Latte 4e108771f8 ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

..

__init__.py

fix: cap and type-check the unauthenticated consent POST body (SEC-01)

2026-10-14 17:07:06 +02:00

helpers.py

fix: cap and type-check the unauthenticated consent POST body (SEC-01)

2026-10-14 17:07:06 +02:00

test_audit_fail_closed.py

fix: record the calling client and only schema-known names in audit entries (SEC-12, SEC-18)

2026-10-14 17:14:13 +02:00

test_audit_file.py

fix: create the audit log 0600 in a 0700 directory and refuse symlinks (SEC-11)

2026-10-14 17:18:29 +02:00

test_auth_required.py

test: security suite for auth, startup, redaction; fix: mask secrets in object keys

2026-10-14 17:44:20 +02:00

test_base_url_validation.py

fix: reject whitespace and control characters in base URLs and warn on plain http Gitea (SEC-10)

2026-10-14 17:34:15 +02:00

test_ci_workflows.py

ci: build under a per-run local tag, untag registry refs only, gate the image push on every test job

2026-10-14 18:02:43 +02:00

test_env_file.py

fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)

2026-10-14 17:22:29 +02:00

test_malformed_input.py

fix: reject a trailing newline in sudo; test: malformed input suite

2026-10-14 17:49:37 +02:00

test_oauth_csrf.py

fix: require a matching Origin on consent and name the binding cookie per flow (SEC-17, SEC-19)

2026-10-14 17:26:52 +02:00

test_oauth_input_bounds.py

fix: quota pending sign-ins and registrations per address, keep young clients, write the store off the loop (SEC-09)

2026-10-14 17:32:03 +02:00

test_oauth_redirects.py

fix: add OAUTH_REDIRECT_ALLOWLIST for client registration and waive the open default (SEC-05)

2026-10-14 17:24:41 +02:00

test_rate_limits.py

fix: rate limit /token and /revoke, bucket IPv6 by /64 and warn about untrusted forwarded headers (SEC-08)

2026-10-14 17:29:12 +02:00

test_redaction.py

fix: do not echo setting values in configuration errors; test: stdio and config redaction

2026-10-14 17:52:07 +02:00

test_secret_echo.py

fix: redact a data field in Action secret responses; test: secret echo suite

2026-10-14 17:46:11 +02:00

test_startup_fail_closed.py

test: security suite for auth, startup, redaction; fix: mask secrets in object keys

2026-10-14 17:44:20 +02:00

test_token_store.py

fix: refuse a token store directory owned by another user or left writable (SEC-13)

2026-10-14 17:36:21 +02:00