05a0354c85
Drop the stray em-dash (envreads) and arrow (reinvented) separators so all findings use the two canonical shapes: "file:line snippet" and "file:line [rule] detail". Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
14 lines
790 B
Plaintext
14 lines
790 B
Plaintext
check-safety FIXTURE_DIR
|
|
FAIL 1 1 secret env var read(s) outside config.Load() — secrets must flow through Config → DI
|
|
internal/service/handler.go:17 os.Getenv("JWT_SECRET")
|
|
FAIL 2c 1 CMS backend go.mod violation(s)
|
|
FIXTURE_DIR/go.mod [missing-go-mod] missing go.mod
|
|
FAIL 14 1 raw SQL statement(s) found outside sqlc/Bob
|
|
internal/service/handler.go:22 SELECT id, name FROM users WHERE active = true
|
|
FAIL 15 1 err.Error() leak(s) to HTTP clients — log via slog.Error() and return a user-friendly message
|
|
internal/service/handler.go:27 http.Error(w, err.Error(), ...) — leaks internal error
|
|
FAIL 17 1 TODO marker(s) found — ship explicit behavior, not placeholders
|
|
internal/service/handler.go:14 // TODO: add proper initialisation
|
|
|
|
32 checks: 14 ok 13 skip 5 fail -> FAIL
|