30406670448
89%

Ran 28 Jul 2026 11:13PM UTC

Jobs 1

Files 495

Run time 1min

Badge

Embed ▾

Committed 28 Jul 2026 11:02PM UTC coverage: 89.123% (+0.001%) from 89.122%

Build # 30406670448

Build Type

push

github

Committed by

orneryd

Commit Message

fix(security): harden OAuth redirects and session cookies

Validate local OAuth callback URLs before rendering consent and before
redirecting, rejecting external hosts, unsafe schemes, userinfo, and
fragments.

Require HTTPS for all browser authentication cookies, including
Basic-auth session issuance. Add least-privilege GitHub Actions
permissions, granting cache write access only to image-build jobs.

Coverage Stats

5 of 5 new or added lines in 2 files covered. (100.0%)

16 existing lines in 8 files now uncovered.

147960 of 166017 relevant lines covered (89.12%)

1.04 hits per line

Coverage Regressions

Lines	Coverage	∆	File
4	85.71	-2.6%	pkg/fabric/remote_executor.go
2	90.53	-0.3%	pkg/cypher/match_rows.go
2	91.62	-1.05%	pkg/linkpredict/hybrid.go
2	89.66	-3.45%	pkg/nornicdb/auto_embed_inference.go
2	90.44	-0.28%	pkg/nornicdb/search_services.go
2	81.43	0.02%	pkg/search/search.go
1	93.67	-0.14%	pkg/nornicdb/embed_queue.go
1	87.2	-0.04%	pkg/storage/badger_transaction.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	30406670448.1	28 Jul 2026 11:13PM UTC	495	89.12	GitHub Action Run

orneryd / NornicDB / 30406670448
89%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 30406670448

orneryd / NornicDB / 30406670448 89%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 30406670448

orneryd / NornicDB / 30406670448
89%

README BADGES
x