fix: normalize discovered paths to forward slashes and add a Windows CI job #355
affaan-mci.yml
on: pull_request
Matrix: verify
Verify (Windows, Node 22)
1m 8s
Self-scan examples
22s
Annotations
5 errors and 1 warning
|
Verify (Windows, Node 22)
Process completed with exit code 1.
|
|
tests/runtime/status.test.ts > getRuntimeStatus > uses the configured log path from a valid runtime policy:
tests/runtime/status.test.ts#L120
AssertionError: expected false to be true // Object.is equality
- Expected
+ Received
- true
+ false
❯ tests/runtime/status.test.ts:120:72
|
|
tests/runtime/status.test.ts > getRuntimeStatus > reports ready when runtime hook and policy are installed:
tests/runtime/status.test.ts#L41
AssertionError: expected false to be true // Object.is equality
- Expected
+ Received
- true
+ false
❯ tests/runtime/status.test.ts:41:68
|
|
tests/evidence-pack/evidence-pack.test.ts > writeEvidencePack > redacts local paths, emails, and token-shaped strings by default:
tests/evidence-pack/evidence-pack.test.ts#L336
AssertionError: expected '{\n "timestamp": "2026-05-13T05:00:0…' to contain '<target-path>'
- Expected
+ Received
- <target-path>
+ {
+ "timestamp": "2026-05-13T05:00:00.000Z",
+ "targetPath": "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\agentshield-sensitive-target-u2Zwva",
+ "findings": [
+ {
+ "id": "secrets-hardcoded-api-key",
+ "severity": "critical",
+ "category": "secrets",
+ "title": "Hardcoded API key",
+ "description": "A token-shaped value was found. Contact <redacted-email>.",
+ "file": "C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\agentshield-sensitive-target-u2Zwva\\.claude\\settings.json",
+ "line": 12,
+ "evidence": "sk-<redacted>"
+ }
+ ],
+ "defenses": [],
+ "score": {
+ "grade": "C",
+ "numericScore": 72,
+ "breakdown": {
+ "secrets": 20,
+ "permissions": 90,
+ "hooks": 90,
+ "mcp": 90,
+ "agents": 90
+ }
+ },
+ "summary": {
+ "totalFindings": 1,
+ "critical": 1,
+ "high": 0,
+ "medium": 0,
+ "low": 0,
+ "info": 0,
+ "filesScanned": 1,
+ "autoFixable": 0,
+ "defenses": 0
+ }
+ }
+
❯ tests/evidence-pack/evidence-pack.test.ts:336:24
|
|
tests/evidence-pack/evidence-pack.test.ts > writeEvidencePack > writes a deterministic portable evidence bundle:
tests/evidence-pack/evidence-pack.test.ts#L286
AssertionError: expected 'secrets-hardcoded-api-key::C:\Users\R…' to match /^secrets-hardcoded-api-key::…/\.claude\
- Expected:
/^secrets-hardcoded-api-key::<target-path>\/\.claude\/settings\.json::sha256:[a-f0-9]{16}$/
+ Received:
"secrets-hardcoded-api-key::C:\\Users\\RUNNER~1\\AppData\\Local\\Temp\\agentshield-target-XY5FsZ\\.claude\\settings.json::sha256:7679f4b3a52724b9"
❯ tests/evidence-pack/evidence-pack.test.ts:286:53
|
|
Self-scan examples
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
scan-results
|
16 KB |
sha256:c7531852d9c5d9ee2b00f4686c371ed89f6bb28ab5c230cd7c0462973f138ac5
|
|