vyahello / flake8-debug / 23440511553

100%

push

github

security: apply all audit fixes (H-01 through I-04) (#13)

* security: apply all audit fixes (H-01 through I-04)

H-01: Pin GitHub Actions to immutable commit SHAs
  - actions/checkout@v1 → @11bd71901 (v4.2.2)
  - actions/setup-python@v1 → @42375524b (v5.4.0)

H-02: Remove phantom astpretty==2.1.0 production dependency (unused)

M-01: Fix detection bypass — add generic_visit(node) to DebugVisitor.visit_Call
  so nested debug calls (e.g. foo(print(x))) are no longer silently missed

M-02: Fix false positives on arbitrary objects — restrict attribute-based
  detection to known debugger modules (pdb, ipdb) only for set_trace

M-03: Update outdated dev dependencies
  - pytest-cov 3.0.0 → 7.1.0
  - coverage 5.3 → 7.13.5
  - coveralls 2.1.2 → 4.1.0
  - wheel 0.45.1 → 0.46.3

L-01: Restrict CI trigger to master branch; add least-privilege permissions block
  Use COVERALLS_REPO_TOKEN instead of broad GITHUB_TOKEN for coveralls

L-02: Move Meta import inside if __name__ == '__main__' in setup.py to prevent
  source package execution at pip install time

L-03: Add RecursionError guard in NoDebug.run() for pathologically nested ASTs

L-04: Add .github/SECURITY.md with vulnerability disclosure policy

I-01: Remove unused self._filename attribute from NoDebug.__init__

I-03: Inherit Error from abc.ABC for proper abstract base class semantics

I-04: Remove committed __pycache__ and .DS_Store files from git index

Tests: add 5 regression tests covering nested call detection and false-positive
  elimination for arbitrary object method calls

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* revert: restore analysis.yml to original state

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* ci: remove Python 3.9 from test matrix

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: shorten comment in plugin.py to satisfy E501 line length

Co-a... (continued)

14 of 16 new or added lines in 2 files covered. (87.5%)

60 of 62 relevant lines covered (96.77%)

4.81 hits per line