Skip to content

Release: CLI path guard, wheel-built container images, new-code cleanup - #462

Merged
JE-Chen merged 4 commits into
mainfrom
dev
Jul 23, 2026
Merged

Release: CLI path guard, wheel-built container images, new-code cleanup#462
JE-Chen merged 4 commits into
mainfrom
dev

Merge pull request #461 from Integration-Automation/chore/sonar-newco…

546fc95
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Jul 23, 2026 in 1m 11s

Quality Gate failed

Failed conditions
E Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check failure on line 156 in je_auto_control/utils/remote_desktop/turn_config.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=Integration-Automation_AutoControlGUI&issues=AZ-NR22qkL2BOW0UE63z&open=AZ-NR22qkL2BOW0UE63z&pullRequest=462

Check failure on line 167 in je_auto_control/utils/remote_desktop/turn_config.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=Integration-Automation_AutoControlGUI&issues=AZ-NR22qkL2BOW0UE63y&open=AZ-NR22qkL2BOW0UE63y&pullRequest=462

Check failure on line 173 in je_auto_control/utils/remote_desktop/turn_config.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=Integration-Automation_AutoControlGUI&issues=AZ-NR22qkL2BOW0UE630&open=AZ-NR22qkL2BOW0UE630&pullRequest=462

Check failure on line 61 in je_auto_control/utils/config_bundle/__main__.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Change this code to not construct the path from user-controlled data. 

See more on https://sonarcloud.io/project/issues?id=Integration-Automation_AutoControlGUI&issues=AZ-NR25zkL2BOW0UE631&open=AZ-NR25zkL2BOW0UE631&pullRequest=462
View more details on SonarQubeCloud