Fixed Bandit risks

Author: Jah-Wilson Teeba

src/chroma_knowledge_search/backend/app/config.py

@@ -54,8 +54,12 @@ def load_config():
             from dotenv import load_dotenv
 
             load_dotenv()
-        except Exception:
-            pass  # .env file may not exist in CI
+        except ImportError:
+            # dotenv not available, skip loading
+            pass
+        except FileNotFoundError:
+            # .env file may not exist in CI
+            pass
 
 
 def get_allow_origins():

src/chroma_knowledge_search/backend/app/db.py

@@ -16,8 +16,9 @@ def get_engine():
             from chroma_knowledge_search.backend.app.config import load_config
 
             load_config()
-        except Exception:
-            pass  # Config loading may fail in tests
+        except (ImportError, FileNotFoundError):
+            # Config loading may fail in tests or when files don't exist
+            pass
 
         db_url = os.getenv("DB_URL", "sqlite+aiosqlite:///:memory:")
         _engine = create_async_engine(db_url, echo=False, future=True)

src/chroma_knowledge_search/backend/app/main.py

@@ -57,5 +57,8 @@ async def health():
 
 if __name__ == "__main__":
     import uvicorn
+    import os
 
-    uvicorn.run(app, host="0.0.0.0", port=10000)
+    host = os.getenv("HOST", "127.0.0.1")
+    port = int(os.getenv("PORT", "8000"))
+    uvicorn.run(app, host=host, port=port)