Skip to content

FE-1161: Petrinaut CLI - #8975

Merged
kube merged 12 commits into
mainfrom
cf-petrinaut-python
Jul 15, 2026
Merged

FE-1161: Petrinaut CLI#8975
kube merged 12 commits into
mainfrom
cf-petrinaut-python

Harden Petrinaut CLI execution contracts

47a4f11
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Jul 15, 2026 in 2s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 167 in libs/@hashintel/petrinaut-core/src/hir/instantiate.ts

See this annotation in the file changed.

Code scanning / CodeQL

Unsafe code constructed from library input Medium

This string concatenation which depends on
library input
is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.

Check warning on line 225 in libs/@hashintel/petrinaut-core/src/hir/instantiate.ts

See this annotation in the file changed.

Code scanning / CodeQL

Unsafe code constructed from library input Medium

This string concatenation which depends on
library input
is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.
This string concatenation which depends on library input is later
interpreted as code
.