Skip to content

Add SonarQube and Codacy compliance rules to CLAUDE.md#80

Merged
JE-Chen merged 3 commits intomainfrom
dev
Apr 18, 2026
Merged

Add SonarQube and Codacy compliance rules to CLAUDE.md#80
JE-Chen merged 3 commits intomainfrom
dev

Conversation

@JE-Chen
Copy link
Copy Markdown
Member

@JE-Chen JE-Chen commented Apr 18, 2026

Summary

  • Adds a Static Analysis Compliance (SonarQube & Codacy) subsection to CLAUDE.md covering complexity, naming/PEP 8, bug prevention, security hotspots, docs/typing, and test quality (each rule cites its SonarQube rule ID).
  • Adds a Pre-Commit Verification block listing the lint/type/test commands to run before committing.

Test plan

  • Confirm CLAUDE.md renders correctly on GitHub
  • Verify rule IDs and thresholds match the team's SonarQube/Codacy quality profile
  • (Follow-up) Audit existing modules against the new rules — initial scan flagged a wildcard self-import in je_web_runner/utils/selenium_utils_wrapper/__init__.py

JE-Chen added 3 commits April 18, 2026 00:51
Filter unsafe builtins (eval/exec/compile/__import__/open/input/
breakpoint/globals/locals/vars/getattr/setattr/delattr) from the
action executor so JSON-driven actions cannot invoke arbitrary code.
Escape dynamic fields in the HTML report to prevent XSS from
recorded test data.
@sonarqubecloud
Copy link
Copy Markdown

@codacy-production
Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric Results
Duplication 0

View in Codacy

TIP This summary will be updated as you push new changes. Give us feedback

@JE-Chen JE-Chen merged commit c0669c7 into main Apr 18, 2026
16 of 18 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant