Renn FandRenzo F 1f769f6315 [sandbox-ext] fix: drop dynamic verify SQL (bandit B608) — static query + Python membership ...

CI bandit -ll flagged B608 at sandbox.py:264 (f-string ANY(ARRAY[...])
with interpolated feature names). Root-cause fix: verify_step now runs a
static 'SELECT extname FROM pg_extension' and verify_ok checks set
membership against the installed extnames — no interpolation, no string-
built-SQL surface, and a more correct check (membership vs count). The
enable_step CREATE EXTENSION stays (identifiers can't be parameterized;
allowlist-validated upstream, the containment). Tests updated from the
count-based exec_out to the extname-list exec_out.

2026-07-13 20:05:45 +02:00

..

e2e_smoke

sandbox: kitchen-sink images, feature-aware selection (Phase 2)

2026-07-13 20:05:45 +02:00

fixtures

Feature: lifecycle canonical spec (#14)

2026-05-11 02:15:47 +02:00

foundation

feat(lifecycle): revision findings ledger — structured failure feedback, persisted and delivered down the chain (#486)

2026-07-11 22:54:42 +02:00

integration

[sandbox-ext] Phase 3: parameter surface — schema + project field + verb override + cache-by-features

2026-07-13 20:05:45 +02:00

property

Chore: reduce analytics complexity (#100)

2026-06-11 04:36:17 +02:00

unit

[sandbox-ext] fix: drop dynamic verify SQL (bandit B608) — static query + Python membership

2026-07-13 20:05:45 +02:00

__init__.py

[beb8cae1] Type-gate tests/ under mypy — fix all errors and flip quality gate (#156) (#157)

2026-06-14 13:43:46 +02:00

conftest.py

[90c9474c] Auditor revival: scheduled audit trigger and reactive alert producers (#499)

2026-07-13 15:41:00 +02:00