/**/*.ts –fix
# 生成检查报告(HTML格式)
npx eslint src/**/*.ts -f html -o eslint-report.html
3.2 SonarQube 静态检查
SonarQube提供更深入的代码质量检查，涵盖复杂度、重复率、代码异味与技术债评估。以下是SonarQube检查的集成步骤：
# sonar-project.properties
sonar.projectKey=my-project
sonar.projectName=My Project
sonar.projectVersion=1.0.0
sonar.sources=src
sonar.tests=tests
sonar.language=typescript
sonar.sourceEncoding=UTF-8
sonar.exclusions=**/node_modules/**,**/*.spec.ts
sonar.coverage.exclusions=**/*.config.ts,**/mocks/**
sonar.javascript.lcov.reportPaths=coverage/lcov.info
sonar.qualitygate.wait=true
在CI流水线中触发SonarQube检查：
# .gitlab-ci.yml
sonarqube-check:
stage: analysis
image:
name: sonarsource/sonar-scanner-cli:latest
entrypoint: [""]
variables:
SONAR_USER_HOME: "${CI_PROJECT_DIR}/.sonar"
script:
– sonar-scanner -Dsonar.qualitygate.wait=true
allow_failure: false
rules:
– if: '$CI_PIPELINE_SOURCE == "merge_request_event"'
– if: '$CI_COMMIT_BRANCH == "main"'
SonarQube的质量门禁(Quality Gate)机制是检查体系的核心，它将多项检查指标聚合为通过或不通过的二元判定。
3.3 Git Hooks 检查集成
通过husky与lint-staged实现提交前检查的自动化：
# 安装依赖
npm install –save-dev husky lint-staged
# 初始化husky
npx husky install
npx husky add .husky/pre-commit "npx lint-staged"
// lint-staged.config.js
module.exports = {
'*.{ts,tsx}': [
'eslint –fix',
'prettier –write',
'git add',
],
'*.{json,md,css}': [
'prettier –write',
'git add',
],
};
#!/bin/sh
# .husky/commit-msg
msg=$(cat "$1")
# 检查提交信息格式
if ! echo "$msg" | grep -qE "^(feat|fix|docs|style|refactor|test|chore)(\\(.+\\))?: .{1,72}$"; then
echo "ERROR: 提交信息不符合规范"
echo "格式: type(scope): subject"
exit 1
fi
四、检查结果分析与优化
4.1 检查报告解读
检查报告是优化检查体系的依据，需重点关注以下指标：
| 指标 | 含义 | 阈值建议 |
|—–|——|———|
| Bugs | 检查发现的缺陷数 | 0 |
| Vulnerabilities | 安全漏洞数 | 0 |
| Code Smells | 代码异味数 | <5 |
| Coverage | 测试覆盖率 | >=80% |
| Duplications | 重复率 | <3% |
| Technical Debt | 技术债 | <1h/1kLOC |
4.2 检查规则优化
检查规则并非一成不变，需根据团队实际情况持续调优：
4.3 检查体系持续改进
检查体系的成熟度可通过以下闭环持续提升：
#publish-mermaid-1786506416036-2{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#publish-mermaid-1786506416036-2 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506416036-2 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#publish-mermaid-1786506416036-2 .error-icon{fill:#552222;}#publish-mermaid-1786506416036-2 .error-text{fill:#552222;stroke:#552222;}#publish-mermaid-1786506416036-2 .edge-thickness-normal{stroke-width:1px;}#publish-mermaid-1786506416036-2 .edge-thickness-thick{stroke-width:3.5px;}#publish-mermaid-1786506416036-2 .edge-pattern-solid{stroke-dasharray:0;}#publish-mermaid-1786506416036-2 .edge-thickness-invisible{stroke-width:0;fill:none;}#publish-mermaid-1786506416036-2 .edge-pattern-dashed{stroke-dasharray:3;}#publish-mermaid-1786506416036-2 .edge-pattern-dotted{stroke-dasharray:2;}#publish-mermaid-1786506416036-2 .marker{fill:#333333;stroke:#333333;}#publish-mermaid-1786506416036-2 .marker.cross{stroke:#333333;}#publish-mermaid-1786506416036-2 svg{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:16px;}#publish-mermaid-1786506416036-2 p{margin:0;}#publish-mermaid-1786506416036-2 .label{font-family:\”trebuchet ms\”,verdana,arial,sans-serif;color:#333;}#publish-mermaid-1786506416036-2 .cluster-label text{fill:#333;}#publish-mermaid-1786506416036-2 .cluster-label span{color:#333;}#publish-mermaid-1786506416036-2 .cluster-label span p{background-color:transparent;}#publish-mermaid-1786506416036-2 .label text,#publish-mermaid-1786506416036-2 span{fill:#333;color:#333;}#publish-mermaid-1786506416036-2 .node rect,#publish-mermaid-1786506416036-2 .node circle,#publish-mermaid-1786506416036-2 .node ellipse,#publish-mermaid-1786506416036-2 .node polygon,#publish-mermaid-1786506416036-2 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506416036-2 .rough-node .label text,#publish-mermaid-1786506416036-2 .node .label text,#publish-mermaid-1786506416036-2 .image-shape .label,#publish-mermaid-1786506416036-2 .icon-shape .label{text-anchor:middle;}#publish-mermaid-1786506416036-2 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#publish-mermaid-1786506416036-2 .rough-node .label,#publish-mermaid-1786506416036-2 .node .label,#publish-mermaid-1786506416036-2 .image-shape .label,#publish-mermaid-1786506416036-2 .icon-shape .label{text-align:center;}#publish-mermaid-1786506416036-2 .node.clickable{cursor:pointer;}#publish-mermaid-1786506416036-2 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#publish-mermaid-1786506416036-2 .arrowheadPath{fill:#333333;}#publish-mermaid-1786506416036-2 .edgePath .path{stroke:#333333;stroke-width:1px;}#publish-mermaid-1786506416036-2 .flowchart-link{stroke:#333333;fill:none;}#publish-mermaid-1786506416036-2 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506416036-2 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#publish-mermaid-1786506416036-2 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506416036-2 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#publish-mermaid-1786506416036-2 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#publish-mermaid-1786506416036-2 .cluster text{fill:#333;}#publish-mermaid-1786506416036-2 .cluster span{color:#333;}#publish-mermaid-1786506416036-2 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:\”trebuchet ms\”,verdana,arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#publish-mermaid-1786506416036-2 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#publish-mermaid-1786506416036-2 rect.text{fill:none;stroke-width:0;}#publish-mermaid-1786506416036-2 .icon-shape,#publish-mermaid-1786506416036-2 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#publish-mermaid-1786506416036-2 .icon-shape p,#publish-mermaid-1786506416036-2 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#publish-mermaid-1786506416036-2 .icon-shape .label rect,#publish-mermaid-1786506416036-2 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#publish-mermaid-1786506416036-2 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#publish-mermaid-1786506416036-2 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#publish-mermaid-1786506416036-2 .node .neo-node{stroke:#9370DB;}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node rect,#publish-mermaid-1786506416036-2 [data-look=\”neo\”].cluster rect,#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].swimlane.cluster rect{filter:none;}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node path{stroke:#9370DB;stroke-width:1px;}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node .neo-line path{stroke:#9370DB;filter:none;}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].node circle .state-start{fill:#000000;}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506416036-2 [data-look=\”neo\”].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#publish-mermaid-1786506416036-2 :root{–mermaid-font-family:\”trebuchet ms\”,verdana,arial,sans-serif;}误报多漏报多速度慢覆盖低
检查执行
报告收集
数据分析
是否存在问题
优化规则精度
增加检查规则
优化检查性能
扩展检查范围
灰度验证
全量发布
持续改进的关键在于建立可度量的检查指标体系，定期复盘检查有效性，让检查体系与团队工程能力同步进化。检查不是终点，而是驱动质量持续提升的引擎。
