实现审计覆盖门禁与外部集成日志闭环

cmd/audit-coverage/main.go

@@ -0,0 +1,38 @@
+// audit-coverage 生成全系统审计覆盖显式清单，生成结果必须经过业务、研发和安全评审。
+package main
+
+import (
+	"fmt"
+	"os"
+	"path/filepath"
+
+	"github.com/break/junhong_cmp_fiber/internal/governance/auditcoverage"
+)
+
+func main() {
+	if err := run(); err != nil {
+		_, _ = fmt.Fprintln(os.Stderr, "生成审计覆盖清单失败：", err)
+		os.Exit(1)
+	}
+}
+
+func run() error {
+	root, err := os.Getwd()
+	if err != nil {
+		return err
+	}
+	entries, err := auditcoverage.Scan(root)
+	if err != nil {
+		return err
+	}
+	data, err := auditcoverage.MarshalManifest(entries)
+	if err != nil {
+		return err
+	}
+	path := filepath.Join(root, ".scratch/tech-global-audit/审计覆盖清单.json")
+	if err := os.WriteFile(path, append(data, '\n'), 0o644); err != nil {
+		return err
+	}
+	fmt.Printf("已生成 %d 条审计覆盖入口：%s\n", len(entries), path)
+	return nil
+}