34826141016
71%

Ran 14 Sep 2026 09:14AM UTC

Jobs 1

Files 920

Run time 2min

Badge

Embed ▾

Committed 14 Sep 2026 09:06AM UTC coverage: 70.513% (-0.05%) from 70.56%

Build # 34826141016

Build Type

push

github

Committed by

web-flow

Commit Message

Use self-repository syntax for local workflow refs (#6654)

GitHub's `./...` workspace-relative syntax resolves against runner
filesystem state at step-execution time, so any earlier step that writes
into .github/ can substitute the workflow or action a later step runs.
This matters most in run-on-pr.yml, which executes untrusted pull request
code in the tests and skills-build jobs.

`$/...` resolves from the repository at the caller's commit instead, is
immune to workspace tampering, and counts as a pinned reference for
GitHub's actions policy. It is the syntax GitHub now recommends for
same-repository references.

Clears 31 zizmor self-repository findings in the code scanning backlog.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

Coverage Stats

81086 of 114994 relevant lines covered (70.51%)

97.19 hits per line

Coverage Regressions

Lines	Coverage	∆	File
49	59.21	-4.89%	pkg/workloads/manager.go
6	19.87	-3.97%	pkg/client/manager.go
3	0.0	-100.0%	pkg/workloads/sysproc_unix.go
1	81.07	-0.12%	pkg/vmcp/composer/workflow_engine.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	34826141016.1	14 Sep 2026 09:14AM UTC	920	70.51	GitHub Action Run

stacklok / toolhive / 34826141016
71%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 34826141016

stacklok / toolhive / 34826141016 71%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 34826141016

stacklok / toolhive / 34826141016
71%

README BADGES
x