39402561858
73%

Ran 20 Oct 2026 09:49AM UTC

Jobs 1

Files 960

Run time 1min

Badge

Embed ▾

Committed 20 Oct 2026 09:41AM UTC coverage: 71.323% (-0.09%) from 71.409%

Build # 39402561858

Build Type

push

github

Committed by

web-flow

Commit Message

Add native Go fuzz targets for untrusted parsers (#6877)

ToolHive has only one native fuzz target today. These cover the parsers
where the threat model says untrusted input enters: MCP JSON-RPC
envelopes, WWW-Authenticate headers, JWT claim arrays and STS session
names, session bindings, skill and plugin manifests, and imported
RunConfigs. They run as plain unit tests on their seed corpora and are
meant for a later OSS-Fuzz or ClusterFuzzLite integration.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Coverage Stats

87495 of 122674 relevant lines covered (71.32%)

125.49 hits per line

Coverage Regressions

Lines	Coverage	∆	File
68	35.57	-13.44%	pkg/api/server.go
18	65.85	-21.95%	pkg/client/discovery.go
7	40.91	-31.82%	pkg/storage/sqlite/factory.go
6	19.87	-3.97%	pkg/client/manager.go
5	79.41	-14.71%	pkg/client/codex_desktop.go
3	58.59	-0.26%	pkg/container/docker/client.go
2	80.0	-5.71%	pkg/vmcp/backendregistry/registry.go
2	59.21	-0.21%	pkg/workloads/manager.go

Jobs

ID	Job ID	Ran	Files	Coverage
1	39402561858.1	20 Oct 2026 09:49AM UTC	960	71.32	GitHub Action Run

stacklok / toolhive / 39402561858
73%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39402561858

stacklok / toolhive / 39402561858 73%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Coverage Regressions

Jobs

Source Files on build 39402561858

stacklok / toolhive / 39402561858
73%

README BADGES
x