22243102089
87%

Ran 20 Feb 2026 10:10PM UTC

Jobs 1

Files 55

Run time 1min

Badge

Embed ▾

Committed 20 Feb 2026 10:08PM UTC coverage: 86.697%. Remained the same

Build # 22243102089

Build Type

push

github

Committed by

web-flow

Commit Message

[FSSDK-12312] Fix Arnica security vulnerabilities (#460)

* [FSSDK-12312] Fix Arnica security vulnerabilities

- Remove sourceclear job from GitHub workflows (CWE-506 curl|bash)
- Add persist-credentials: false to all checkout actions (CWE-256, CWE-522)
- Add security documentation to OpenAPI specs (webhook.yaml, openapi.yaml)
- Add maxItems: 1000000 to all OpenAPI arrays with explanatory comment
- Remove chardet (LGPL-3.0) from examples/requirements.txt
- Remove pytest-clarity (low reputation) from tests/acceptance/requirements.txt
- Upgrade go-kit/kit to v0.13.0

Note: gohistogram dependency flagged by Arnica but accepted as it has no
known CVEs and is feature-complete/stable (indirect dependency via go-kit).

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

* Remove pytest-clarity --diff-symbols flag from acceptance tests

The --diff-symbols flag was provided by pytest-clarity which was removed
in the previous commit due to low package reputation (Arnica security scan).

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

Run Details

3480 of 4014 relevant lines covered (86.7%)

2527.86 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	22243102089.1	20 Feb 2026 10:10PM UTC	55	86.7	GitHub Action Run

optimizely / agent / 22243102089
87%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 22243102089

optimizely / agent / 22243102089 87%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 22243102089

optimizely / agent / 22243102089
87%

README BADGES
x