25095716808
84%
master: 93%

Ran 29 Apr 2026 07:13AM UTC

Jobs 1

Files 23

Run time 1min

Badge

Embed ▾

Committed 29 Apr 2026 07:11AM UTC coverage: 83.829%. Remained the same

Build # 25095716808

Build Type

push

github

Committed by

web-flow

Commit Message

feat(examples/chat/chart): set enableServiceLinks: false and harden the helm test pod (#1235)

Bring the chat demo chart in line with the main mercure chart's
secure-by-default settings.

- `enableServiceLinks: false` on the hub Pod so a multi-tenant
  namespace does not get a free in-pod inventory of every neighbour
  Service via the auto-injected env vars. The chat app does its own
  service discovery (the Mercure hub URL is a config value, not
  derived from K8s env), so nothing on the app side needs the env.
- Harden the helm test pod: pinned `busybox:1.37`, no SA token, no
  service links, RuntimeDefault seccomp, drop ALL caps, RO rootfs,
  non-root, `wget -q --spider` so the response body is not written
  to disk under RO rootfs. Stays compatible with the restricted
  PodSecurity Standard.

Coverage Stats

1747 of 2084 relevant lines covered (83.83%)

49.83 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	0 - 25095716808.1	29 Apr 2026 07:13AM UTC	23	83.83	GitHub Action Run

dunglas / mercure / 25095716808
84%
master: 93%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 25095716808

dunglas / mercure / 25095716808 84% master: 93%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 25095716808

dunglas / mercure / 25095716808
84%
master: 93%

README BADGES
x