Skip to content

fix: Strix LLM provider URL validation context 포함 - #207

Merged
seonghobae merged 1 commit into
masterfrom
fix/strix-llm-provider-context-20260521
May 21, 2026
Merged

fix: Strix LLM provider URL validation context 포함#207
seonghobae merged 1 commit into
masterfrom
fix/strix-llm-provider-context-20260521

Conversation

@seonghobae

@seonghobae seonghobae commented May 21, 2026

Copy link
Copy Markdown
Contributor

No linked issue.

목적

PR #202의 Strix pull_request_target 스캔에서 backend/api/llm_providers.py가 LLM URL 검증 컨텍스트 없이 분석되어 SSRF 오탐이 발생하는 문제를 막습니다.

주요 변경 사항

  • Strix quick gate의 backend Python context에 backend/services/llm_provider_urls.py를 포함합니다.
  • backend/api/llm_providers.py 배치가 URL 검증 모듈 없이 스캔되지 않도록 회귀 테스트를 보강합니다.
  • privileged pull_request_target가 trusted base 스크립트를 쓰는 특성 때문에, 해당 컨텍스트 보강을 master에 먼저 반영합니다.

검증

  • RED: bash scripts/ci/test_strix_quick_gate.sh가 LLM provider URL validation context 누락으로 실패하는 것을 확인했습니다.
  • bash -n scripts/ci/strix_quick_gate.sh && bash -n scripts/ci/test_strix_quick_gate.sh
  • bash scripts/ci/test_strix_quick_gate.shtest_strix_quick_gate: PASS
  • Review subagent: PASS, blocking findings 없음.

Summary by CodeRabbit

  • Tests

    • Enhanced CI test harness to validate LLM provider URL configuration during pull request scans.
    • Added test coverage for backend dependency detection and validation.
  • Chores

    • Updated CI scan scope to include additional backend configuration files in pull request analysis.

Review Change Stack

@coderabbitai

coderabbitai Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)
Validation error: Unrecognized key(s) in object: 'version'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b2720f3b-2eac-489f-a083-ec20111ff250

📥 Commits

Reviewing files that changed from the base of the PR and between 106f142 and ae35be4.

📒 Files selected for processing (2)
  • scripts/ci/strix_quick_gate.sh
  • scripts/ci/test_strix_quick_gate.sh

📝 Walkthrough

Walkthrough

This PR registers backend/services/llm_provider_urls.py in the CI gate's backend-context file list and extends the test harness to validate the new file's presence and content when LLM provider changes are detected in a PR.

Changes

LLM Provider URL Context File Integration

Layer / File(s) Summary
LLM provider URL context file registration
scripts/ci/strix_quick_gate.sh
Backend-context file list now includes backend/services/llm_provider_urls.py when backend Python files are present in PR scope.
Test harness for LLM provider URL validation
scripts/ci/test_strix_quick_gate.sh
Test case run_pull_request_target_changed_backend_context_scope_case adds mock validation that detects backend/api/llm_providers.py and verifies backend/services/llm_provider_urls.py contains expected PR-head markers; base and head repository setups now include the new file with corresponding marker contents; test assertion expects the new success message.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

  • Seongho-Bae/naruon#201: Both PRs modify the same Strix CI trusted/PR scope context assembly and extend the test harness to validate PR-head scoped backend dependency context files.
  • Seongho-Bae/naruon#206: Both PRs update scripts/ci/strix_quick_gate.sh's backend scope/context file selection logic and corresponding test assertions as part of the same scoped-context mechanism.

Poem

🐰 A context file hops into the CI gate,
Backend URLs now validate their fate,
With tests that mock and verify with care,
The new file dances through the PR air!

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (1 warning, 1 inconclusive)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
Title check ❓ Inconclusive The title is partially related to the changeset but uses Korean text mixed with English, making it unclear for international teams. The core message about including LLM provider URL validation context aligns with changes, but the presentation is suboptimal. Consider using a fully English title like 'fix: Include LLM provider URL validation context in Strix scope' for better clarity and team accessibility.
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/strix-llm-provider-context-20260521

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

Copy link
Copy Markdown
Contributor

PR governance metadata gate is not ready for ae35be4bae4f44cdf356c3c0ed9d7e20c7652103:

  • 2 required check(s) are not successful on ae35be4.\n- Missing current-head CodeRabbit/coderabbitai evidence for ae35be4.\n

@github-actions

Copy link
Copy Markdown
Contributor

PR governance metadata gate is not ready for ae35be4bae4f44cdf356c3c0ed9d7e20c7652103:

  • 1 required check(s) are not successful on ae35be4.\n- Missing current-head CodeRabbit/coderabbitai evidence for ae35be4.\n

2 similar comments
@github-actions

Copy link
Copy Markdown
Contributor

PR governance metadata gate is not ready for ae35be4bae4f44cdf356c3c0ed9d7e20c7652103:

  • 1 required check(s) are not successful on ae35be4.\n- Missing current-head CodeRabbit/coderabbitai evidence for ae35be4.\n

@github-actions

Copy link
Copy Markdown
Contributor

PR governance metadata gate is not ready for ae35be4bae4f44cdf356c3c0ed9d7e20c7652103:

  • 1 required check(s) are not successful on ae35be4.\n- Missing current-head CodeRabbit/coderabbitai evidence for ae35be4.\n

@seonghobae

Copy link
Copy Markdown
Contributor Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented May 21, 2026

Copy link
Copy Markdown
Contributor
✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@seonghobae
seonghobae merged commit 1138cb5 into master May 21, 2026
16 checks passed
@seonghobae
seonghobae deleted the fix/strix-llm-provider-context-20260521 branch May 21, 2026 04:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant