-
Notifications
You must be signed in to change notification settings - Fork 124
[CI] Add mutation testing for validation and security-critical helpers #244
Copy link
Copy link
Open
Labels
area:backendBackend API, database, or service workBackend API, database, or service workarea:ciCI, tooling, or automation workCI, tooling, or automation workarea:securitySecurity-sensitive implementation or testsSecurity-sensitive implementation or testslevel:advanced55 pts difficulty label for advanced contributor PRs55 pts difficulty label for advanced contributor PRspriority:mediumImportant issue with normal urgencyImportant issue with normal urgencytype:securitySecurity work category bonus labelSecurity work category bonus labeltype:testingTesting work category bonus labelTesting work category bonus label
Metadata
Metadata
Assignees
Labels
area:backendBackend API, database, or service workBackend API, database, or service workarea:ciCI, tooling, or automation workCI, tooling, or automation workarea:securitySecurity-sensitive implementation or testsSecurity-sensitive implementation or testslevel:advanced55 pts difficulty label for advanced contributor PRs55 pts difficulty label for advanced contributor PRspriority:mediumImportant issue with normal urgencyImportant issue with normal urgencytype:securitySecurity work category bonus labelSecurity work category bonus labeltype:testingTesting work category bonus labelTesting work category bonus label
Problem
SecuScan needs a production-grade improvement in this area: Test quality for critical code..
Scope
Introduce mutation testing for validation, redaction, auth/security helpers, and document thresholds that avoid excessive runtime.
Acceptance Criteria
Verification
CI should run a targeted mutation job or scheduled workflow with a clear report artifact.
Difficulty
Hard, useful issue intended for experienced contributors.