pacnpal/compressatorium v3.5.1

Release v3.5.1 - Codacy & CodeQL CI integration

on GitHub

What's Changed

CI / Code Quality

• Added Codacy Security Scan workflow with SARIF integration to GitHub Advanced Security
• Added PMD ruleset and .codacy.yml repo configuration
• Added ESLint 8 legacy config for Codacy CLI compatibility
• Added least-privilege permissions to all Docker build workflow jobs (CodeQL fix)
• Excluded binary files from Codacy analysis to prevent CLI crashes
• Added SARIF validation fallback step for resilient uploads
• Upgraded codeql-action/upload-sarif from v3 to v4

Code Fixes (Codacy static analysis)

• Removed unused imports across test and route files
• Removed unused variable in test_disc_id.py
• Replaced bare except/pass blocks with debug logging in disc_id.py and lock_manager.py
• Fixed generic object injection sink in api.js formatSize()
• Added nosec annotations for intentional SHA1 usage in file_hasher.py

Full Changelog: v3.5.0...v3.5.1