kubeflow / mcp-server / 29656899095
47%

DEFAULT BRANCH: main
Ran
Jobs 3
Files 34
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 41.582%. Remained the same
29656899095

push

github

web-flow 
feat(ci): replace pip-audit with OSV-Scanner for CVE detection (#30)

* feat(ci): replace pip-audit with OSV-Scanner for CVE detection

Port the nightly OSV-Scanner workflow from kubeflow/sdk: scan uv.lock, upload SARIF to the GitHub Security tab, and open automated fix PRs. Add the helper scripts it invokes (extract_version, compare_versions, update_overrides).

Drop pip-audit from the dev dependencies and relock; it only queried PyPI's advisory DB, opened no fix PRs, and surfaced nothing in the Security tab.

Fixes #29

Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>

* fix(ci): match indented override-dependencies when removing old block

The removal regex was anchored at column 0, so an indented (yet valid TOML) override-dependencies key survived and the script wrote a duplicate key, producing invalid TOML. Allow leading horizontal whitespace in the removal patterns.

Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>

* chore(ci): add unit tests for the OSV-Scanner helper scripts

Run: uv run pytest .github/scripts/test_scripts.py -v
Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>

* fix(ci): fail on OSV-Scanner crashes and make packaging explicit in fixer

Drop continue-on-error from the SARIF scan so an unexpected exit (e.g. 2) fails the job instead of being swallowed; add if: always() to the JSON scan so a SARIF crash still doesn't block the independent auto-fix path. Invoke compare_versions.py via 'uv run --with packaging' so it no longer relies on packaging being a transitive lockfile dep (a missing packaging would exit 1 and be misread as 'upgrade sufficient').

Signed-off-by: Kartikeya Trivedi <kartikeyatrivedi4oct2004@gmail.com>

* fix(ci): emit auto-fix PR changelog as markdown table rows

The PR body declares a two-column table but fix_details lines were bullets, so they rendered outside the table. Emit '| pkg | advisory |' rows instead.

Signed-off-by: Kartikeya Trivedi <ka... (continued)

1020 of 2453 relevant lines covered (41.58%)

1.25 hits per line

Jobs
ID Job ID Ran Files Coverage
1 python-3.11 - 29656899095.1 34
41.58
 GitHub Action Run
2 python-3.12 - 29656899095.2 34
41.58
 GitHub Action Run
3 python-3.10 - 29656899095.3 34
41.58
 GitHub Action Run
Source Files on build 29656899095