Skip to content

Add SSL certificate error exclusions to lychee config#2230

Merged
ihabadham merged 1 commit intomasterfrom
ihabadham/add-lychee-ssl-exclusions
Dec 17, 2025
Merged

Add SSL certificate error exclusions to lychee config#2230
ihabadham merged 1 commit intomasterfrom
ihabadham/add-lychee-ssl-exclusions

Conversation

@ihabadham
Copy link
Copy Markdown
Collaborator

@ihabadham ihabadham commented Dec 16, 2025

Summary

Adds exclusions for 4 sites with SSL certificate issues that cannot be fixed by us.

Changes

Added the following exclusions to .lychee.toml:

Site SSL Issue
blinkinc.com SSL certificate expired
localwise.com SSL verification failed
mycfsapp.com SSL hostname mismatch
scoutapp.com SSL hostname mismatch

Testing

✅ Verified locally with lychee that:

  • These sites no longer appear in error output
  • Exclusion patterns work correctly
  • No false positives (only SSL-error sites are excluded)

Context

These sites are referenced in PROJECTS.md and README.md (ShakaCode portfolio/sponsor sites). The SSL issues are on their end and we cannot fix them.

Related

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated link validation to exclude four additional domains from automated checks due to recurring SSL connectivity issues: blinkinc.com, localwise.com, mycfsapp.com, scoutapp.com.

✏️ Tip: You can customize this high-level summary in your review settings.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Dec 16, 2025

Walkthrough

Adds four URL exclude patterns to .lychee.toml to skip link checks for blinkinc.com, localwise.com, mycfsapp.com, and scoutapp.com (handles www and non-www variants); no other functional changes.

Changes

Cohort / File(s) Change Summary
Configuration update
\.lychee\.toml
Added four SSL-related exclude patterns: ^https://(www\.)?blinkinc\.com, ^https://(www\.)?localwise\.com, ^https://(www\.)?mycfsapp\.com, ^https://(www\.)?scoutapp\.com.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

  • Single configuration file change; simple, repetitive additions
  • No codepaths, tests, or public API changes to inspect

Poem

🐰 I hopped through toml fields bright and small,
Four tricky SSLs I fenced from the call.
blinkinc, localwise, mycfs and scout,
Quietly excluded — no more red doubt.
A little hop, CI breathes again. ✨

Pre-merge checks and finishing touches

✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely summarizes the main change: adding SSL certificate error exclusions to the lychee configuration file.
Linked Issues check ✅ Passed All four SSL certificate exclusion patterns specified in issue #2227 are implemented in .lychee.toml for blinkinc.com, localwise.com, mycfsapp.com, and scoutapp.com.
Out of Scope Changes check ✅ Passed All changes are directly related to the objective in issue #2227; only .lychee.toml was modified with the required SSL exclusion patterns.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch ihabadham/add-lychee-ssl-exclusions

📜 Recent review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 2b17794 and 8fe313d.

📒 Files selected for processing (1)
  • .lychee.toml (1 hunks)
🚧 Files skipped from review as they are similar to previous changes (1)
  • .lychee.toml
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (10)
  • GitHub Check: build-dummy-app-webpack-test-bundles (3.4, 22, latest)
  • GitHub Check: rspec-package-tests (3.4, latest)
  • GitHub Check: examples (3.4, latest)
  • GitHub Check: build-dummy-app-webpack-test-bundles
  • GitHub Check: pro-lint-js-and-ruby
  • GitHub Check: build-dummy-app-webpack-test-bundles
  • GitHub Check: build
  • GitHub Check: precompile-check
  • GitHub Check: markdown-link-check
  • GitHub Check: claude-review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@claude
Copy link
Copy Markdown
Contributor

claude Bot commented Dec 16, 2025

Code Review - PR #2230

✅ Overall Assessment: APPROVED

This is a well-executed PR that appropriately addresses SSL certificate issues for external sites referenced in the documentation.


Strengths

1. Proper Problem Scope

  • Correctly identifies that SSL issues are on the external sites' end and cannot be fixed by the project
  • Appropriate use of exclusions rather than trying to "fix" unfixable external issues
  • All 4 URLs verified to exist in the codebase (PROJECTS.md and README.md)

2. Good Documentation

  • Inline comments clearly explain the reason for each exclusion
  • Grouping by issue type (SSL certificate issues) aids readability
  • Specific SSL error types documented (expired, hostname mismatch, verification failed)

3. Correct Regex Patterns

  • Uses proper regex anchoring with ^ to match URL start
  • Correctly handles optional www. subdomain with (www\.)?\.
  • Properly escapes dots in domains (\.)
  • Consistent with existing patterns in the file

4. Testing Mentioned

  • PR description mentions local verification with lychee
  • Confirmed exclusions work and no false positives

Minor Observations

1. Markdown Link Check Failure ⚠️

The CI shows a failure in markdown-link-check workflow, but this appears to be a separate/pre-existing issue unrelated to this PR's changes (this PR modifies .lychee.toml, not markdown-link-check configuration).

