antoinezambelli/forge

[MINED116] Workflow uses `secrets.CODECOV_TOKEN` on a `pull_request` trigger: This workflow triggers on `pull_request`, which checks out the FORK's code. Referencing `${ secrets.CODECOV_TOKEN }` lets…

[COMP001] High cognitive complexity: Function `main` has cognitive complexity 36 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested branche…

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED001] Bare Except Pass: except: pass or except Exception: pass — silently swallows everything including KeyboardInterrupt and bugs.

[MINED006] Overcatch Baseexception: except BaseException: ... — prevents Ctrl+C and SystemExit from working.

[MINED106] Phantom test coverage: test_is_frozen: Test function `test_is_frozen` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage withou…

[MINED106] Phantom test coverage: test_is_frozen: Test function `test_is_frozen` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage withou…

[MINED106] Phantom test coverage: test_strict_unknown_model_raises: Test function `test_strict_unknown_model_raises` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_frozen: Test function `test_frozen` runs code but contains no assert / expect / should call — it passes regardless of behaviour. Adds line coverage without veri…

[MINED106] Phantom test coverage: test_unknown_tool_consumes_iteration: Test function `test_unknown_tool_consumes_iteration` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_unknown_tool_exhausts_retries: Test function `test_unknown_tool_exhausts_retries` runs code but contains no assert / expect / should call — it passes regardless…

[MINED106] Phantom test coverage: test_unknown_tool_and_text_response_share_retry_counter: Test function `test_unknown_tool_and_text_response_share_retry_counter` runs code but contains no assert / e…

[MINED106] Phantom test coverage: test_tool_error_consumes_iteration: Test function `test_tool_error_consumes_iteration` runs code but contains no assert / expect / should call — it passes regardless…

[MINED106] Phantom test coverage: test_stream_without_final_chunk_raises_stream_error: Test function `test_stream_without_final_chunk_raises_stream_error` runs code but contains no assert / expect / …

[MINED106] Phantom test coverage: test_resolution_error_does_not_increment_consecutive_tool_errors: Test function `test_resolution_error_does_not_increment_consecutive_tool_errors` runs code but cont…

[MINED106] Phantom test coverage: test_prereq_exhaustion_raises: Test function `test_prereq_exhaustion_raises` runs code but contains no assert / expect / should call — it passes regardless of behavi…

[MINED106] Phantom test coverage: test_start_noop_for_ollama: Test function `test_start_noop_for_ollama` runs code but contains no assert / expect / should call — it passes regardless of behaviour. A…

[MINED106] Phantom test coverage: test_start_llamafile_no_runtime_raises: Test function `test_start_llamafile_no_runtime_raises` runs code but contains no assert / expect / should call — it passes re…

[MINED106] Phantom test coverage: test_stop_terminates_process: Test function `test_stop_terminates_process` runs code but contains no assert / expect / should call — it passes regardless of behaviou…

[MINED106] Phantom test coverage: test_raises_on_unknown_required_step: Test function `test_raises_on_unknown_required_step` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_raises_on_unknown_terminal_tool: Test function `test_raises_on_unknown_terminal_tool` runs code but contains no assert / expect / should call — it passes regard…

[MINED106] Phantom test coverage: test_raises_on_key_name_mismatch: Test function `test_raises_on_key_name_mismatch` runs code but contains no assert / expect / should call — it passes regardless of …

[MINED106] Phantom test coverage: test_raises_when_terminal_tool_in_required_steps: Test function `test_raises_when_terminal_tool_in_required_steps` runs code but contains no assert / expect / should…

[MINED106] Phantom test coverage: test_raises_on_unknown_terminal_tool_in_list: Test function `test_raises_on_unknown_terminal_tool_in_list` runs code but contains no assert / expect / should call — …

[MINED106] Phantom test coverage: test_raises_when_any_terminal_tool_in_required_steps: Test function `test_raises_when_any_terminal_tool_in_required_steps` runs code but contains no assert / expect …

[MINED106] Phantom test coverage: test_raises_on_unknown_prerequisite_name_only: Test function `test_raises_on_unknown_prerequisite_name_only` runs code but contains no assert / expect / should call …

[MINED106] Phantom test coverage: test_raises_on_unknown_prerequisite_arg_matched: Test function `test_raises_on_unknown_prerequisite_arg_matched` runs code but contains no assert / expect / should c…

[MINED106] Phantom test coverage: test_get_callable_raises_keyerror_for_unknown: Test function `test_get_callable_raises_keyerror_for_unknown` runs code but contains no assert / expect / should call …

