Security Report
Code Review Pipeline
Summary
Detected
- Services: llm-service
- Permissions: filesystem:read, network:ollama.com
- Data Handling: pii
Undeclared
All items declared
Warnings
No warnings
Findings (7)
Credentials
env:GITHUB_TOKEN undeclared "{GITHUB_TOKEN}"
This file references the environment variable GITHUB_TOKEN. If this is a credential (API key, token, secret), declare it in requires.data_handling.
Permissions
filesystem:read declared "get_file_contents"
This content references filesystem read access. If intentional, declare filesystem:read in requires.permissions.
network:ollama.com declared "https://ollama.com"
Wrap reference URLs in backticks (`url`) or a blockquote (> line) to mark them as illustrative content
Services
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
llm-service declared "connection: llm-service (runs_on)"
This node depends on the "llm-service" service. Declare it in requires.services so users know what external services are needed.
Data Handling
pii declared "PII"
This content handles personally identifiable information (names, emails, addresses). Declare pii in requires.data_handling so users are informed before import.