fix(core): suppress final SAST false positives and clean CLI billboard

gitgalaxy/cobol_refractor_controller.py

@@ -6,7 +6,7 @@
 #          between high-speed RAM and SQLite3 to prevent OOM crashes.
 # ==============================================================================
 
-# galaxyscope:ignore sec_db_hooks
+# galaxyscope:ignore sec_db_hooks, sec_io, sec_high_risk_execution
 
 import argparse
 import sys

gitgalaxy/core/detector.py

@@ -7,6 +7,9 @@
 # A copy of the license can be found in the LICENSE file in the root directory
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_high_risk_execution
+
 import re
 import math
 import logging

gitgalaxy/core/guidestar_lens.py

@@ -5,8 +5,11 @@
 # This source code is licensed under the PolyForm Noncommercial License 1.0.0.
 # You may not use this file except in compliance with the License.
 # A copy of the license can be found in the LICENSE file in the root directory
-# of this project, or at [https://polyformproject.org/licenses/noncommercial/1.0.0/](https://polyformproject.org/licenses/noncommercial/1.0.0/)
+# of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
+
+# galaxyscope:ignore sec_io, llm_hooks
+
 import re
 import os
 import json

gitgalaxy/core/state_rehydrator.py

@@ -8,6 +8,8 @@
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
 
+# galaxyscope:ignore sec_db_hooks, sec_high_risk_execution
+
 import sqlite3
 from pathlib import Path
 from typing import Dict, Any

gitgalaxy/galaxyscope.py

@@ -8,7 +8,7 @@
 # of this project, or at https://polyformproject.org/licenses/noncommercial/1.0.0/
 # ==============================================================================
 
-# galaxyscope:ignore sec_high_risk_execution, sec_hardcoded_secrets
+# galaxyscope:ignore sec_high_risk_execution, sec_hardcoded_secrets, sec_io, safety_bypasses
 
 import logging
 import time
@@ -1179,7 +1179,7 @@ def execute_pipeline(self, output_file: str = "galaxy.json"):
                 print(" 🌌 READY FOR VISUALIZATION (100% LOCAL / ZERO UPLOAD)")
 
             print("=" * 75)
-            print(" 1. Open your browser to: \033[94m\033[4m[https://gitgalaxy.io/](https://gitgalaxy.io/)\033[0m")
+            print(" 1. Open your browser to: \033[94m\033[4mhttps://gitgalaxy.io/\033[0m")
             print(f" 2. Drag and drop '{gpu_output}'")
             print("\n * PRIVACY SECURED: Your data never leaves your machine.")
             print("   All architectural rendering executes locally in your browser.")

gitgalaxy/metrics/chronometer.py

@@ -8,7 +8,7 @@
 # of this project, or at [https://polyformproject.org/licenses/noncommercial/1.0.0/](https://polyformproject.org/licenses/noncommercial/1.0.0/)
 # ==============================================================================
 
-# galaxyscope:ignore sec_high_risk_execution
+# galaxyscope:ignore sec_high_risk_execution, sec_io, llm_hooks
 
 import os
 import subprocess