Alan-Jowett / CoPilot-For-Consensus / 21612130293
78%

DEFAULT BRANCH: main
Ran
Jobs 27
Files 160
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 77.85%. First build
21612130293

push

github

web-flow 
test(security): Fuzz auth service OIDC callback flow (#1114)

* Initial plan

* Add comprehensive fuzzing tests for auth OIDC callback flow

- Created fuzzing/tests/test_auth_callback_fuzzing.py with Hypothesis and Schemathesis tests
- Tests cover callback parameter validation, CSRF protection, injection attacks, session management
- Includes property-based tests for never crashing, valid JSON responses, and security properties
- Includes Schemathesis tests for OpenAPI spec compliance and error handling
- Includes edge case tests for missing params, Unicode, special chars, and security scenarios

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* Update fuzzing workflow and documentation for auth callback tests

- Added copilot_auth and copilot_metrics to adapter installation in CI
- Added auth callback security test step to fuzzing workflow
- Updated fuzzing README with auth service coverage details
- Enhanced test file documentation with comprehensive security coverage info
- Fixed test_very_long_parameters to handle httpx URL length limits gracefully
- All 17 auth callback fuzzing tests pass successfully

Co-authored-by: Alan-Jowett <20480683+Alan-Jowett@users.noreply.github.com>

* fix: address PR review comments for auth callback fuzzing

- Remove unused imports (Any, AsyncMock)
- Add replay protection to mock (track used states)
- Fix status code assertions (400 not 500 for errors)
- Improve XSS check to verify JSON detail field
- Fix replay attack test to enforce first-succeeds/second-fails
- Remove copilot_auth import from mock to avoid runtime errors

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* Address review comments: improve assertions, XSS checks, exception handling, add success test

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* fix: remove unnecessary f-string prefixes

Signed-off-by: Alan Jowett <alan.jowett@microsoft.com>

* feat(ci): add Azure emulator-based integration testing

- ... (continued)

8755 of 11246 relevant lines covered (77.85%)

0.87 hits per line

Jobs
ID Job ID Ran Files Coverage
1 copilot_draft_diff - 21612130293.1 6
90.98
 GitHub Action Run
2 copilot_config - 21612130293.2 33
63.43
 GitHub Action Run
3 copilot_archive_fetcher_integration - 21612130293.3 9
47.46
 GitHub Action Run
4 copilot_storage_integration - 21612130293.4 8
33.3
 GitHub Action Run
5 copilot_archive_fetcher - 21612130293.5 9
68.81
 GitHub Action Run
6 chunking - 21612130293.6 2
82.75
 GitHub Action Run
7 copilot_summarization - 21612130293.7 8
90.61
 GitHub Action Run
8 copilot_chunking - 21612130293.8 2
91.91
 GitHub Action Run
9 copilot_error_reporting - 21612130293.9 5
75.34
 GitHub Action Run
10 copilot_schema_validation_integration - 21612130293.10 7
42.05
 GitHub Action Run
11 copilot_message_bus - 21612130293.11 13
74.62
 GitHub Action Run
12 summarization - 21612130293.12 2
91.22
 GitHub Action Run
13 copilot_metrics - 21612130293.13 7
72.95
 GitHub Action Run
14 copilot_consensus - 21612130293.14 3
95.48
 GitHub Action Run
15 copilot_auth - 21612130293.15 12
64.82
 GitHub Action Run
16 copilot_embedding - 21612130293.16 7
91.81
 GitHub Action Run
17 copilot_logging - 21612130293.17 6
92.64
 GitHub Action Run
18 embedding - 21612130293.18 2
81.42
 GitHub Action Run
19 copilot_storage - 21612130293.19 8
75.38
 GitHub Action Run
20 ingestion - 21612130293.20 5
79.85
 GitHub Action Run
21 parsing - 21612130293.21 7
81.9
 GitHub Action Run
22 copilot_message_bus_integration - 21612130293.22 13
30.05
 GitHub Action Run
23 reporting - 21612130293.23 2
84.48
 GitHub Action Run
24 copilot_vectorstore - 21612130293.24 8
74.09
 GitHub Action Run
25 copilot_vectorstore_integration - 21612130293.25 8
33.08
 GitHub Action Run
26 orchestrator - 21612130293.26 6
86.25
 GitHub Action Run
27 copilot_schema_validation - 21612130293.27 7
85.23
 GitHub Action Run
Source Files on build 21612130293