fix: suppress CodeQL false positives in formatters.py

[dreamiurg]

Problem

CodeQL flagged 5 security alerts in formatters.py that are false positives:

• 1 error: "Clear-text logging of sensitive information" (alert chore: ignore docs/plans directory #31)
• 4 warnings: "Overly permissive regular expression range" (alerts ci: skip CI when only .gitignore changes #32-35)

Analysis

Alert #31: Clear-text logging

Location: Line 97 - print(json.dumps(data, ...))

This is not logging - it's intentional CLI output. The tool only handles public peak data from PeakBagger.com. No credentials or sensitive information ever pass through this code.

Alerts #32-35: Regex ranges

Location: Lines 354-359 - emoji removal regex

The emoji pattern uses overlapping Unicode ranges, which CodeQL flags as potentially exploitable. However, this regex is only used for display formatting (removing emojis from scraped text), not for security validation or input sanitization.

Solution

Add suppression comments (lgtm[...]) with detailed explanations for why these are false positives:

1. Logging alert: Clarify this is CLI output, not logging, and only handles public data
2. Regex alerts: Explain overlapping ranges are intentional for comprehensive emoji coverage and not used for security purposes

Impact

This will resolve 5 open security alerts on the code scanning dashboard without changing any functional behavior.

🤖 Generated with Claude Code

[coderabbitai]

Warning

Rate limit exceeded

@dreamiurg has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 11 minutes and 38 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between b0a908a and d713b19.

📒 Files selected for processing (1)

• peakbagger/formatters.py (2 hunks)

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch security/suppress-codeql-false-positives

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.21%. Comparing base (b0a908a) to head (d713b19).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #57   +/-   ##
=======================================
  Coverage   91.21%   91.21%           
=======================================
  Files           8        8           
  Lines        1081     1081           
=======================================
  Hits          986      986           
  Misses         95       95           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.