Add cache configuration

[ramirobarraco]

Test PR to verify enhanced review output format

[github-actions]

🔒 Security | ❌ ERROR

User-controlled environment variables are used directly in os.path.join to construct a file path, enabling path traversal attacks. An attacker could set INPUT_CACHE_DIR to '/etc' and INPUT_CACHE_NAME to '../../passwd' to access or overwrite sensitive files.

Suggested change

	cache_path = os.path.join(cache_dir, cache_name + ".json")
	Validate and sanitize inputs before use:
	import os, re
	# Resolve cache_dir to absolute path and restrict to allowed base
	cache_dir = os.path.abspath(os.environ.get('INPUT_CACHE_DIR', '/tmp/reviewer'))
	if not cache_dir.startswith('/tmp'):
	raise ValueError('Cache directory must be under /tmp')
	# Strip path components from cache_name and allow only safe characters
	cache_name = os.path.basename(os.environ.get('INPUT_CACHE_NAME', 'state'))
	if not re.match(r'^[a-zA-Z0-9_-]+$', cache_name):
	raise ValueError('Invalid cache name')
	cache_path = os.path.join(cache_dir, cache_name + '.json')

[github-actions]

🤓 Nitpick Senior Review

This PR introduces a caching mechanism by adding a cache_path to the configuration, derived from environment variables INPUT_CACHE_DIR and INPUT_CACHE_NAME.

Confidence: 2/5

⚠️ Changes needed - significant issues

Files Changed

File	Type	Overview
src/config.py	Enhancement	Adds cache_path to the configuration, derived from environment variables for cache directory and name.

✅ No issues found in the code changes.

---

🤓 Um, actually... reviewed by Nitpick Senior

[ramirobarraco]

/rerun