Security and reliability improvements for CI debugging tools

[justin808]

Summary

This PR addresses the security and reliability improvements outlined in issue #1975.

Changes Made

High Priority - Security

• Remove eval from bin/ci-rerun-failures
  • Replaced eval usage with a safe run_command() function using case statement
  • Commands are now explicitly defined in case branches, eliminating potential injection risks
  • Maintains same functionality while being more maintainable and secure

Medium Priority - Documentation

• Document Ruby version requirement in bin/ci-switch-config
  • Added comment explaining that script/convert uses current Ruby in PATH
  • Documents that version manager may not have reloaded yet
  • Specifies Ruby 2.6+ compatibility requirement

Low Priority - Reliability

• Add bounds check for array access in bin/ci-run-failed-specs

  • Added defensive check before accessing UNIQUE_SPECS[0]
  • Prevents potential errors if array is empty

• Improve git restore error handling in bin/ci-switch-config

  • Replaced silent failure (2>/dev/null || true) with explicit warning
  • Users now see a clear message if files cannot be restored
  • Differentiates between success and partial failure

Testing

• All scripts validated with bash -n for syntax errors
• RuboCop linting passed with zero offenses
• Code formatted with Prettier

Fixes #1975

🤖 Generated with Claude Code

---

This change is 

[coderabbitai]

Warning

Rate limit exceeded

@justin808 has exceeded the limit for the number of commits or files that can be reviewed per hour. Please wait 6 minutes and 12 seconds before requesting another review.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

📥 Commits

Reviewing files that changed from the base of the PR and between cbee429 and 3497914.

📒 Files selected for processing (3)

• bin/ci-rerun-failures (3 hunks)
• bin/ci-run-failed-specs (1 hunks)
• bin/ci-switch-config (2 hunks)

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch justin808/remove-eval-ci-scripts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[justin808]

@claude review this PR

[claude]

Claude Code is working…

I'll analyze this and get back to you.

View job run