Skip to content

Test bot vulns - #20

Open
Anandb71 wants to merge 2 commits into
main-1from
test-bot-vulns
Open

Test bot vulns#20
Anandb71 wants to merge 2 commits into
main-1from
test-bot-vulns

Conversation

@Anandb71

Copy link
Copy Markdown
Owner

No description provided.

Removed:
- backup/ (full project backup)
- frontend_backup/ (Flutter backup)
- frontend_backup_20260209/ (dated Flutter backup)
- frontend/ (legacy Flutter app, replaced by webapp/)
- metadata_debug.log, package-lock.json (stray files)
@arbor-cloud

arbor-cloud Bot commented Apr 26, 2026

Copy link
Copy Markdown

🟡 Arbor — Blast Radius Analysis

Risk MEDIUM █░░░░░░░░░ 16%
Branch test-bot-vulnsmain-1
Impact 1 file · 16 symbols · 6 in blast radius
Entry Points 5 production endpoints reached
Languages Python

Changed Files

File Symbols Direct Transitive Risk
🟡 backend/app/vulnerabilities_test.py 16 3 3 MEDIUM

🎯 Production Entry Points Reached

This change propagates to these entry points (HTTP handlers, jobs, CLI commands):

  • batch_reanalyze
  • get_document_file
  • reanalyze_document
  • reanalyze_single_document
  • update_rules

✅ Before You Merge

  • Manually verify the affected entry points: batch_reanalyze, get_document_file, reanalyze_document (+2).
  • Trace the 6 affected callers for unintended side-effects.
  • Run the full test suite before requesting review.

🔍 Security Analysis — REVIEW REQUIRED

1 security surface · 1 entry point reachable · Confidence: 85%

Category File Symbols
File I/O backend/app/vulnerabilities_test.py read_file
  • 🟡 Test affected entry points manually: get_document_file
📊 Analysis confidence: High · 1040 nodes · 4325ms
  • Python use dynamic typing — cross-file call edges are best-effort (may miss some relationships)
  • Graph has 1040 nodes and 156 edges — well-connected codebase
  • 16 symbols changed, 6 upstream nodes analyzed

Suggestions to improve accuracy:

  • Add type annotations (Python) or use TypeScript (JavaScript) for more precise analysis

Arbor · View full report → · 4325ms · 1040 nodes analyzed · Know what breaks before you merge

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant