• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

orion-ecs / keen-eye / 20667926793
65%

Build:
DEFAULT BRANCH: main
Ran 02 Jan 2026 10:28PM UTC
Jobs 1
Files 556
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

02 Jan 2026 10:25PM UTC coverage: 80.864% (-0.2%) from 81.038%
20667926793

push

github

tyevco
feat(editor): Add plugin security and sandboxing system

Implement comprehensive plugin security infrastructure with:

Phase 1 - Code Analysis & Signing:
- AssemblyAnalyzer: Static IL analysis using System.Reflection.Metadata
- Detects reflection, unsafe code, P/Invoke, file/network access patterns
- PluginSignatureVerifier: Validates assembly signatures
- TrustedPublisherStore: Manages trusted signing keys
- PluginSecurityManager: Coordinates security checks before plugin load
- SecurityConfiguration: Configurable analysis modes (WarnOnly/Block)

Phase 2 - Permission System:
- PluginPermission: 64-bit flags enum with 24 permissions + composites
- PermissionManager: Grants/revokes/validates per-plugin permissions
- SecurePluginContext: Permission-aware IEditorContext wrapper
- Capability-to-permission mapping (Menu→MenuAccess, Panel→PanelAccess)
- Async permission request flow with user consent handler
- Persistent storage at ~/.keeneyes/plugin-permissions.json

Integration:
- PluginLoader runs security checks before assembly loading
- EditorPluginManager uses SecurePluginContext when enabled
- PluginManifest supports security and permissions sections

Closes #677

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

5309 of 6365 branches covered (83.41%)

Branch coverage included in aggregate %.

774 of 1050 new or added lines in 16 files covered. (73.71%)

4 existing lines in 3 files now uncovered.

34088 of 42355 relevant lines covered (80.48%)

1.15 hits per line

Uncovered Changes

Lines Coverage ∆ File
78
0.0
editor/KeenEyes.Editor/Plugins/Security/SecurePluginContext.cs
58
0.0
0.0% editor/KeenEyes.Editor/Plugins/EditorPluginManager.cs
48
69.1
editor/KeenEyes.Editor/Plugins/Security/PluginSecurityManager.cs
39
36.07
editor/KeenEyes.Editor.Abstractions/Plugins/PluginPermission.cs
18
90.45
editor/KeenEyes.Editor/Plugins/Security/AssemblyAnalyzer.cs
15
0.0
0.0% editor/KeenEyes.Editor/Plugins/PluginLoader.cs
10
93.25
editor/KeenEyes.Editor/Plugins/Security/PermissionManager.cs
3
96.2
editor/KeenEyes.Editor/Plugins/Security/SecurityConfiguration.cs
2
70.0
-12.35% editor/KeenEyes.Editor/Plugins/LoadedPlugin.cs
2
97.83
editor/KeenEyes.Editor/Plugins/Security/PluginSignatureVerifier.cs
1
90.48
-1.19% editor/KeenEyes.Editor/Plugins/PluginManifest.cs
1
97.92
editor/KeenEyes.Editor/Plugins/Security/AnalysisConfiguration.cs
1
98.57
editor/KeenEyes.Editor/Plugins/Security/SecurityFinding.cs

Coverage Regressions

Lines Coverage ∆ File
2
0.0
0.0% editor/KeenEyes.Editor/Plugins/EditorPluginManager.cs
1
0.0
0.0% editor/KeenEyes.Editor/Plugins/PluginLoader.cs
1
90.2
-1.96% src/KeenEyes.Assets/Systems/AssetResolutionSystem.cs
Jobs
ID Job ID Ran Files Coverage
1 20667926793.1 02 Jan 2026 10:28PM UTC 556
80.86
GitHub Action Run
Source Files on build 20667926793
  • Tree
  • List 556
  • Changed 6
  • Source Changed 4
  • Coverage Changed 6
Coverage ∆ File Lines Relevant Covered Missed Hits/Line Branch Hits Branch Misses
  • Back to Repo
  • Github Actions Build #20667926793
  • 94c11e67 on github
  • Prev Build on main (#20662495061)
  • Next Build on main (#20669310334)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc