Files
compounding-intelligence/scripts
STEP35 eec2ab2642
Some checks failed
Test / pytest (pull_request) Failing after 8s
feat: add security linter (#158) — 9.4: Security Linter
Add scripts/security_linter.py: standalone CLI that scans Python code
for common security vulnerabilities with severity ratings (CRITICAL/HIGH/
MEDIUM/LOW). Outputs JSON report by default, Markdown optional.

Checks include: eval/exec, subprocess shell=True, pickle, yaml.load,
hardcoded secrets, weak hashes, SQL injection patterns, and dynamic
imports.

Add scripts/test_security_linter.py: pytest test suite validating
core detection patterns and report generation.

This implements the smallest concrete fix to satisfy the acceptance
criteria: runs security linters, reports findings with severity,
outputs security lint report.

Closes #158
2026-04-26 02:54:43 -04:00
..
2026-04-21 11:57:53 +00:00