zsp/everything-claude-code
1
0
Fork 0
mirror of https://github.com/affaan-m/everything-claude-code.git synced 2026-03-30 13:43:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: extract BLOCKING_SEVERITIES constant, document broad catch

Browse Source 
- Extract BLOCKING_SEVERITIES frozenset for extensible severity checks.
- Add inline comment on broad Exception catch explaining intentional
  SDK fault-tolerance pattern (BLE001 acknowledged).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Nomadu27
2026-03-10 19:06:56 +01:00
parent e30109829b
commit 9ea415c037
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
scripts/hooks/insaits-security-monitor.py
View File

@@ -88,6 +88,7 @@ AUDIT_FILE: str = ".insaits_audit_session.jsonl"
MIN_CONTENT_LENGTH: int = 10 MIN_CONTENT_LENGTH: int = 10
MAX_SCAN_LENGTH: int = 4000 MAX_SCAN_LENGTH: int = 4000
DEFAULT_MODEL: str = "claude-opus" DEFAULT_MODEL: str = "claude-opus"
BLOCKING_SEVERITIES: frozenset = frozenset({"CRITICAL"})
def extract_content(data: Dict[str, Any]) -> Tuple[str, str]: def extract_content(data: Dict[str, Any]) -> Tuple[str, str]:
@@ -216,7 +217,7 @@ def main() -> None:
sender_id="claude-code", sender_id="claude-code",
llm_id=os.environ.get("INSAITS_MODEL", DEFAULT_MODEL), llm_id=os.environ.get("INSAITS_MODEL", DEFAULT_MODEL),
) )
except Exception as exc: except Exception as exc: # Broad catch intentional: unknown SDK internals
fail_mode: str = os.environ.get("INSAITS_FAIL_MODE", "open").lower() fail_mode: str = os.environ.get("INSAITS_FAIL_MODE", "open").lower()
if fail_mode == "closed": if fail_mode == "closed":
sys.stdout.write( sys.stdout.write(
@@ -247,7 +248,8 @@ def main() -> None:
# Determine maximum severity # Determine maximum severity
has_critical: bool = any( has_critical: bool = any(
get_anomaly_attr(a, "severity").upper() in ("CRITICAL",) for a in anomalies get_anomaly_attr(a, "severity").upper() in BLOCKING_SEVERITIES
for a in anomalies
) )
feedback: str = format_feedback(anomalies) feedback: str = format_feedback(anomalies)