clarifier_llm: sha1 -> sha256 for the non-security cache-discriminator (CWE-327 false positive). github_adapter + github_intake: inline nosemgrep on the urlopen lines (dynamic-urllib-use-detected) — the URL is built from a fixed https GitHub API base, dynamic part is the path only, no SSRF/file:// surface (extends the existing noqa:S310 trusted-host judgment to semgrep). Scanner now reports 0 mediums on the agent-team scope. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| base.py | ||
| claude_code_adapter.py | ||
| claude_code_live.py | ||
| github_adapter.py | ||
| github_intake.py | ||
| github_live.py | ||
| slack_adapter.py | ||
| slack_listener.py | ||
| slack_live.py | ||