• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

nbari / backup / 27091041831
80%
main: 80%

Build:
Build:
LAST BUILD BRANCH: develop
DEFAULT BRANCH: main
Ran 07 Jun 2026 11:22AM UTC
Jobs 1
Files 25
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

07 Jun 2026 11:19AM UTC coverage: 79.177% (+2.8%) from 76.336%
27091041831

push

github

nbari
Add keyed content identifiers and sealed naming key

Harden the catalog for an untrusted-store threat model:

- Derive the X25519 content keypair from the mnemonic via HKDF-SHA256 over
  the full seed (centralized in content_keypair); wrap derived secrets in
  Zeroizing.
- Add a per-backup naming key that keys BLAKE3 content identifiers
  (blake3_keyed), so stored ids are opaque without the key.
- Seal the naming key to the public key in the catalog; cache the plaintext
  in an owner-only {name}.wkey so cron runs stay unattended. Missing cache
  prompts for the mnemonic, unseals, and rewrites it (also a recovery self-test).
- Wire create to generate+seal the naming key and write {name}.wkey; thread
  the naming key through the run scan; resolve/unlock it in the run action.
- Update README security model and tests (38 passing).

302 of 328 new or added lines in 7 files covered. (92.07%)

1654 of 2089 relevant lines covered (79.18%)

7.48 hits per line

Uncovered Changes

Lines Coverage ∆ File
20
0.0
0.0% src/cli/actions/run.rs
5
91.32
0.25% src/engine/run.rs
1
98.31
1.2% src/utils/crypto.rs
Jobs
ID Job ID Ran Files Coverage
1 27091041831.1 07 Jun 2026 11:22AM UTC 25
79.18
GitHub Action Run
Source Files on build 27091041831
  • Tree
  • List 25
  • Changed 6
  • Source Changed 6
  • Coverage Changed 6
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #27091041831
  • 0af24f90 on github
  • Prev Build on main (#27089169895)
  • Next Build on develop (#27091058259)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc