Skip to content

[SG-4885] feat(platform): tirith platform check — region key, document discovery, shared upload endpoint - #272

Open
refeed wants to merge 11 commits into
mainfrom
feat/gate-capable-engine
Open

[SG-4885] feat(platform): tirith platform check — region key, document discovery, shared upload endpoint#272
refeed wants to merge 11 commits into
mainfrom
feat/gate-capable-engine

fix(report): render Checkov findings, which came out as an empty block

9d0cc81
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis cancelled Aug 5, 2026 in 26s

SonarQube Cloud analysis failed

❌ The last analysis has failed.

See analysis details on SonarQube Cloud

Annotations

Check failure on line 41 in src/tirith/platform/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFS2h8aBmfb0QNXL&open=AZ_QdFS2h8aBmfb0QNXL&pullRequest=272

Check warning on line 219 in tests/platform/test_cli_options.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Split this composite assertion into separate assertions. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFWrh8aBmfb0QNXn&open=AZ_QdFWrh8aBmfb0QNXn&pullRequest=272

Check warning on line 165 in src/tirith/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this commented out code. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFVdh8aBmfb0QNXc&open=AZ_QdFVdh8aBmfb0QNXc&pullRequest=272

Check failure on line 77 in src/tirith/platform/regions.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 18 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUkh8aBmfb0QNXQ&open=AZ_QdFUkh8aBmfb0QNXQ&pullRequest=272

Check warning on line 260 in src/tirith/platform/report.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Add replacement fields or use a normal string instead of an f-string. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUch8aBmfb0QNXP&open=AZ_QdFUch8aBmfb0QNXP&pullRequest=272

Check failure on line 174 in src/tirith/platform/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 24 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFS2h8aBmfb0QNXK&open=AZ_QdFS2h8aBmfb0QNXK&pullRequest=272

Check warning on line 124 in tests/platform/test_cli_options.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFWrh8aBmfb0QNXm&open=AZ_QdFWrh8aBmfb0QNXm&pullRequest=272

Check failure on line 135 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFVDh8aBmfb0QNXY&open=AZ_QdFVDh8aBmfb0QNXY&pullRequest=272

Check failure on line 151 in src/tirith/platform/archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 29 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFU7h8aBmfb0QNXV&open=AZ_QdFU7h8aBmfb0QNXV&pullRequest=272

Check warning on line 64 in tests/platform/test_discover.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Split this composite assertion into separate assertions. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFWjh8aBmfb0QNXl&open=AZ_QdFWjh8aBmfb0QNXl&pullRequest=272

Check failure on line 275 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFVDh8aBmfb0QNXZ&open=AZ_QdFVDh8aBmfb0QNXZ&pullRequest=272

Check failure on line 58 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFVDh8aBmfb0QNXa&open=AZ_QdFVDh8aBmfb0QNXa&pullRequest=272

Check failure on line 114 in src/tirith/platform/discover.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape from shell sandboxes. Refactor this code to validate untrusted OS commands before using them. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUUh8aBmfb0QNXM&open=AZ_QdFUUh8aBmfb0QNXM&pullRequest=272

Check warning on line 51 in setup.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this commented out code. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFXMh8aBmfb0QNXq&open=AZ_QdFXMh8aBmfb0QNXq&pullRequest=272

Check warning on line 88 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace this constructor call with a literal. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFOUh8aBmfb0QNXG&open=AZ_QdFOUh8aBmfb0QNXG&pullRequest=272

Check warning on line 205 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this commented out code. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFOUh8aBmfb0QNXI&open=AZ_QdFOUh8aBmfb0QNXI&pullRequest=272

Check failure on line 114 in src/tirith/platform/discover.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape from shell sandboxes. Refactor this code to validate untrusted data before passing them to OS commands. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUUh8aBmfb0QNXN&open=AZ_QdFUUh8aBmfb0QNXN&pullRequest=272

Check failure on line 184 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 21 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUsh8aBmfb0QNXR&open=AZ_QdFUsh8aBmfb0QNXR&pullRequest=272

Check failure on line 233 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 20 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUsh8aBmfb0QNXS&open=AZ_QdFUsh8aBmfb0QNXS&pullRequest=272

Check warning on line 93 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace this constructor call with a literal. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFOUh8aBmfb0QNXH&open=AZ_QdFOUh8aBmfb0QNXH&pullRequest=272

Check warning on line 85 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace this constructor call with a literal. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFOUh8aBmfb0QNXF&open=AZ_QdFOUh8aBmfb0QNXF&pullRequest=272

Check warning on line 446 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Either merge this branch with the identical one on line "444" or change one of the implementations. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFUsh8aBmfb0QNXT&open=AZ_QdFUsh8aBmfb0QNXT&pullRequest=272

Check failure on line 66 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 17 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFVDh8aBmfb0QNXX&open=AZ_QdFVDh8aBmfb0QNXX&pullRequest=272

Check warning on line 247 in tests/providers/json/playbook_ansible_lint.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Make sure granting access to others is safe here. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFWbh8aBmfb0QNXk&open=AZ_QdFWbh8aBmfb0QNXk&pullRequest=272

Check warning on line 53 in tests/providers/json/playbook_ansible_lint.yml

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Make sure granting access to others is safe here. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_QdFWbh8aBmfb0QNXe&open=AZ_QdFWbh8aBmfb0QNXe&pullRequest=272
View more details on SonarQubeCloud