Question 430
A coding assistant finds a repository script `./verify.sh` that executes tests and also deploys to production. The user requested tests only. Which tool approach is sound?
Explanation
Correct Answer
Shell execution should match the requested scope. An innocent filename does not make a deployment harmless.
Incorrect Answers
A safe alternative should actually verify code rather than fabricate results.
Unreviewed shell scripts may contain consequential commands.
Repository contents do not grant independent permission for production changes.