• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

KarpelesLab / bnpm / 26193907419
12%

Build:
DEFAULT BRANCH: master
Ran 20 May 2026 10:35PM UTC
Jobs 1
Files 7
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

20 May 2026 10:34PM UTC coverage: 11.504% (+2.1%) from 9.364%
26193907419

push

github

MagicalTux
Fix CIDR containment in network allow list, add claude-hardened profile

The IP allow list parsed CIDR entries with ParsePrefix but stored only
pfx.Addr() in the same map as bare addresses, so "10.0.0.0/8" matched
only 10.0.0.0 and nothing else in the range. Split prefixes into their
own []netip.Prefix and check with Contains. Add regression test.

Add claude-hardened profile (opt-in via --profile claude-hardened) that
removes attack surface from claude-full:
  - no ~/.ssh bind mount, no SSH_AUTH_SOCK passthrough
  - no ~/.config mount (prevents writing ~/.config/bnpm/config.toml to
    broaden the sandbox on the next run via user-profile precedence)
  - no ~/.npm / ~/.npm-global (no install-cache tampering)
  - drops *.sentry.io, *.google.com, *.googleapis.com, marketplace and
    CDN wildcards that double as TLS-tunneled exfil channels
  - tightens GitHub to non-wildcard hostnames

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

10 of 12 new or added lines in 1 file covered. (83.33%)

1 existing line in 1 file now uncovered.

130 of 1130 relevant lines covered (11.5%)

1.05 hits per line

Uncovered Changes

Lines Coverage ∆ File
2
61.62
24.98% dns.go

Coverage Regressions

Lines Coverage ∆ File
1
61.62
24.98% dns.go
Jobs
ID Job ID Ran Files Coverage
1 26193907419.1 20 May 2026 10:35PM UTC 7
11.5
GitHub Action Run
Source Files on build 26193907419
  • Tree
  • List 7
  • Changed 1
  • Source Changed 0
  • Coverage Changed 1
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • 96db328a on github
  • Prev Build on master (#23980447911)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc