coldpass

timescale/pgspot

GitHub ↗ · How this check works

Per-setup public labels: Linux / Haiku: Works

Static status badge · SVG · read-only JSON. Embed with ![Coldpass status](https://coldpass.dev/badge/timescale--pgspot.svg).

postgresqlsecuritypython

Works

Only older checks are saved; no current product test.

Answers apply to each recorded setup, revision and operation. Earlier observations remain in Run details.

Tested on Linux
PlatformHaikuLuna
Linuxyes

Linux / Haiku 5.5: yes · Oct 18, 2026 · 623859a0dac8 · claude-code / 2.1.300 (Claude Code)
Recorded operation: <host-path> --ignore PS017

Needs keys or browser
None seen
Issue
none found in recorded check

Safety: no observations were recorded for the selected revision. Functional results do not establish a safety result.

Run details

Haiku 5.5

Native agent · Checked operation passed

Checked operation <host-path> --ignore PS017

Agent-reported scope: Ran README usage example: pgspot --ignore PS017 with SQL 'CREATE TABLE IF NOT EXISTS foo();' on stdin; pgspot reports PS012 unsafe table creation (exit 1, Errors: 1).

Run details
run
timescale--pgspot-claude-haiku-5-5-1792336429379587185
date
Oct 18, 2026
time to working
not recorded
product hosting / execution
Local command in the guest
recorded operation scope
product operation
model
claude-haiku-5-5
agent / version
claude-code / 2.1.300 (Claude Code)
platform
linux
reported cost
$0.004561
Recorded source
https://github.com/timescale/pgspot
Tool transport
mcp-assigned-vm
Test version
readme-cae505cdaaa9e8cc13f1449c5e5f5816f65e8579e4bc7f8408ab66ff961f94c4
revision
623859a0dac88a230932da764c16c12ee97b13b5
What the agent did

Ran README usage example: pgspot --ignore PS017 with SQL 'CREATE TABLE IF NOT EXISTS foo();' on stdin; pgspot reports PS012 unsafe table creation (exit 1, Errors: 1).

cd <host-path> && ls -la && cat README.md 2>/dev/null | head -200
cd <host-path> && cat requirements.txt setup.py tox.ini; ls .github/workflows; cat .github/workflows/*.yml | head -120; ls -la .coldpass 2>/dev/null; which python3; python3 --version; python3 -m venv --help >/dev/null 2>&1 && echo venv_ok
cd <host-path> && python3 -m venv <host-path> && <host-path> install -q -r requirements.txt . 2>&1 | tail -5; <host-path> -h | head -3; ls testdata | head
rm -rf <host-path>; (sudo apt-get update -qq && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq python3.12-venv) >/tmp/apt.log 2>&1; echo apt=$?; cd <host-path> && python3 -m venv <host-path> && <host-path> install -q -r requirements.txt . 2>&1 | tail -5; echo pip=$?; <host-path> -h | head -3
cd <host-path> && echo "CREATE TABLE IF NOT EXISTS foo();" | <host-path> --ignore PS017 -; echo rc=$?; <host-path> --ignore PS017 --ignore-lang x 2>/dev/null; ls <host-path> 2>/dev/null; ls -la .coldpass 2>/dev/null
cd <host-path> && <host-path> --ignore PS017 <<<"CREATE TABLE IF NOT EXISTS foo();"; echo rc=$?; <host-path> --ignore PS017 <<<"CREATE TABLE IF NOT EXISTS foo();" > /dev/null 2>&1; echo; sed -n 1,80p <host-path> | grep -n -i "validate\|expected\|stdin" | head -30
cd <host-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"cli","argv":["<host-path>","stdin":"CREATE TABLE IF NOT EXISTS foo();\n","expected_returncode":1,"expected_text":"PS012: Unsafe table creation: foo"}
EOF
cat > .coldpass/report.json <<'EOF'
{"outcome":"working","operation":"Ran README usage example: pgspot --ignore PS017 with SQL 'CREATE TABLE IF NOT EXISTS foo();' on stdin; pgspot reports PS012 unsafe table creation (exit 1, Errors: 1).","operation_scope":"CLI static check of SQL on stdin; no database required. Only the README usage example was run; repository test/lint suites were not run.","steps":["Read README.md (pgspot, Installation/Usage sections)","sudo apt-get install python3.12-venv (venv module missing on guest)","python3 -m venv <host-path> install -r requirements.txt . (pglast==8.5 and pgspot from pinned source)","<host-path> --ignore PS017 <<<\"CREATE TABLE IF NOT EXISTS foo();\" (README usage example)"],"deviations":["README 'pip install -r requirements.txt' / 'pip install pgspot' assumed system pip; guest has python3 only, so python3-venv was installed via apt and a venv at <host-path> was used with 'pip install -r requirements.txt .'.","Tried 'pgspot ... -' to read stdin; failed with FileNotFoundError. Ran without a file argument instead, which reads stdin as the README example does."],"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?