• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stacklok / toolhive / 21831437508
62%

Build:
DEFAULT BRANCH: main
Ran 09 Feb 2026 03:44PM UTC
Jobs 1
Files 518
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

09 Feb 2026 03:35PM UTC coverage: 61.361% (+0.07%) from 61.292%
21831437508

push

github

web-flow
Add AWS STS token exchange for OIDC-to-AWS credential conversion (#3659)

* Add AWS STS token exchange for OIDC-to-AWS credential conversion

This implements the Exchanger component that converts OIDC identity tokens
into temporary AWS credentials using STS AssumeRoleWithWebIdentity. The
exchanger uses regional STS endpoints for lower latency and maps STS API
errors to package-level sentinel errors for consistent error handling.

Related: #3567

* Address PR review feedback for AWS STS token exchanger

- Use anonymous credentials for STS client since AssumeRoleWithWebIdentity
  does not require pre-existing AWS credentials
- Remove manual BaseEndpoint override and let the SDK resolve regional
  endpoints natively
- Replace raw STS error wrapping with sentinel errors to prevent leaking
  sensitive information (account IDs, role ARNs, token fragments)
- Convert bare fmt.Errorf validation errors to sentinel errors for
  consistency with the rest of the package
- Add nil check on STS output at the interface boundary

47 of 72 new or added lines in 1 file covered. (65.28%)

42348 of 69014 relevant lines covered (61.36%)

76.88 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
25
65.28
pkg/auth/awssts/exchange.go
Jobs
ID Job ID Ran Files Coverage
1 21831437508.1 09 Feb 2026 03:44PM UTC 518
61.36
GitHub Action Run
Source Files on build 21831437508
  • Tree
  • List 518
  • Changed 6
  • Source Changed 0
  • Coverage Changed 6
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #21831437508
  • 2f5d58a7 on github
  • Prev Build on main (#21830932431)
  • Next Build on main (#21835073589)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc