Skip to content

[SG-4885] feat(platform): tirith platform check — a pre-plan policy step, no platform changes - #272

Open
refeed wants to merge 59 commits into
mainfrom
feat/gate-capable-engine
Open

[SG-4885] feat(platform): tirith platform check — a pre-plan policy step, no platform changes#272
refeed wants to merge 59 commits into
mainfrom
feat/gate-capable-engine

docs: reposition Tirith as an IaC Governance plugin

4aa0a37
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis cancelled Aug 13, 2026 in 28s

SonarQube Cloud analysis failed

❌ The last analysis has failed.

See analysis details on SonarQube Cloud

Annotations

Check warning on line 231 in src/tirith/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this commented out code. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3NN8tWtwh7fSsa7&open=AZ_6q3NN8tWtwh7fSsa7&pullRequest=272

Check warning on line 64 in tests/platform/test_discover.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Split this composite assertion into separate assertions. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3OV8tWtwh7fSsa-&open=AZ_6q3OV8tWtwh7fSsa-&pullRequest=272

Check warning on line 2 in tests/core/test_core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Import "pytest" as a module. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3O58tWtwh7fSsbC&open=AZ_6q3O58tWtwh7fSsbC&pullRequest=272

Check warning on line 93 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace this constructor call with a literal. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3GM8tWtwh7fSsag&open=AZ_6q3GM8tWtwh7fSsag&pullRequest=272

Check failure on line 119 in src/tirith/platform/discover.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape from shell sandboxes. Refactor this code to validate untrusted OS commands before using them. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3LL8tWtwh7fSsan&open=AZ_6q3LL8tWtwh7fSsan&pullRequest=272

Check failure on line 336 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 20 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Ln8tWtwh7fSsau&open=AZ_6q3Ln8tWtwh7fSsau&pullRequest=272

Check failure on line 192 in src/tirith/platform/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 24 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3LD8tWtwh7fSsal&open=AZ_6q3LD8tWtwh7fSsal&pullRequest=272

Check warning on line 122 in tests/platform/test_cli_options.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Od8tWtwh7fSsa_&open=AZ_6q3Od8tWtwh7fSsa_&pullRequest=272

Check warning on line 217 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this commented out code. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3GM8tWtwh7fSsai&open=AZ_6q3GM8tWtwh7fSsai&pullRequest=272

Check warning on line 102 in tests/test_readme_is_current.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Split this composite assertion into separate assertions. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3PB8tWtwh7fSsbD&open=AZ_6q3PB8tWtwh7fSsbD&pullRequest=272

Check failure on line 91 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3MF8tWtwh7fSsa5&open=AZ_6q3MF8tWtwh7fSsa5&pullRequest=272

Check failure on line 76 in src/tirith/platform/report.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 28 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3LV8tWtwh7fSsap&open=AZ_6q3LV8tWtwh7fSsap&pullRequest=272

Check warning on line 13 in tests/core/test_output_compatibility.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Import "pytest" as a module. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3On8tWtwh7fSsbB&open=AZ_6q3On8tWtwh7fSsbB&pullRequest=272

Check failure on line 212 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 16 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Ln8tWtwh7fSsas&open=AZ_6q3Ln8tWtwh7fSsas&pullRequest=272

Check failure on line 136 in src/tirith/platform/archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3L68tWtwh7fSsaz&open=AZ_6q3L68tWtwh7fSsaz&pullRequest=272

Check warning on line 154 in tests/platform/test_check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Split this composite assertion into separate assertions. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3OM8tWtwh7fSsa8&open=AZ_6q3OM8tWtwh7fSsa8&pullRequest=272

Check failure on line 712 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3MF8tWtwh7fSsa3&open=AZ_6q3MF8tWtwh7fSsa3&pullRequest=272

Check failure on line 77 in src/tirith/platform/regions.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 18 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Ld8tWtwh7fSsar&open=AZ_6q3Ld8tWtwh7fSsar&pullRequest=272

Check warning on line 670 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Either merge this branch with the identical one on line "668" or change one of the implementations. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Ln8tWtwh7fSsaw&open=AZ_6q3Ln8tWtwh7fSsaw&pullRequest=272

Check failure on line 99 in src/tirith/platform/check.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 17 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3MF8tWtwh7fSsa0&open=AZ_6q3MF8tWtwh7fSsa0&pullRequest=272

Check failure on line 29 in src/tirith/prettyprinter.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this assignment; "GREY" is assigned again on line 37. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Mg8tWtwh7fSsa6&open=AZ_6q3Mg8tWtwh7fSsa6&pullRequest=272

Check failure on line 41 in src/tirith/platform/cli.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

LLMs running this code with faulty CLI arguments can escape file system restrictions. Refactor this code to validate the constructed path before accessing the file system. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3LD8tWtwh7fSsam&open=AZ_6q3LD8tWtwh7fSsam&pullRequest=272

Check failure on line 551 in src/tirith/platform/redact.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 17 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3Ln8tWtwh7fSsav&open=AZ_6q3Ln8tWtwh7fSsav&pullRequest=272

Check failure on line 115 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 18 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3GM8tWtwh7fSsah&open=AZ_6q3GM8tWtwh7fSsah&pullRequest=272

Check warning on line 263 in src/tirith/core/core.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Replace chained "endswith" calls with a single call using a tuple argument. 

See more on https://sonarcloud.io/project/issues?id=StackGuardian_policy-framework&issues=AZ_6q3GM8tWtwh7fSsaj&open=AZ_6q3GM8tWtwh7fSsaj&pullRequest=272
View more details on SonarQubeCloud