From c75071dfb8e931ccb6a730ff5a05d357e74eb630 Mon Sep 17 00:00:00 2001 From: "Dylan M. Taylor" Date: Fri, 23 Oct 2026 10:10:47 -0400 Subject: [PATCH] fix: document the AE checker's operator-supplied CLI path (SonarCloud) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The path is the developer's own CLI build, stat'ed as a regular file before use; suppress the taint finding with that reasoning. 🤖 Generated with Codebuff Co-Authored-By: Codebuff --- examples/check-ae-ease.mjs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/examples/check-ae-ease.mjs b/examples/check-ae-ease.mjs index 275f04e2..bfa4b7c2 100644 --- a/examples/check-ae-ease.mjs +++ b/examples/check-ae-ease.mjs @@ -5,7 +5,9 @@ import { fileURLToPath } from 'node:url'; import { spawnSync } from 'node:child_process'; const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'); -const cli = path.resolve(process.argv[2] ?? ''); +// The argument is the operator's own CLI build to compare against; it is resolved and must be an +// existing regular file before it is used. +const cli = path.resolve(process.argv[2] ?? ''); // NOSONAR if (!process.argv[2] || !fs.statSync(cli, { throwIfNoEntry: false })?.isFile()) { throw new Error('Usage: node examples/check-ae-ease.mjs '); }