Create test_bad_code.py

[alexandersucala]

Why?

What?

See Also

[alexandersucala]

no

[alexandersucala]

h

[alexandersucala]

🔴 CodeReview AI — RED

🔴 SECURITY

• 📎 [SECURITY] Hardcoded live Stripe API key (sk_live_abc123secretkey) in source code. This violates the policy that API keys must only be stored in environment variables and the explicit prohibition against hardcod...
  • 📖 SECURITY.md lines 4-7
  • 📍 test_bad_code.py line 1
• 📎 [SECURITY] SSL certificate verification is disabled (verify=False) in the requests.get call to Stripe API. This violates the HTTP Security requirement that all external requests MUST use HTTPS and the explicit p...
  • 📖 SECURITY.md lines 10-12
  • 📍 test_bad_code.py line 3
• 📎 [SECURITY] Hardcoded password in source code. While the documentation specifically addresses API keys, the same security principle of not hardcoding credentials applies. This represents a secret management vulne...
  • 📖 SECURITY.md lines 5-6
  • 📍 test_bad_code.py line 5

⏭️ ARCHITECTURE

✓ No issues found

⏭️ LEGAL

✓ No issues found

⏭️ STYLE

✓ No issues found

🔴 ONBOARDING

• 📎 [POLICY_VIOLATION] PR description 'Why' section is empty. The required format mandates explaining the motivation for the change and what problem it solves....
  • 📖 CONTRIBUTING.md lines 11-15
• 📎 [POLICY_VIOLATION] PR description 'What' section is empty. The required format mandates describing the changes made and what was changed....
  • 📖 CONTRIBUTING.md lines 17-20
• 📎 [POLICY_VIOLATION] API key 'sk_live_abc123secretkey' is hardcoded in the file. The security policy explicitly prohibits including API keys, tokens, or secrets in any form....
  • 📖 CONTRIBUTING.md lines 45-49
  • 📍 test_bad_code.py:1
• 📎 [POLICY_VIOLATION] Password 'hardcoded_password653776' is hardcoded in the file. The security policy explicitly prohibits including secrets in any form....
  • 📖 CONTRIBUTING.md lines 45-49
  • 📍 test_bad_code.py:5
• 📎 [POLICY_VIOLATION] HTTPS request is made with 'verify=False', which disables SSL certificate verification. The security policy requires all HTTP requests to external services to use HTTPS with proper verification....
  • 📖 CONTRIBUTING.md lines 45-49
  • 📍 test_bad_code.py:3
• 📎 [POLICY_VIOLATION] New file 'test_bad_code.py' contains multiple security violations: hardcoded API keys (sk_live_abc123secretkey), hardcoded passwords, and an insecure HTTP request with verify=False. Per CONTRIBUTING.m...
  • 📖 CONTRIBUTING.md lines 39-42
  • 📍 test_bad_code.py:1-5

---

Powered by CodeReview AI