mirror of
https://github.com/storytold/filmcraft.git
synced 2026-10-24 10:10:05 -06:00
Dylan M. Taylor
7576186878
* security: validate CLI paths/args in dev tools (SonarCloud S2083/S8707/S8705/S7044) Resolve and validate command-line path arguments before use, enforce HTTPS at download sinks, and confirm path containment. Hardens local codegen/fetch tools against path-traversal and command-argument-injection findings. * ci: exclude dev tool scripts from SonarCloud coverage gate The extract_tables.py codegen tools aren't part of the unit-tested surface; exclude tools/, docs/, examples/ from coverage so the new-code coverage gate doesn't block hardening-only changes.
4 lines
130 B
Properties
4 lines
130 B
Properties
sonar.projectKey=storytold_filmcraft
|
|
sonar.organization=storytold
|
|
sonar.coverage.exclusions=**/tools/**,**/docs/**,**/examples/**
|