Block a user
refactor: extract shared base-args helper in main_test.go subprocess tests
bug: dev-loop merged PR #138 despite active REQUEST_CHANGES from security-review-bot
bug: dev-loop merged PR #138 despite active REQUEST_CHANGES from security-review-bot
Addressed by issue #148 / PR #149 (pure shell dispatch redesign), merged to main.
The REQUEST_CHANGES check is now a pure shell command:
curl ... /reviews
bug: dev-loop merged PR #140 autonomously — no human review or assignment
bug: dev-loop merged PR #140 autonomously — no human review or assignment
Addressed by issue #148 / PR #149 (pure shell dispatch redesign), merged to main.
The dev-loop dispatch was redesigned as a pure shell script (dev-loop-dispatch.sh). Model reasoning was removed…
PR #140: missing TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile tests
PR #140: cmd/review-bot coverage at 49.3% — does not meet ≥50% acceptance criterion
PR #140: cmd/review-bot coverage at 49.3% — does not meet ≥50% acceptance criterion
Coverage is now at 54.1%+ on origin/main (the validate-docmap subcommand added in issue #141/PR #142 brought coverage from 49.3% to 54.1%). PR #152 will push it to 54.3%.
This issue is resolved…
PR #140: missing TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile tests
Resolved by PR #152.
TestMainSubprocess_InvalidDocMapPathadded tocmd/review-bot/main_test.go(tests path traversal viavalidate-docmapsubcommand)- `TestMainSubprocess_InvalidDocMapFile…
test(#146): add TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile
Fix Plan against 40a16b75e061528467888ad19080fa8689004e20:
Findings Summary
All findings are NIT-level. All three bots approved.
feat(#143): fetch doc-map config from trusted VCS ref
test(#146): add TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile
Self-Review: PR #151
Self-review against 40a16b75e061528467888ad19080fa8689004e20
Phase 1: Independent Findings
None — diff looks clean. The production change is a small, focused…
fix(#150): add EvalSymlinks to validateDocmapPath — close dir-symlink bypass
test(#146): add TestMainSubprocess_InvalidDocMapPath and TestMainSubprocess_InvalidDocMapFile