stacklok / toolhive / 42022014713

73%

Build Type

push

github

Committed by web-flow

Commit Message

fix: address open code scanning alerts (#7056)

* Fix integer conversion and bump x/net in sdk/go

Replace the helper-based port range check with a combined bounds
check and int32 conversion so the conversion is provably safe, and
drop the now-unneeded nolint directives. Bump golang.org/x/net in
sdk/go to v0.62.0.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PxAB5fwCwozVKWU6uxujjU
Signed-off-by: Claude <noreply@anthropic.com>

* Parse node port with a 32-bit size

The gosec G109 check flags the Atoi result conversion to int32 now
that the nolint directive is gone. Parse with a 32-bit size instead.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PxAB5fwCwozVKWU6uxujjU
Signed-off-by: Claude <noreply@anthropic.com>

* Ignore tru in codespell for split-literal test

The JSON body scan test deliberately splits the literal true into
tru and e, which codespell flags as a typo. Add it to the ignore
list, as with other intentional test words.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PxAB5fwCwozVKWU6uxujjU
Signed-off-by: Claude <noreply@anthropic.com>

---------

Signed-off-by: Claude <noreply@anthropic.com>
Co-authored-by: Claude <noreply@anthropic.com>

Coverage Stats

6 of 11 new or added lines in 1 file covered. (54.55%)

60 existing lines in 4 files now uncovered.

93679 of 128841 relevant lines covered (72.71%)

849.8 hits per line