• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stacklok / toolhive / 25500234879
65%

Build:
DEFAULT BRANCH: main
Ran 07 May 2026 02:01PM UTC
Jobs 1
Files 720
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

07 May 2026 01:54PM UTC coverage: 64.786% (-0.01%) from 64.796%
25500234879

push

github

web-flow
Restrict Windows named-pipe DACL to creating user (#5214)

By default winio.ListenPipe inherits the kernel default DACL, which
on shared, RDP, or Citrix hosts permits any other interactive user
to open the pipe and exercise the entire REST API; OIDC is opt-in
via WithOIDCConfig and not always present.

Set an explicit SDDL granting GenericAll only to the creating user
(OW) and SYSTEM (SY), with the Protected flag (P) so no inherited
ACEs widen the descriptor. Soften the surrounding doc comment to
match what the listener now enforces, and mark the Windows
AF_UNIX fallback path as best-effort since the .sock file inherits
the parent directory's NTFS ACL.

Add http.Server.IdleTimeout as defense in depth across platforms;
winio.MaxInstances defaults to 255, so a slow client must not be
allowed to keep an instance idle indefinitely and starve new
connections.

Co-authored-by: Cursor <cursoragent@cursor.com>

63205 of 97560 relevant lines covered (64.79%)

57.83 hits per line

Coverage Regressions

Lines Coverage ∆ File
92
15.15
2.5% pkg/api/server.go
12
75.09
-4.33% pkg/client/config.go
12
67.9
-14.81% pkg/client/discovery.go
10
90.99
0.4% pkg/server/discovery/health.go
8
23.56
-4.6% pkg/client/manager.go
2
94.77
-1.31% pkg/vmcp/composer/dag_executor.go
Jobs
ID Job ID Ran Files Coverage
1 25500234879.1 07 May 2026 02:01PM UTC 720
64.79
GitHub Action Run
Source Files on build 25500234879
  • Tree
  • List 720
  • Changed 10
  • Source Changed 3
  • Coverage Changed 10
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #25500234879
  • ef5e8f7f on github
  • Prev Build on main (#25498899897)
  • Next Build on main (#25505472220)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc