[Coverage Report] Test Coverage Report — 2026-06-05 #4413
Replies: 4 comments
-
|
🔮 The ancient spirits stir, and the smoke test agent was here. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
-
|
This discussion was automatically closed because it expired on 2026-06-12T21:36:02.324Z.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stirred over discussion 4413; the smoke test agent passed through, traced the GitHub winds, and left this oracle-marked whisper behind.
|
Beta Was this translation helpful? Give feedback.
-
|
🔮 The ancient spirits stir; the smoke test agent was here, and the omens read PASS. Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "registry.npmjs.org"See Network Configuration for more information.
|
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Overall Coverage
101 test files · 133 source files
🔴 Critical Gaps (< 50% statement coverage)
None. All source files exceed 50% statement coverage.
🟡 Low Coverage (50–79% statement coverage)
src/commands/validators/network-options.tsValidates Docker host / DinD path-prefix options. Uncovered paths are error branches for invalid socket URIs and missing
--docker-host-path-prefixwhen DinD is enabled.🛡️ Security-Critical Path Status
src/host-iptables.tssrc/squid-config.tssrc/docker-manager.tssrc/domain-patterns.tssrc/cli.tscli.ts50% branch: therequire.main === moduleentry-point guard — a standard Node.js pattern that cannot be hit in Jest without spawning a subprocess. Not a security gap. All iptables submodules (host-iptables-rules.ts,-network.ts,-cleanup.ts,-shared.ts) are at 100%.📋 Files Below 90% Branch or Statement Coverage
src/commands/validators/network-options.tssrc/services/agent-volumes/etc-mounts.tssrc/logs/audit-enricher.tssrc/artifact-preservation.tssrc/cli.tssrc/logs/log-parser.tssrc/squid/policy-manifest.tssrc/services/agent-volumes/docker-host-staging.tssrc/commands/logs-command-helpers.tssrc/dind-bootstrap.tssrc/services/doh-proxy-service.tssrc/commands/validators/log-and-limits.tssrc/services/host-path-prefix.tssrc/services/api-proxy-service.tssrc/services/agent-environment/environment-builder.tssrc/services/agent-volumes/workspace-mounts.tsAll other source files are ≥ 90% on both metrics. See the LCOV report artifact for the complete breakdown.
🔍 Notable Findings
src/logs/log-parser.ts— 67% branch (23 uncovered of 70): Largest absolute branch gap. Uncovered paths involve malformed/unexpected Squid log line formats. Add fuzz-style tests with truncated lines and missing fields.src/dind-bootstrap.ts— 67% branch (11 uncovered of 33): DinD detection and binary-staging error paths (!sourceStat.isFile(), regex validation failures, missing binary path). Harder to test locally but worthwhile for ARC runners.src/services/agent-volumes/etc-mounts.ts— 82% stmt / 68% branch: Controls selective/etcexposure into the agent container (intentionally excludes/etc/shadow). 9 uncovered branches affect confidence in credential isolation.src/artifact-preservation.ts— 85% stmt (new, recently added): All uncovered statements arecatchblocks in filesystem copy operations. Exercise withfsmock failures for graceful degradation coverage.📈 Recommendations
src/logs/log-parser.ts(branch 67%): Parametrized tests with malformed Squid log lines — truncated, missing fields, unexpected formats. Covers 23 uncovered branches.src/services/agent-volumes/etc-mounts.ts(branch 68%): Test uncovered mount-selection branches to strengthen/etc/shadowexclusion guarantees.src/dind-bootstrap.ts(branch 67%): Test invalid binary paths, non-file sources, and non-`(redacted) Docker host URIs.src/commands/validators/network-options.ts(stmt 67%): Quick win — add tests for the two uncovered validator error paths.Generated by test-coverage-reporter workflow · Trigger:
pushBeta Was this translation helpful? Give feedback.
All reactions