Recommendation: Verify this isn't blocking merge. If it is, coordinate with maintainers to determine if it's a known issue.

2. Pattern Consistency 💡

The patterns follow the existing style but could theoretically be more specific. However, the current approach is appropriate:

  • '^https://(www\.)?blinkinc\.com' will match any path on these domains
  • This is correct because SSL errors affect the entire domain, not specific paths

Code Quality Checklist

  • Follows project conventions (matches existing .lychee.toml style)
  • No security concerns (read-only config file)
  • No performance impact (exclusions improve performance by skipping failing checks)
  • Proper documentation (inline comments explain rationale)
  • Testing mentioned (local verification with lychee)
  • Solves stated problem (addresses issue Add SSL certificate and network error exclusions to lychee config #2227)

Final Recommendation

This PR is ready to merge pending resolution of the unrelated markdown-link-check CI failure.

The changes are minimal, well-justified, properly documented, and correctly implemented. The exclusions are necessary to prevent CI failures from external SSL issues beyond the project's control.


Review generated with Claude Code following CLAUDE.md guidelines

Exclude 4 sites with SSL certificate issues from link checking:
- blinkinc.com - SSL certificate expired
- localwise.com - SSL verification failed
- mycfsapp.com - SSL hostname mismatch
- scoutapp.com - SSL hostname mismatch

These sites appear in PROJECTS.md and README.md but have SSL errors
that cannot be fixed by us. Verified locally with lychee that these
exclusions work correctly.

Resolves #2227

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>
@ihabadham ihabadham force-pushed the ihabadham/add-lychee-ssl-exclusions branch from 2b17794 to 8fe313d Compare December 16, 2025 23:49
@claude
Copy link
Copy Markdown
Contributor

claude Bot commented Dec 16, 2025

Code Review - PR #2230

Summary

This PR adds SSL certificate error exclusions to the lychee link checker configuration. The changes are well-structured, appropriately documented, and follow best practices.


Strengths

  1. Appropriate Solution: Excluding external sites with SSL issues we cannot control is the correct approach for a link checker.

  2. Excellent Documentation:

    • Clear inline comments explaining each exclusion reason
    • Well-organized grouping (SSL issues separated from other exclusions)
    • PR description includes detailed testing verification
    • Links to related PRs and issues
  3. Correct Regex Patterns: The patterns ^https://(www\.)?domain\.com properly:

    • Match both www and non-www variants
    • Anchor to start with ^ to avoid false positives
    • Escape dots properly
  4. Verified Testing: PR author confirmed local testing with lychee (good practice per CLAUDE.md)


📋 Minor Observations

  1. Pattern Consistency: Consider whether trailing paths should also be matched. Current patterns will match:

    • https://blinkinc.com
    • https://www.blinkinc.com/path

    This is likely correct, but verify if you want to exclude all paths under these domains or just the root.

  2. Optional Enhancement: The patterns don't include http:// variants. This is probably fine since most sites use HTTPS, but if any old documentation links to http:// versions, they won't be excluded. Current exclusions show mixed approaches:

    • Some use ^https?:// (e.g., rubyonrails.org/doctrine, foxford.ru)
    • Most use ^https:// only

    Recommendation: Keep as-is unless you find http:// links to these domains in your docs.


🔍 Verification

Checked that:

  • ✅ All 4 domains appear in PROJECTS.md or README.md
  • ✅ Regex patterns correctly match both www and non-www variants
  • ✅ Patterns are properly anchored to avoid false positives
  • ✅ Follows existing .lychee.toml formatting conventions
  • ✅ Comments are clear and explain the SSL issue type

Recommendation

APPROVE - This PR is ready to merge. It's a clean, well-documented fix for a legitimate issue. The changes are minimal, focused, and follow the project's conventions.

The author followed best practices:

  • Tested locally before pushing ✅
  • Documented the testing process ✅
  • Provided clear context and reasoning ✅
  • Linked to related issues/PRs ✅

Great work! 🎉


Reviewed by Claude Code following CLAUDE.md guidelines

@ihabadham ihabadham merged commit 3ef0ff0 into master Dec 17, 2025
28 of 31 checks passed
@ihabadham ihabadham deleted the ihabadham/add-lychee-ssl-exclusions branch December 17, 2025 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add SSL certificate and network error exclusions to lychee config

1 participant