Repository navigation

feat(mcp): mcp-server-properly-built audit — 11 atomic commits closing 13 audit findings - #512

Merged

robotrocketscience merged 15 commits into

mainfrom

feat/mcp-server-properly-built

May 9, 2026

Merged

feat(mcp): mcp-server-properly-built audit — 11 atomic commits closing 13 audit findings#512
robotrocketscience merged 15 commits into
mainfrom
feat/mcp-server-properly-built

GitHub Advanced Security / CodeQL succeeded May 9, 2026 in 2s

8 new alerts

New alerts in code changed by this pull request

6 warnings
2 notes

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 45 in tests/test_cli_mcp.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check warning on line 102 in tests/test_cli_mcp.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check warning on line 158 in tests/test_cli_mcp.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check warning on line 216 in tests/test_cli_mcp.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check warning on line 264 in tests/test_cli_mcp.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check warning on line 38 in tests/test_mcp_wrapper_layer.py

Code scanning / CodeQL

File is not always closed Warning test

File is opened but is not closed.

Check notice on line 126 in src/aelfrice/mcp_server.py

Code scanning / CodeQL

Unused global variable Note

The global variable '_RESPONSE_FORMATS' is not used.

Check notice on line 36 in tests/test_mcp_wrapper_layer.py

Code scanning / CodeQL

Module is imported with 'import' and 'import from' Note test

Module 'aelfrice.mcp_server' is imported with both 'import' and 'import from'.