fix(sast): suppress false-positive security signatures across core en…

gitgalaxy/cobol_refractor_controller.py

@@ -5,6 +5,9 @@
 #          Intermediate Representation (IR) State Manager. Dynamically toggles
 #          between high-speed RAM and SQLite3 to prevent OOM crashes.
 # ==============================================================================
+
+# galaxyscope:ignore sec_db_hooks
+
 import argparse
 import sys
 import json

gitgalaxy/cobol_to_java_controller.py

@@ -17,6 +17,9 @@
 # the internal business logic to the AI agent, ensuring architectural integrity 
 # and guaranteed compilability out-of-the-box.
 # ==============================================================================
+
+# galaxyscope:ignore sec_io
+
 import argparse
 import sys
 import json

gitgalaxy/galaxyscope.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, sec_hardcoded_secrets
+
 import logging
 import time
 import zipfile

gitgalaxy/metrics/chronometer.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at [https://polyformproject.org/licenses/noncommercial/1.0.0/](https://polyformproject.org/licenses/noncommercial/1.0.0/)
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution
+
 import os
 import subprocess
 import logging

gitgalaxy/metrics/signal_processor.py

@@ -7,6 +7,10 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, sec_llm_hooks
+
+
 import math
 import logging
 import re

gitgalaxy/metrics/statistical_auditor.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, sec_hardcoded_secrets, sec_io
+
 import statistics
 import logging
 from typing import List, Dict, Any, Tuple, Optional

gitgalaxy/metrics/tensor_scanner.py

@@ -2,6 +2,10 @@
 # GitGalaxy
 # Phase 7.8: Tensor Scanner (AI Artifact Inspection)
 # ==============================================================================
+
+# galaxyscope:ignore sec_io
+
+
 import json
 import struct
 import math

gitgalaxy/recorders/audit_recorder.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution
+
 import json
 import argparse
 import os

gitgalaxy/recorders/gpu_recorder.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution
+
 import json
 import logging
 import gc

gitgalaxy/recorders/llm_recorder.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, ai_guardrails, sec_db_hooks
+
 import sqlite3
 import logging
 import statistics

gitgalaxy/recorders/record_keeper.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore ai_guardrails, sec_db_hooks
+
 import sqlite3
 import json
 import logging

gitgalaxy/recorders/sarif_recorder.py

@@ -2,6 +2,9 @@
 # GitGalaxy
 # Copyright (c) 2026 Joe Esquibel
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, ai_guardrails
+
 import json
 import logging
 from typing import Dict, Any, List

gitgalaxy/recorders/sbom_recorder.py

@@ -3,6 +3,9 @@
 # Purpose: Generates a CycloneDX SBOM with physical verification of dependencies
 #          across multiple language ecosystems (NPM, Composer, PyPI, Cargo).
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution, ai_guardrails, sec_io
+
 import os
 import json
 import uuid