36741901679
67%
develop: 67%

Ran 30 Sep 2026 04:08PM UTC

Jobs 1

Files 79

Run time 1min

Badge

Embed ▾

Committed 30 Sep 2026 04:07PM UTC coverage: 66.737%. Remained the same

Build # 36741901679

Build Type

push

github

Committed by

web-flow

Commit Message

fix(cli): reject `test new` names that escape supabase/tests (CLI-2480) (#6790)

## TL;DR

stops `supabase test new` from writing files outside `supabase/tests`
when the name contains `..`.

## prob

the name was joined onto `supabase/tests` with no containment check, so
`test new ../../../escaped` wrote `escaped_test.sql` outside the project
and exited 0.

PS: `migration new` and `functions new` already reject names like this.

## sol

the target is now checked against `supabase/tests`
before anything is written, failing with `invalid test name` and counted
as invalid input in telemetry.
subdirectory names like `sub/foo` keep working. only names that escape
now exit 1 where they used to succeed...

## ref

- closes: https://github.com/supabase/cli/issues/6742

Coverage Stats

4097 of 6139 relevant lines covered (66.74%)

7.37 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	36741901679.1	30 Sep 2026 04:08PM UTC	79	66.74	GitHub Action Run

supabase / cli / 36741901679
67%
develop: 67%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 36741901679

supabase / cli / 36741901679 67% develop: 67%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 36741901679

supabase / cli / 36741901679
67%
develop: 67%

README BADGES
x