Conversation
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF ScorecardScorecard details
Scanned Files
|
| echo "SGAI_API_KEY not set, skipping real API tests" | ||
| fi | ||
| env: | ||
| SGAI_API_KEY: ${{ secrets.SGAI_API_KEY }} |
There was a problem hiding this comment.
@lurenss / @VinciGit00 can you please set env on github?
| @@ -0,0 +1 @@ | |||
| sgai-3672f339-d597-45f3-a6f3-d7041fec607b | |||
There was a problem hiding this comment.
Bug: API Key Exposed in Version Control
A ScrapeGraph AI API key (sgai-3672f339-d597-45f3-a6f3-d7041fec607b) was accidentally committed to api-keys-to-remove.txt. Although this file was intended for tracking keys to remove, it contains the literal key, posing a serious security vulnerability by exposing sensitive credentials that should never be in version control.
| fceeffb02b67198c49c2c32959bcfecb97c3c0e6 3625518bec909a831578029b179c07722fd12ab9 | ||
| fda99dc83d96af0fbbb4b06fc3a8db0d05813b0e c7c91bd7c6f3550089d1231b2167ca18921fd48f | ||
| feda42cc6eb41a497df214f3840bc77e3fb4bcdf 6c619c11ea90c81e0054b36504cc3d9e62dce249 | ||
| ffe9bf7b2296facd934d00d095c18620fccdd95c 682baa39695f564b684568d9a6bf23ecda00b5ec |
There was a problem hiding this comment.
Bug: Repo-Cleaner Report Files Committed
Temporary BFG Repo-Cleaner report files (cache-stats.txt, changed-files.txt, object-id-map.old-new.txt), generated during a git history cleaning operation, were accidentally committed to the repository. These files contain internal cleanup data and should not be part of the codebase.
Additional Locations (2)
| if args.async_only: | ||
| cmd.append("-m asyncio") | ||
| elif args.sync_only: | ||
| cmd.append("-m 'not asyncio'") |
There was a problem hiding this comment.
Bug: Test Script Marker Parsing Error
The run_real_tests.py and run_tests.py scripts incorrectly pass the pytest marker expression not asyncio with literal single quotes (e.g., '-m 'not asyncio''). This causes pytest to misinterpret the marker, leading to incorrect test filtering when the --sync-only flag is used. The quotes should be removed from the marker string.
Additional Locations (1)
|
🎉 This PR is included in version 1.18.0 🎉 The release is available on:
Your semantic-release bot 📦🚀 |
No description provided.