stacklok / toolhive-studio / 28809249013

71%

main: 71%

Pull #2429

github

test(ci): build vendored aetherpak CLI from a pinned source commit

Builds the CLI from source (checked out at commit
e9388a1d4, matching the v0.14.0 tag) instead
of downloading the pre-built release binary. Pinning to an exact commit
keeps this test build fully reproducible while we iterate on the pipeline,
regardless of anything changing upstream in the meantime.

Verified this is a straightforward build: scanned all 68 .go files at this
commit, no cgo; dependencies are mainstream (go-containerregistry, cobra,
ProtonMail/go-crypto) and already checksum-pinned via the upstream go.sum.
Build command mirrors aetherpak/cli's own `make release/build` target, with
a step confirming the checkout landed on the expected commit before
building.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

5253 of 8001 branches covered (65.65%)

7727 of 10890 relevant lines covered (70.96%)

113.45 hits per line