Skip to content

Remove unused files and add Microsoft Defender workflow#26

Merged
harleygirlu2-png merged 224 commits into
copilot/26481613359from
master
Jun 1, 2026
Merged

Remove unused files and add Microsoft Defender workflow#26
harleygirlu2-png merged 224 commits into
copilot/26481613359from
master

Conversation

@sothiss

@sothiss sothiss commented Jun 1, 2026

Copy link
Copy Markdown
Owner

No description provided.

sothiss and others added 30 commits May 25, 2026 14:05
…e mappings for behavioral and physiological data
This workflow integrates Microsoft Security DevOps for static analysis in the development cycle, triggered on push, pull request, and scheduled events.
…vice account JSON credentials (do not track these in Git)
…n permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Added a security policy document outlining supported versions and vulnerability reporting.
…e-issue

Add explicit Gemini Code Assist org-setup guidance to README
harleygirlu2-png and others added 24 commits June 1, 2026 14:58
Signed-off-by: Alice Severi Gonçalves <223510749+sothiss@users.noreply.github.com>
Signed-off-by: Alice Severi Gonçalves <223510749+sothiss@users.noreply.github.com>
Copilot AI review requested due to automatic review settings June 1, 2026 23:24

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot wasn't able to review this pull request because it exceeds the maximum number of files (300). Try reducing the number of changed files and requesting a review from Copilot again.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a comprehensive suite of Firebase agent skills, reference guides, and development environment configurations (including EthoPipe workflows and devcontainer setups). The review feedback identifies several critical issues across the new documentation files: a variable shadowing bug in the Android Auth SDK guide that leaves a property uninitialized, untracked environment directories (node_modules/ and .vs/) that need to be ignored in .gitignore, a syntax error and an undefined variable reference in the Web AI Logic patterns, and escaped string interpolation characters in the Flutter Auth setup that prevent proper error logging.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.


override fun onCreate(savedInstanceState: Bundle?) {
super.onCreate(savedInstanceState)
val auth = Firebase.auth

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Redeclaring auth as a local variable with val auth inside onCreate shadows the class property private lateinit var auth: FirebaseAuth. This leaves the class property uninitialized, which will cause an UninitializedPropertyAccessException when auth is accessed in onStart().

Suggested change
val auth = Firebase.auth
auth = Firebase.auth

Comment thread .gitignore
Comment on lines +44 to +47
# GCP Service Account credentials (never commit these!)
*service-account*.json
*serviceaccount*.json
*credentials*.json

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The node_modules/ and .vs/ directories are currently being committed to the repository (as seen in the file list). They are environment-specific and should never be tracked by Git. Please add them to .gitignore and run git rm -r --cached node_modules/ .vs/ to untrack them.

# GCP Service Account credentials (never commit these!)
*service-account*.json
*serviceaccount*.json
*credentials*.json

# Dependency directories
node_modules/

# IDE settings
.vs/

generationConfig: {
responseMimeType: "application/json",
// Optional: Define a schema
schema = Schema.object({ ... });

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

In JavaScript/TypeScript, using an assignment operator (=) and a semicolon inside an object literal is a syntax error. It should be a colon (:) and no semicolon.

Suggested change
schema = Schema.object({ ... });
schema: Schema.object({ ... })


// Initialize the AI Logic service (defaults to Gemini Developer API)
// To set the AI provider, set the backend as the second parameter
const ai = getAI(firebaseApp, { backend: new GoogleAIBackend() });

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The variable firebaseApp is undefined. It should be app to match the initialized Firebase App instance on line 17.

Suggested change
const ai = getAI(firebaseApp, { backend: new GoogleAIBackend() });
const ai = getAI(app, { backend: new GoogleAIBackend() });

return await _auth.signInWithCredential(credential);
}
} catch (e) {
print("Error during Google Sign-In: \$e");

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Escaping the $ sign (\$e) inside a double-quoted string literal in Dart prevents string interpolation, causing it to print the literal string "$e" instead of the actual caught exception. Remove the backslash to correctly interpolate the error.

Suggested change
print("Error during Google Sign-In: \$e");
print("Error during Google Sign-In: $e");

}
await _auth.signOut();
} catch (e) {
print("Error signing out: \$e");

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Escaping the $ sign (\$e) inside a double-quoted string literal in Dart prevents string interpolation, causing it to print the literal string "$e" instead of the actual caught exception. Remove the backslash to correctly interpolate the error.

Suggested change
print("Error signing out: \$e");
print("Error signing out: $e");

@harleygirlu2-png harleygirlu2-png merged commit 9f3aa3d into copilot/26481613359 Jun 1, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants