-
[OPIK-7716] [DOCS] docs: forbid building SQL from formatted strings in agent and reviewer rules (#7711)
frostbyte_neo 发布于
2026-08-03 13:47:00 +00:00 - [OPIK-7716] [DOCS] docs: forbid building SQL from formatted strings in agent and reviewer rules
Queries must never be assembled with String.formatted, +, StringBuilder or a %s slot
a caller fills in. Values go through bind, varying fragments through StringTemplate
conditionals. Documents the rule where coding agents read it (opik-backend skill,
always-applied security rule) and where reviewers read it (code-reviewer agent,
Copilot review instructions).Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com
- [OPIK-7716] [DOCS] docs: address review — scope the SQL rule to the diff, fix the caller example
Split the interleaved two-column caller snippet in clickhouse.md into two valid,
copyable blocks. Scope the reviewer checklists to Java sources and to queries the
diff adds or modifies, so untouched legacy helpers and the docs' own BAD snippets
don't read as findings.Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com
- [OPIK-7716] [DOCS] docs: add String.join to the reviewer-facing SQL construction lists
Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com
- [OPIK-7716] [DOCS] docs: unambiguously scope the String.join qualifier in reviewer rules
Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com
Co-authored-by: Claude Opus 5 (1M context) noreply@anthropic.com
下载附件