[Coverage Report] Test Coverage Report — 2026-06-03 #4239
Replies: 12 comments
-
|
. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir, and the smoke test agent has walked this discussion. The omens are favorable. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir; the smoke test agent was here, and the run was marked in the hidden ledger. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir over this discussion. The smoke-test agent has passed through, left a bright trace, and the omens read clean. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir; the smoke-test agent has walked this discussion and left a trace in the stars. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir, and the smoke test agent leaves its trace upon this discussion. The omens are favorable. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir, and the smoke-test agent has passed through this discussion. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir, and the smoke-test agent has passed through this chamber with a clean omen. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir around this discussion. The smoke test agent was here, the omens were checked, and the run held steady under the moon of validation. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir; the smoke test agent passed through and left its mark in the logs. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir, and the smoke test agent was here. The omens were read, the build was forged, and the path remained true. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
This discussion was automatically closed because it expired on 2026-06-10T00:16:30.878Z.
|
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Overall Coverage
Overall coverage is excellent. No files fall below 50% statement coverage.
🔴 Critical Gaps (< 50% statement coverage)
None. All 149 source files are above 50% statement coverage.
🟡 Low Coverage (50–79% statement coverage)
src/commands/validators/network-options.tsThis file was recently modified (within the last 7 days). It validates Docker host and DinD options — security-relevant path since misconfigured Docker host settings could affect network isolation.
🛡️ Security-Critical Path Status
src/host-iptables.tssrc/squid-config.tssrc/docker-manager.tssrc/domain-patterns.tssrc/cli.tssrc/cli.tswas recently modified. While statement coverage is 85.7%, branch coverage is only 50% — some CLI conditional paths are untested.📋 Files with 80–89% Statement Coverage
src/services/agent-volumes/etc-mounts.tssrc/logs/audit-enricher.tssrc/artifact-preservation.tssrc/cli.tssrc/logs/log-parser.tssrc/squid/policy-manifest.tssrc/services/agent-volumes/docker-host-staging.tssrc/commands/logs-command-helpers.tssrc/commands/validators/log-and-limits.tsSeveral of these (
etc-mounts.ts,log-parser.ts,audit-enricher.ts) were recently modified — new branches may have been added without corresponding tests.🔍 Notable Findings
src/commands/validators/network-options.ts— 50% branch coverage, recently changed. This validator handles Docker host configuration checks and DinD detection. The threeifbranches (lines 47, 59, 64) covering invalid Docker host + missing path prefix scenarios are partially untested. A security misconfiguration here could allow unintended network access.src/cli.ts— 50% branch coverage. Only 13 lines but orchestrates the main CLI entry point. Low branch coverage suggests error paths (e.g., invalid flags, failed startup) are untested. Given recent modifications, new branches may have been added without tests.src/services/agent-volumes/etc-mounts.ts— 67.8% branch coverage, recently changed. This file controls which/etcfiles are selectively bind-mounted into the agent container (notably excluding/etc/shadow). Untested branches here could lead to unintended file exposure.src/logs/log-parser.tsandsrc/logs/audit-enricher.ts— ~67–74% branch coverage, both recently changed. Log parsing edge cases (malformed entries, empty lines, unexpected formats) may not be fully tested.📈 Recommendations
High —
src/commands/validators/network-options.ts: Add tests for the three DinD-related validation branches, particularly the case wheredockerHostCheck.validis false anddockerHostPathPrefixis absent. This is the only file below 80% and was recently changed.High —
src/cli.tsbranch coverage: Add tests for CLI error paths — failed Docker host detection, missing required options, and signal handling edge cases. 50% branch coverage on the main entry point is a meaningful gap.Medium —
src/services/agent-volumes/etc-mounts.ts: Add tests for conditional logic around which/etcsubdirectory entries are included vs. excluded from bind mounts. Uncovered branches here relate directly to credential isolation.Low —
src/logs/log-parser.ts/src/logs/audit-enricher.ts: Add tests for malformed or partial log line parsing — these don't affect runtime security but improve reliability of the reporting pipeline.Generated by test-coverage-reporter workflow. Trigger:
push· Run ID: 26855670809Beta Was this translation helpful? Give feedback.
All reactions