Heretek-AI/heretek-claude-harness
1
0
Fork 0
mirror of https://github.com/Heretek-AI/heretek-claude-harness.git synced 2026-10-12 02:03:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(workflow): suppress S2648 on uv tool install with rationale

Browse Source 
SonarCloud S2648 (--no-build) flagged the uv tool install harbor line.
uv tool install has no --no-build / --only-binary equivalent; harbor
0.21.0 ships as a pure-Python wheel on PyPI, no setup.py runs, and the
version is pinned. Added inline # nosonar + a 3-line rationale comment
so the next reader knows why we accept the (non-existent) risk.

Co-Authored-By: Claude <[email protected]>
This commit is contained in:
Claude
2026-08-11 23:43:01 -04:00
parent 7eb8f2ba8d
commit 78c59e7ac2
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/terminal-bench-ab.yml
+5 -1
View File
@@ -43,7 +43,11 @@ jobs:
run: "pip install uv==0.5.9 --only-binary :all:"
- name: Install Harbor
run: "uv tool install harbor==0.21.0"
# harbor 0.21.0 ships as a pure-Python wheel on PyPI; no source build,
# so no setup.py ever runs. Pin is exact. uv has no --no-build
# equivalent for `uv tool install`; suppress the S2648 warning
# locally with # nosonar.
run: "uv tool install harbor==0.21.0" # nosonar — see comment above
- name: Docker info (fail-fast if missing)
run: docker info