supabase / wrappers / 21812056043
76%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 58
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 76.485% (+0.2%) from 76.278%
21812056043

push

github

web-flow 
hardening and docs (#562)

* security(wasm_fdw): require fdw_package_checksum for supply chain protection

Make fdw_package_checksum a required option for all WASM FDW servers.
This ensures supply chain integrity by requiring verification of WASM
package contents before execution.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* security(wrappers): implement credential masking to prevent leaks in error messages

Add sanitize_error_message() utility to automatically mask sensitive values
like API keys and tokens in error messages before they're displayed to users.

- Add utils.rs with credential masking functions
- Export sanitize_error_message in prelude
- Add ProtectedOptionValue for tracking credentials in options
- Apply credential masking to all HTTP-based FDWs:
  - Stripe, Airtable, Firebase, Logflare, Auth0, Cognito, DuckDB

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* security(wrappers): add configurable response size limits to HTTP-based FDWs

Add protection against DoS attacks via maliciously large HTTP responses.
Each HTTP-based FDW now has a configurable max_response_size option
(default: 10 MB) that rejects responses exceeding the limit.

Affected FDWs:
- Stripe: ResponseTooLarge error with size checking
- Airtable: ResponseTooLarge error with size checking
- Firebase: ResponseTooLarge error with size checking
- Logflare: Changed from .json() to .text() for size checking
- Auth0: ResponseTooLarge error type added
- Cognito: ResponseTooLarge error type added

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* docs(security): add platform-wide security documentation and tests

Add comprehensive security documentation and tests for the Wrappers platform:

- SECURITY.md: Platform-wide security documentation covering:
  - Supply chain security (WASM package verification)
  - Credential masking in error messages
  - Response size limits

- wasm-wrappers/tests/test_wasm_security.sql: Platform-wide security tests
 ... (continued)

313 of 402 new or added lines in 15 files covered. (77.86%)

7 existing lines in 7 files now uncovered.

7097 of 9279 relevant lines covered (76.48%)

51.52 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
1
95.0
 4.52% supabase-wrappers/src/instance.rs
2
82.91
 19.38% supabase-wrappers/src/utils.rs
2
0.0
 0.0% wrappers/src/fdw/airtable_fdw/mod.rs
2
87.76
 -1.83% wrappers/src/fdw/auth0_fdw/auth0_client/mod.rs
2
76.47
 0.0% wrappers/src/fdw/auth0_fdw/auth0_fdw.rs
2
0.0
 0.0% wrappers/src/fdw/cognito_fdw/mod.rs
2
0.0
 0.0% wrappers/src/fdw/duckdb_fdw/mod.rs
2
0.0
 0.0% wrappers/src/fdw/firebase_fdw/mod.rs
2
0.0
 0.0% wrappers/src/fdw/logflare_fdw/mod.rs
2
0.0
 0.0% wrappers/src/fdw/stripe_fdw/mod.rs
6
85.92
 17.06% supabase-wrappers/src/options.rs
11
86.21
 -6.59% wrappers/src/fdw/airtable_fdw/airtable_fdw.rs
11
76.54
 -2.83% wrappers/src/fdw/firebase_fdw/firebase_fdw.rs
13
65.04
 -1.79% wrappers/src/fdw/logflare_fdw/logflare_fdw.rs
29
76.48
 -2.34% wrappers/src/fdw/stripe_fdw/stripe_fdw.rs

Uncovered Existing Lines

Lines Coverage ∆ File
1
95.0
 4.52% supabase-wrappers/src/instance.rs
1
76.47
 0.0% wrappers/src/fdw/auth0_fdw/auth0_fdw.rs
1
0.0
 0.0% wrappers/src/fdw/cognito_fdw/mod.rs
1
0.0
 0.0% wrappers/src/fdw/duckdb_fdw/mod.rs
1
0.0
 0.0% wrappers/src/fdw/firebase_fdw/mod.rs
1
0.0
 0.0% wrappers/src/fdw/logflare_fdw/mod.rs
1
0.0
 0.0% wrappers/src/fdw/stripe_fdw/mod.rs
Jobs
ID Job ID Ran Files Coverage
1 21812056043.1 58
76.48
 GitHub Action Run
Source Files on build 21812056043