[MINED106] Phantom test coverage: test_validates_on_construction: Test function `test_validates_on_construction` runs code but contains no assert / expect / should call — it passes regardless of beha…

[MINED106] Phantom test coverage: test_validates_on_construction: Test function `test_validates_on_construction` runs code but contains no assert / expect / should call — it passes regardless of beha…

[MINED108] `self._collect_usage` used but never assigned in __init__: Method `send` of class `CountingClientWrapper` reads `self._collect_usage`, but no assignment to it exists in __init__ (and no cl…

[MINED108] `self._collect_usage` used but never assigned in __init__: Method `send_stream` of class `CountingClientWrapper` reads `self._collect_usage`, but no assignment to it exists in __init__ (an…

[MINED108] `self._tag` used but never assigned in __init__: Method `label` of class `ConfigKey` reads `self._tag`, but no assignment to it exists in __init__ (and no class-level fallback). This raise…

[MINED108] `self._tag` used but never assigned in __init__: Method `short_label` of class `ConfigKey` reads `self._tag`, but no assignment to it exists in __init__ (and no class-level fallback). This…

[MINED108] `self._next` used but never assigned in __init__: Method `send` of class `MockClient` reads `self._next`, but no assignment to it exists in __init__ (and no class-level fallback). This rai…

[MINED108] `self._next` used but never assigned in __init__: Method `send_stream` of class `MockClient` reads `self._next`, but no assignment to it exists in __init__ (and no class-level fallback). T…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `setup_method` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (and no class-…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_no_terminal_no_nudge` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_before_steps_nudges` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_escalation_tiers` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (and …

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_escalation_tiers` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (and …

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_escalation_tiers` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (and …

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_tier_caps_at_3` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in __init__ (and no…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_after_steps_satisfied_no_nudge` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it e…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_after_steps_satisfied_no_nudge` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it e…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_after_steps_satisfied_no_nudge` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it e…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_with_partial_steps_nudges` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_terminal_with_partial_steps_nudges` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_non_terminal_tools_always_pass` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in …

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_batch_with_terminal_and_others` of class `TestStepEnforcerCheck` reads `self.enforcer`, but no assignment to it exists in …

[MINED108] `self.enforcer` used but never assigned in __init__: Method `setup_method` of class `TestStepEnforcerRecord` reads `self.enforcer`, but no assignment to it exists in __init__ (and no class…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_initially_not_satisfied` of class `TestStepEnforcerRecord` reads `self.enforcer`, but no assignment to it exists in __init…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_partial_not_satisfied` of class `TestStepEnforcerRecord` reads `self.enforcer`, but no assignment to it exists in __init__…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_partial_not_satisfied` of class `TestStepEnforcerRecord` reads `self.enforcer`, but no assignment to it exists in __init__…

[MINED108] `self.enforcer` used but never assigned in __init__: Method `test_partial_not_satisfied` of class `TestStepEnforcerRecord` reads `self.enforcer`, but no assignment to it exists in __init__…

[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

[MINED115] Action `codecov/codecov-action` pinned to mutable ref `@v5`: `uses: codecov/codecov-action@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that m…

[SEC029] Server-Side Request Forgery (SSRF) — outbound HTTP from user input: Outbound HTTP request to a user-controlled URL without allowlist validation. Attackers can probe internal services (169.25…

[COMP001] High cognitive complexity: Function `_phase1` has cognitive complexity 15 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to understand — nested bran…

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

Duplicated implementation block across source files

Duplicated implementation block across source files

Duplicated implementation block across source files

[COMP001] High cognitive complexity: Function `mock_backend_with_health` has cognitive complexity 10 (SonarSource scale). Cognitive complexity measures how hard the function is for a human to underst…

[COMP001] High cognitive complexity (and 15 more): Same pattern found in 15 additional files. Review if needed.

[MINED043] Http Not Https: Hardcoded http:// (not localhost) for endpoints that handle credentials or data.

[MINED050] Stub Only Function (and 2 more): Same pattern found in 2 additional files. Review if needed.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED050] Stub Only Function: Function declared but body is just pass, return None, raise NotImplementedError, or TODO comment.

[MINED062] Python Dataclass No Fields (and 8 more): Same pattern found in 8 additional files. Review if needed.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED062] Python Dataclass No Fields: @dataclass over an empty class — unfinished model.

[MINED064] Python Input Call: input() blocks for stdin. Inappropriate in services.