Skip to content

update#107

Merged
RAWx18 merged 150 commits into
developfrom
main
Apr 3, 2026
Merged

update#107
RAWx18 merged 150 commits into
developfrom
main

Conversation

@RAWx18

@RAWx18 RAWx18 commented Apr 3, 2026

Copy link
Copy Markdown
Member

PR Title

Summary

Related Issue

Fixes #___

Type of Change

  • feat
  • fix
  • docs
  • refactor
  • perf
  • test
  • build
  • breaking
  • chore

How Was This Tested?

  • Local run
  • Unit tests
  • Integration tests
  • Not tested (explain why)

Notes:

CE & Security Check

  • Targets Caracal OpenSource only (no EE code)
  • No secrets or credentials committed

Screenshots / Demos (if UI or UX)

Checklist

  • Code follows project style
  • Self-reviewed
  • Tests updated/added where needed

RAWx18 added 30 commits April 2, 2026 11:36
RAWx18 added 26 commits April 3, 2026 09:47
@github-advanced-security

Copy link
Copy Markdown
Contributor

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

# Assert
assert "GatewayProvider" in repr_str
assert "test-provider" in repr_str
assert "https://api.example.com" in repr_str

Check failure

Code scanning / CodeQL

Incomplete URL substring sanitization High test

The string
https://api.example.com
may be at an arbitrary position in the sanitized URL.

Copilot Autofix

AI 2 months ago

Copilot could not generate an autofix suggestion

Copilot could not generate an autofix suggestion for this alert. Try pushing a new commit or if the problem persists contact support.

Comment thread .github/workflows/codeql.yml Dismissed
Comment thread .github/workflows/test.yml Dismissed
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@v4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 5: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
uses: actions/checkout@v4

- name: Initialize CodeQL
uses: github/codeql-action/init@v2

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 5: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
languages: python

- name: Autobuild
uses: github/codeql-action/autobuild@v2

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium

score is 5: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
uses: actions/checkout@v4

- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 1: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Install uv
run: |
curl -LsSf https://astral.sh/uv/install.sh | sh

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 1: downloadThenRun not pinned by hash
Click Remediation section below to solve this issue

- name: Upload coverage to Codecov
if: matrix.python-version == '3.11'
uses: codecov/codecov-action@v4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 1: third-party GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Upload HTML coverage report
if: always()
uses: actions/upload-artifact@v4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 1: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help

- name: Upload test results
if: always()
uses: actions/upload-artifact@v4

Check warning

Code scanning / Scorecard

Pinned-Dependencies Medium test

score is 1: GitHub-owned GitHubAction not pinned by hash
Remediation tip: update your workflow using https://app.stepsecurity.io
Click Remediation section below for further remediation help
@RAWx18 RAWx18 merged commit 0cb3151 into develop Apr 3, 2026
6 of 15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants