← Legacy view v2 (rp.*)

wchl3927/vi-pro-pipeline

https://github.com/wchl3927/vi-pro-pipeline.git · lang: python · LOC: · source: user_submitted

Quality

40.2

Grade D

Security

100.0

Findings

34

0 critical · 5 high

Status

completed

May 28, 2026 23:09

medium: 28 high: 5 low: 1

Top rules by occurrence

Rule	Severity	Count
`MINED111` Bare except continues silently	medium	25
`MINED115` GitHub Action pinned to mutable ref (not 40-char SHA)	high	4
`CORE_NO_LICENSE` No LICENSE file	low	1
`CORE_NO_README` No README file found	medium	1
`CORE_NO_TESTS` No test files found	high	1
`CORE_LARGE_FILES` Average file size is 1080 lines (recommend <300)	medium	1
`CFG006` [CFG006] Missing .gitignore: No .gitignore file. Risk of co…	medium	1

First 34 findings (severity-sorted)

high CORE_NO_TESTS No test files found

No test files found

high MINED115 GitHub Action pinned to mutable ref (not 40-char SHA) CWE-829

.github/workflows/update_crypto.yml:15 · conf 0.90

[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

high MINED115 GitHub Action pinned to mutable ref (not 40-char SHA) CWE-829

.github/workflows/update_crypto.yml:22 · conf 0.90

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

high MINED115 GitHub Action pinned to mutable ref (not 40-char SHA) CWE-829

.github/workflows/update-stocks.yml:15 · conf 0.90

[MINED115] Action `actions/checkout` pinned to mutable ref `@v4`: `uses: actions/checkout@v4` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made the tj-a…

high MINED115 GitHub Action pinned to mutable ref (not 40-char SHA) CWE-829

.github/workflows/update-stocks.yml:22 · conf 0.90

[MINED115] Action `actions/setup-python` pinned to mutable ref `@v5`: `uses: actions/setup-python@v5` resolves at workflow-run time. Tags and branches can be re-pushed by the action owner; that made …

medium CFG006 [CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.

· conf 1.00

[CFG006] Missing .gitignore: No .gitignore file. Risk of committing secrets and build artifacts.

medium CORE_LARGE_FILES Average file size is 1080 lines (recommend <300)

Average file size is 5300 lines (recommend <300)

medium CORE_NO_README No README file found

No README file found

medium MINED111 Bare except continues silently

calculate_crypto.py:117 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:311 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:330 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:379 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:400 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:473 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:579 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:658 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:680 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:2152 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:2695 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:2867 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:3572 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:3724 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:4184 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:4429 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_crypto.py:4773 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:670 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:3464 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:3535 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:3942 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:3999 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:4053 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:4783 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

medium MINED111 Bare except continues silently

calculate_stocks.py:5036 · conf 1.00

[MINED111] Bare except continues silently: Bare `except:` (or `except Exception:`) that runs code without re-raising or logging the exception. Hides real failures and makes bugs hard to diagnose.

low CORE_NO_LICENSE No LICENSE file

No LICENSE file

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/f3913967-0d48-43d5-969a-96d35560314c/.