Push review · 57fcb33
Retry transient webhook failures
GitHub check
All clear
No verified vulnerabilities and code craft 272/300.
Points
+47ptsTotal782829
Security607630
Craft175199
What changed: Adds bounded retries for 5xx webhook responses; still enforces the allow-list via deliver().Scripted demo replay
Security agent
Scripted demo replay
Instead of reading one big prompt, the agent plans, then investigates the code graph one tool call at a time and sees each real result before deciding what to check next.
Plan
- 1Inspect the changed function and where its inputs come from
- 2Trace entry points through the change to dangerous calls
- 3Read the code on the path for validation or auth checks
- 4Report only what the evidence supports
- Step 1Looked up
app.services.notifications:deliver_with_retryStart with the changed symbol.
What it found
{ "id": "app.services.notifications:deliver_with_retry", "kind": "function", "file": "app/services/notifications.py", "lines": [ 36, 43 ], "params": [ "url", "payload", "attempts" ], "entry_point": false, "route": null, "depends_on": [], "untrusted_inputs": [], "dangerous_calls": [], "has_docstring": true } callers: (none) callees: app.services.notifications:deliver (app/services/notifications.py:27-33) [sinks=network@L31(tainted)] via line 40 [tainted args]