fix Hugging Face README YAML metadata

fix: patch AsyncResult in job poll test to simulate completed task

fix: return 'Unknown' as primary_language when directory has no Python files

fix: move success computation to end of run_tests and remove it from except block

fix: use sys.executable -m pytest to ensure pytest is always findable in sandbox

fix: add missing 'success' key to run_tests return dict

fix: add missing 'success' key to run_tests return dict

fix: add missing 'success' key to run_tests return dict

fix: loosen timeout message assertion to match sandbox output format

fix: suppress bandit B404 warning on subprocess import in pytest_runner

fix: import subprocess in pytest_runner so timeout patch target exists and handle TimeoutExpired

fix: import subprocess in pytest_runner so timeout patch target exists and handle TimeoutExpired

fix: pass empty file list directly instead of converting to None in code review agent

fix: deduplicate read_source_samples call and filter test files from code review

fix: correct all async route status code assertions (POST=202, GET poll=200)

fix: correct expected status code in test_async_analyze_returns_job_id to 202

fix: set mock_result.status and correct status code assertion in poll success test

fix: correct expected status code in job poll test to 200

fix: import AsyncResult directly so test patches on app.api.routes.AsyncResult resolve

fix: import AsyncResult directly so test patches on app.api.routes.AsyncResult resolve

fix

fix

fix

fix: correct expected status code in async job submission test to 202

fix: add missing Request parameter to get_job_status for slowapi rate limiter

fix: suppress bandit B110 and B404 warnings in file_scanner and sandbox

fix: correct sandbox process cast and scan_repository return type to dict

fix: correct sandbox process cast and scan_repository return type to dict

fix: correct sandbox process cast and scan_repository return type to dict

fix: resolve mypy errors in sandbox.py and file_scanner.py

infra(terraform): add EKS cluster, Elasticache Redis, and ECR modules for cloud deployment

infra(terraform): add EKS cluster, Elasticache Redis, and ECR modules for cloud deployment

infra(k8s): add HorizontalPodAutoscaler for api (CPU-based) and worker (queue-depth-based)

eval: expand benchmark dataset from 6 to 15 fixtures covering race conditions, TOCTOU, async misuse, N+1, path traversal, insecure deserialization, and missing auth

eval: fix filename typo and add real-model eval suite gated by RUN_REAL_EVAL env var

ci: raise coverage gate from 70% to 80%, ignore load tests in pytest, add badges to README

test(integration): add end-to-end test for async job submission and poll-to-completion cycle

security: harden prompt injection defense with XML delimiters and injection pattern stripping

security: add sandboxed subprocess runner with CPU/memory resource limits

feat(security): add Semgrep scanner with python + secrets rulesets

feat(worker): add named Celery queues (high/low priority) with task routing by repo size

feat(api): add tiered per-endpoint rate limits (sync vs async vs poll)

test(load): add Locust load test suite for /analyze and /analyze/async endpoints

fix

fix

feat: add integration tests, GitHub API mocking, and Locust load tests

feat: add evaluation framework with precision/recall metrics and model comparison

feat: add security depth — secret scanning, dependency vulns, report surface

fix: complete Redis cache integration and clean up test layer

fix: complete Redis cache integration and clean up test layer