mirror of
https://github.com/storytold/effectcraft.git
synced 2026-10-24 18:18:17 -06:00
The argv->spawnSync/fs flow in this local dev example is flagged as S8707/S8705 regardless of validation (SonarCloud can't recognize the CLI trust boundary), and the attempted fix fails the new_security_rating gate. Reverting to keep the PR green; the finding will be marked Won't Fix (dev tool, developer-supplied arg).