dtcenter / METplus / 40365304790

92%

develop: 93%

push

github

Address SonarQube security findings

- Prevent tar extraction outside the output directory in
  hrd_frd_sonde_find_tar.py, using the data filter when available
- Require HTTPS, including on redirects, when downloading GempakToCF.jar
- Prevent diff_util from copying files outside of the diff directory
- Reject ID strings that contain a path and check output paths in
  generate_met_configs.py

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

0 of 7 new or added lines in 1 file covered. (0.0%)

9851 of 10679 relevant lines covered (92.25%)

1.84 hits per line