Repository navigation
Recover #24/#25 onto main + extend test coverage (56→68%) - #26
Merged
Merged
Conversation
New docs/SELF_HOSTING.md (host the dashboard cheaply on Fly.io/Render/Cloud Run with no cluster). changelog gets the [1.0.0] Unreleased entry; README status moves to v1.0.0 (Phase 14 current), adds a post-1.0 roadmap, the self-hosting doc index entry, and doctor/admission/snapshot command examples. INSTALL + ARCHITECTURE reference self-hosting and the admission command; SPA footer shows v1.0.0. Package __version__ stays 0.13.0 until the formal tag/PyPI cut (RELEASE.md). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Both Dockerfile.dashboard and Dockerfile.webhook still pinned fastapi==0.111.0, so the in-cluster containers shipped the Starlette CVEs already fixed in pyproject. Bump both to fastapi>=0.136,<0.137 + starlette>=1.2,<1.3, matching the [dashboard] extra. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Adds CliRunner tests for main (smoke + all commands wired), rollback, verify-image, sbom, status, and logs — previously 0% covered. Total coverage 56 to 66 percent; the CI gate moves to --cov-fail-under=64. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…); ratchet gate to 66 Adds tests for two previously-0% security runners (syft SBOM, cosign verify — skip/timeout/failure/success paths) and guardops init (scaffold, name validation, missing deps, no-clobber). Total coverage 66 to 68 percent; CI gate --cov-fail-under 64 to 66. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Recovers the orphaned #24 (docs) and #25 (audit/coverage) onto
mainand extends test coverage further.The earlier stacked PRs merged into each other's branches instead of
main: when #23 merged (and its branch was deleted), #24 merged into the feature branch and #25 into the docs branch — so GitHub marked them "MERGED" but their content never reachedmain. Those commits are cherry-picked here (no rebase/data loss), so this single PR brings everything tomaincleanly. In future, merge stacked PRs top-down, or don't delete the base branch until the children retarget.Contents
docs/SELF_HOSTING.md, changelog[1.0.0], README → v1.0.0 + post-1.0 roadmap, footer → v1.0.0.Dockerfile.dashboard/Dockerfile.webhookbumped off the vulnerablefastapi==0.111.0to the patched pins.main,rollback,verify-image,sbom,status,logs— plus new tests forsbom_runner,cosign_verifier, andinit.Coverage
56% → 68%. CI gate ratcheted
--cov-fail-under55 → 66.Verification
ruff check cli/ backend/clean; all new test files cleanStill 0% (next iteration)
alertmanager_handler.py(214 stmts),quarantine_cmd(190),switch_cmd(167) — targeting these next would push past ~76%.🤖 Generated with Claude Code