fix: resolve CI failures - import sorting and bandit security issues

- Fixed import sorting issue in llm_client.py detected by ruff
- Added nosec B110 comments to intentional try-except-pass blocks
- Enhanced LiteLLM configuration with set_verbose=False for cleaner output
- All CI checks now passing: ruff, mypy, bandit, and 173 tests

Author: Zvi Fried

pyproject.toml

@@ -143,8 +143,6 @@ addopts = [
     "--strict-config",
     "--verbose",
 ]
-# No filterwarnings - we want to catch any remaining Pydantic issues
-# filterwarnings = []
 markers = [
     "slow: marks tests as slow (deselect with '-m \"not slow\"')",
     "integration: marks tests as integration tests",

src/mcp_as_a_judge/llm/llm_client.py

@@ -20,9 +20,11 @@
 from mcp_as_a_judge.core.logging_config import get_logger
 from mcp_as_a_judge.llm.llm_integration import LLMConfig, LLMVendor
 
-
+# Configure LiteLLM to handle parameter restrictions and suppress warnings
 litellm.drop_params = True
 litellm.suppress_debug_info = True
+# Suppress Pydantic serialization warnings from LiteLLM
+litellm.set_verbose = False
 
 # Set up logger
 logger = get_logger(__name__)

src/mcp_as_a_judge/server.py

@@ -1167,7 +1167,7 @@ async def _validate_research_quality(
                 ],
                 "feedback": descriptive_feedback,
             }
-    except Exception:
+    except Exception:  # nosec B110
         # Be resilient; failing aspects extraction should not crash validation
         pass
 
@@ -1603,7 +1603,7 @@ async def judge_coding_plan(
                 missing_deliverables.append("Add a clear Problem Domain Statement with explicit non-goals")
             if not getattr(updated_task_metadata, "library_plan", []) or len(getattr(updated_task_metadata, "library_plan", [])) == 0:
                 missing_deliverables.append("Provide a Library Selection Map (purpose → internal/external library with justification)")
-        except Exception:
+        except Exception:  # nosec B110
             pass
 
         effective_approved = evaluation_result.approved and not missing_deliverables

src/mcp_as_a_judge/tasks/manager.py

@@ -220,7 +220,7 @@ async def load_task_metadata_from_history(
                     # If plan was approved, set PLAN_APPROVED
                     elif latest_snapshot.get("plan_approved_at"):
                         latest_snapshot["state"] = TaskState.PLAN_APPROVED.value
-                except Exception:
+                except Exception:  # nosec B110
                     # Best-effort inference only
                     pass
 

src/mcp_as_a_judge/tasks/research.py

@@ -52,7 +52,7 @@ class ResearchAspectsUserVars(BaseModel):
         # Use globals() to avoid mypy type assignment errors
         globals()["ResearchAspectsExtraction"] = _models_py.ResearchAspectsExtraction
         globals()["ResearchAspectsUserVars"] = _models_py.ResearchAspectsUserVars
-except Exception:
+except Exception:  # nosec B110
     # Use the fallback classes defined above
     pass