From 1eae9b9cfa5a07fe1c60a0d3ca5caf6f965634ad Mon Sep 17 00:00:00 2001 From: Eeshu-Yadav-1 Date: Tue, 12 May 2026 01:25:24 +0530 Subject: [PATCH 1/2] [test] Scenario B: bot-only CR for PR #668 --- TEST_PR_668_B.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 TEST_PR_668_B.md diff --git a/TEST_PR_668_B.md b/TEST_PR_668_B.md new file mode 100644 index 0000000..7c3202a --- /dev/null +++ b/TEST_PR_668_B.md @@ -0,0 +1 @@ +Test scenario B: bot-only CR should not trigger stale pipeline. From c9257290a73d3202433535ba4fbf1eb100dbd7a7 Mon Sep 17 00:00:00 2001 From: Eeshu-Yadav-1 Date: Tue, 12 May 2026 11:04:03 +0530 Subject: [PATCH 2/2] [test] Add intentionally bad code to provoke bot CR --- bad_code_for_review.py | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 bad_code_for_review.py diff --git a/bad_code_for_review.py b/bad_code_for_review.py new file mode 100644 index 0000000..c7e4252 --- /dev/null +++ b/bad_code_for_review.py @@ -0,0 +1,35 @@ +"""Intentionally bad code for bot reviewers to flag.""" + +import os +import subprocess + +# Hardcoded credentials — should trigger a security flag. +API_KEY = "sk_live_4242424242424242" +DATABASE_PASSWORD = "admin123" + + +def run_user_command(user_input): + # Command injection — passing user input to shell with shell=True. + return subprocess.check_output(user_input, shell=True) + + +def fetch_user(user_id): + # SQL injection — string concatenation into a query. + query = "SELECT * FROM users WHERE id = " + str(user_id) + return query + + +def parse_config(data): + # eval on untrusted input. + return eval(data) + + +def bare_except(): + try: + os.remove("/etc/passwd") + except: + pass + + +if __name__ == "__main__": + parse_config(input("config: "))