Contract bearbeiten

Aktuelle Version: 2.0

Neue Version * Muss sich von der aktuellen Version unterscheiden.

Änderungsbeschreibung

YAML-Inhalt *

contract:
  name: python-pipeline
  version: "2.0"
  status: active
  description: |
    Code-Qualitätsstandards für Python-Code in der KI-Pipeline.
    Migriert auf Meta-Schema v1.0 am 22.12.2025.

created: "2025-12-20"
  author: migration

scope:
    paths:
      - "/opt/scripts/pipeline/**/*.py"
    excludes:
      - "/opt/scripts/pipeline/venv/**"
      - "**/__pycache__/**"

rules:
    - id: type-hints-required
      check_type: custom
      script: "/opt/scripts/pipeline/venv/bin/mypy"
      args: ["--strict"]
      severity: major
      description: "Type Hints sind erforderlich"

- id: no-bare-except
      check_type: forbidden_pattern
      patterns:
        - "except:"
      in_files: "**/*.py"
      severity: critical
      description: "Bare except ist verboten"

- id: no-eval
      check_type: forbidden_pattern
      patterns:
        - "eval("
        - "exec("
      in_files: "**/*.py"
      severity: critical
      description: "eval und exec sind verboten (Security)"

- id: no-hardcoded-credentials
      check_type: forbidden_pattern
      patterns:
        - 'password = "'
        - "password = '"
        - 'secret = "'
        - "secret = '"
      in_files: "**/*.py"
      severity: critical
      description: "Keine hardcoded Credentials"

- id: no-sql-injection
      check_type: forbidden_pattern
      patterns:
        - 'f"SELECT'
        - "f'SELECT"
        - 'f"INSERT'
        - 'f"UPDATE'
        - 'f"DELETE'
      in_files: "**/*.py"
      severity: critical
      description: "Keine f-Strings für SQL - verwende Parameterized Queries"

- id: docstrings-required
      check_type: custom
      script: "/opt/scripts/pipeline/venv/bin/ruff"
      args: ["check", "--select=D100,D101,D102,D103"]
      severity: minor
      description: "Docstrings für Module, Klassen und Funktionen"

enforcement:
    on_violation: block

pass_threshold:
    critical_max: 0
    major_max: 2
    minor_max: 5

Abbrechen