<!-- 在pom.xml中添加 -->
<dependency>
    <groupId>com.deepseek</groupId>
    <artifactId>code-analyzer</artifactId>
    <version>1.3.0</version>
</dependency>

public class UserService {
    // 漏洞1：未處理空指針
    public String getUserRole(String userId) {
        return UserDB.query(userId).getRole();
    }

    // 漏洞2：資源未關(guān)閉
    public void exportUsers() {
        FileOutputStream fos = new FileOutputStream("users.csv");
        fos.write(getAllUsers().getBytes());
    }

    // 漏洞3：SQL注入風(fēng)險
    public void deleteUser(String input) {
        Statement stmt = conn.createStatement();
        stmt.execute("DELETE FROM users WHERE id = " + input);
    }
}

public class UserService {
    // 修復(fù)1：Optional處理空指針
    public String getUserRole(String userId) {
        return Optional.ofNullable(UserDB.query(userId))
                      .map(User::getRole)
                      .orElse("guest");
    }

    // 修復(fù)2：自動資源管理
    public void exportUsers() {
        try (FileOutputStream fos = new FileOutputStream("users.csv")) {
            fos.write(getAllUsers().getBytes());
        }
    }

    // 修復(fù)3：預(yù)編譯防注入
    public void deleteUser(String input) {
        PreparedStatement pstmt = conn.prepareStatement(
            "DELETE FROM users WHERE id = ?");
        pstmt.setString(1, input);
        pstmt.executeUpdate();
    }
}

rules:
  security:
    sql_injection: error
  performance:
    loop_complexity: warning
  style:
    var_naming: info

- name: Deepseek Code Review
  uses: deepseek-ai/code-review-action@v2
  with:
    severity_level: warning
    fail_on: error