thysrael/horizon

[MINED107] Missing import: `warnings` used but not imported: The file uses `warnings.something(...)` but never imports `warnings`. This raises NameError at runtime the first time the line executes.

[MINED107] Missing import: `platform` used but not imported: The file uses `platform.something(...)` but never imports `platform`. This raises NameError at runtime the first time the line executes.

[COMP001] High cognitive complexity: Function `_enrich_item` has cognitive complexity 44 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested…

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED020] Logging Credential Via Fstring: logger.error(f"failed for {api_key}") — secrets end up in log aggregators / sentry.

[MINED106] Phantom test coverage: test_raises_when_api_key_missing: Test function `test_raises_when_api_key_missing` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_raises_when_endpoint_missing: Test function `test_raises_when_endpoint_missing` runs code but contains no assert / expect / should call — it passes regardless o…

[MINED106] Phantom test coverage: test_unsupported_stage_raises: Test function `test_unsupported_stage_raises` runs code but contains no assert / expect / should call — it passes regardless of behavi…

[MINED106] Phantom test coverage: test_missing_run_raises: Test function `test_missing_run_raises` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds li…

[MINED106] Phantom test coverage: test_rejects_unsafe_summary_language: Test function `test_rejects_unsafe_summary_language` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_missing_artifact_raises: Test function `test_missing_artifact_raises` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_raises_when_api_key_missing: Test function `test_raises_when_api_key_missing` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_load_config_missing_file: Test function `test_load_config_missing_file` runs code but contains no assert / expect / should call — it passes regardless of behavi…

[MINED106] Phantom test coverage: test_disabled_webhook_skips_notification: Test function `test_disabled_webhook_skips_notification` runs code but contains no assert / expect / should call — it passe…

[MINED106] Phantom test coverage: test_http_error_logged: Test function `test_http_error_logged` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line…

[MINED106] Phantom test coverage: test_language_filter_skips_non_matching_lang: Test function `test_language_filter_skips_non_matching_lang` runs code but contains no assert / expect / should call — …

[MINED106] Phantom test coverage: test_language_filter_passes_matching_lang: Test function `test_language_filter_passes_matching_lang` runs code but contains no assert / expect / should call — it pas…

[MINED106] Phantom test coverage: test_no_language_filter_sends_all: Test function `test_no_language_filter_sends_all` runs code but contains no assert / expect / should call — it passes regardless o…

[MINED106] Phantom test coverage: test_no_hostname_raises_value_error: Test function `test_no_hostname_raises_value_error` runs code but contains no assert / expect / should call — it passes regardle…

[MINED106] Phantom test coverage: test_wrong_scheme_raises_value_error: Test function `test_wrong_scheme_raises_value_error` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_invalid_port_raises_value_error: Test function `test_invalid_port_raises_value_error` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_empty_env_var_value_raises_value_error: Test function `test_empty_env_var_value_raises_value_error` runs code but contains no assert / expect / should call — it…

[MINED106] Phantom test coverage: test_invalid_delivery_raises_validation_error: Test function `test_invalid_delivery_raises_validation_error` runs code but contains no assert / expect / should call …

[MINED106] Phantom test coverage: test_invalid_platform_raises_validation_error: Test function `test_invalid_platform_raises_validation_error` runs code but contains no assert / expect / should call …

[MINED106] Phantom test coverage: test_invalid_layout_raises_validation_error: Test function `test_invalid_layout_raises_validation_error` runs code but contains no assert / expect / should call — it…

[MINED106] Phantom test coverage: test_invalid_fallback_layout_raises_validation_error: Test function `test_invalid_fallback_layout_raises_validation_error` runs code but contains no assert / expect …

[MINED106] Phantom test coverage: test_invalid_overview_position_raises_validation_error: Test function `test_invalid_overview_position_raises_validation_error` runs code but contains no assert / exp…

[MINED108] `self._determine_time_window` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self._determine_time_window`, but no assignment to it exists in __init…

[MINED108] `self.fetch_all_sources` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self.fetch_all_sources`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.merge_cross_source_duplicates` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self.merge_cross_source_duplicates`, but no assignment to it ex…

[MINED108] `self._analyze_content` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self._analyze_content`, but no assignment to it exists in __init__ (and no c…

[MINED108] `self.merge_topic_duplicates` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self.merge_topic_duplicates`, but no assignment to it exists in __init…

[MINED108] `self._expand_twitter_discussion` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self._expand_twitter_discussion`, but no assignment to it exists i…

[MINED108] `self._sub_source_label` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self._sub_source_label`, but no assignment to it exists in __init__ (and no…

[MINED108] `self._enrich_important_items` used but never assigned in __init__: Method `run` of class `HorizonOrchestrator` reads `self._enrich_important_items`, but no assignment to it exists in __in…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._fetch_with_progress` used but never assigned in __init__: Method `fetch_all_sources` of class `HorizonOrchestrator` reads `self._fetch_with_progress`, but no assignment to it exists…

[MINED108] `self._sub_source_label` used but never assigned in __init__: Method `_fetch_with_progress` of class `HorizonOrchestrator` reads `self._sub_source_label`, but no assignment to it exists in…

[MINED108] `self._make_notifier` used but never assigned in __init__: Method `test_2xx_success_prints_response` of class `TestHTTPStatusHandling` reads `self._make_notifier`, but no assignment to it …

[MINED108] `self._cleanup` used but never assigned in __init__: Method `test_2xx_success_prints_response` of class `TestHTTPStatusHandling` reads `self._cleanup`, but no assignment to it exists in __…

[MINED108] `self._make_notifier` used but never assigned in __init__: Method `test_2xx_feishu_error_code_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._make_notifier`, but no a…

[MINED108] `self._cleanup` used but never assigned in __init__: Method `test_2xx_feishu_error_code_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._cleanup`, but no assignment to…

[MINED108] `self._make_notifier` used but never assigned in __init__: Method `test_2xx_dingtalk_error_code_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._make_notifier`, but no…

[MINED108] `self._cleanup` used but never assigned in __init__: Method `test_2xx_dingtalk_error_code_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._cleanup`, but no assignment …

[MINED108] `self._make_notifier` used but never assigned in __init__: Method `test_2xx_slack_ok_false_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._make_notifier`, but no assi…

[MINED108] `self._cleanup` used but never assigned in __init__: Method `test_2xx_slack_ok_false_prints_yellow_warning` of class `TestHTTPStatusHandling` reads `self._cleanup`, but no assignment to it…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

[MINED115] Action `astral-sh/setup-uv` pinned to mutable ref `@v3`: `uses: astral-sh/setup-uv@v3` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the …

[MINED115] Action `peaceiris/actions-gh-pages` pinned to mutable ref `@v4`: `uses: peaceiris/actions-gh-pages@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v6`: `uses: actions/checkout@v6` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `peaceiris/actions-gh-pages` pinned to mutable ref `@v4`: `uses: peaceiris/actions-gh-pages@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner…

[MINED118] Dockerfile FROM `python:3.11-slim` not pinned by digest: `FROM python:3.11-slim` resolves the tag at build time. The registry CAN re-push a different image for the same tag, so every build…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[SEC128] Async function without await — fire-and-forget Promise (AI mistake): Async call invoked without `await` returns an unhandled Promise. The outer function resolves before the inner work comple…

localStorage write failures are swallowed silently

[COMP001] High cognitive complexity: Function `_format_item` has cognitive complexity 23 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested…

Docker final stage has no non-root USER

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[SEC034] Log Injection / Log Forging — unsanitized user input in log: User input is logged without sanitizing newlines or control characters. Attackers inject `\n` to forge fake log entries, hide tra…

[SEC134] AI scaffold leftover — Lorem ipsum / example.com / John Doe in code: Lorem ipsum / John Doe / example.com left in non-test code. AI agents emit these as 'reasonable defaults' when they don't…

[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unf…

[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unf…

[SEC136] AI-typical over-broad exception handler swallowing all errors: Catch-all exception block that silently returns success or no-ops. AI agents reach for this pattern when a flaky test or an unf…

[COMP001] High cognitive complexity: Function `generate_webhook_overview` has cognitive complexity 8 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to underst…

Compose service does not declare a runtime user

Compose service lacks no-new-privileges hardening

.dockerignore misses sensitive defaults

[SEC006] XSS Risk: Direct HTML injection without sanitization.

[COMP001] High cognitive complexity (and 26 more): Same pattern found in 26 additional files. Review if needed.

[MINED049] Print Pii: Logging password/token/email/ssn directly to stdout.

[MINED050] Stub Only Function (and 1 more): Same pattern found in 1 additional files. Review if needed.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…