fix:codeql scan Security issue

Author: msslulu

app/src/main/java/com/tinyengine/it/task/DatabaseCleanupService.java

@@ -44,6 +44,7 @@ public class DatabaseCleanupService {
     private static final int HEX_NIBBLE_SHIFT = 4;
     private static final int HEX_NIBBLE_MASK = 0x0F;
     private static final int HEX_RADIX = 16;
+    private static final SecureRandom EXECUTION_ID_RANDOM = new SecureRandom();
 
     private final boolean cleanupEnabled;
     private final boolean useTruncate;
@@ -164,12 +165,11 @@ public void init() {
      * @return whitelist table names
      */
     public List<String> getWhitelistTables() {
-        return whitelistTables;
+        return List.copyOf(whitelistTables);
     }
     private static String createExecutionId() {
-        final SecureRandom random = new SecureRandom();
         final byte[] randomBytes = new byte[(EXEC_ID_LENGTH + 1) / 2];
-        random.nextBytes(randomBytes);
+        EXECUTION_ID_RANDOM.nextBytes(randomBytes);
         final StringBuilder identifier = new StringBuilder(randomBytes.length * 2);
         for (final byte randomByte : randomBytes) {
             identifier.append(

base/src/main/java/com/tinyengine/it/common/utils/SM4Utils.java

@@ -24,6 +24,7 @@ public final class SM4Utils {
     private static final int IV_LENGTH_BYTES = 12;
     private static final int GCM_TAG_BITS = 128;
     private static final Base64Codec BASE64_CODEC = new Base64Codec();
+    private static final SecureRandom SECURE_RANDOM = new SecureRandom();
     static {
         Security.addProvider(new BouncyCastleProvider());
     }
@@ -49,8 +50,7 @@ public static String encrypt(final String apiKey, final String base64Key)
             throws GeneralSecurityException {
         final byte[] key = decodeKey(base64Key);
         final byte[] nonce = new byte[IV_LENGTH_BYTES];
-        final SecureRandom random = new SecureRandom();
-        random.nextBytes(nonce);
+        SECURE_RANDOM.nextBytes(nonce);
 
         final byte[] encrypted =
                 doCipher(
@@ -123,7 +123,7 @@ private static final class KeyGeneratorService {
 
         private KeyGeneratorService() throws GeneralSecurityException {
             generator = KeyGenerator.getInstance(ALGORITHM, "BC");
-            generator.init(KEY_SIZE, new SecureRandom());
+            generator.init(KEY_SIZE, SECURE_RANDOM);
         }
 
         private byte[] generate() {