orneryd / NornicDB / 30405079904

89%

Build Type

push

github

Committed by orneryd

Commit Message

fix(search): harden persisted index path handling

Use rooted filesystem handles for vector metadata, HNSW, IVFPQ, and
BM25 persistence to prevent path traversal at file-operation sinks.

Document deterministic configured-artifact maintenance operations for
CodeQL, including search index directory creation, atomic replacement,
stat checks, and cleanup.

Tests: go test ./pkg/security ./pkg/search

Coverage Stats

37 of 37 new or added lines in 7 files covered. (100.0%)

8 existing lines in 4 files now uncovered.

147913 of 165954 relevant lines covered (89.13%)

1.04 hits per line