42829781376
67%

Ran 10 Nov 2026 02:34PM UTC

Jobs 1

Files 361

Run time 1min

Badge

Embed ▾

Committed 10 Nov 2026 02:00PM UTC coverage: 67.156% (+0.003%) from 67.153%

Build # 42829781376

Build Type

push

github

Committed by

web-flow

Commit Message

test(engine): prove manual registration and policy evaluation on repo:tag identity (#7056)

* Redefine OCI artifact identity as repo:tag, add oci/digest property

Switches DockerHub/Quay upstream_id from repo@digest to repo:tag, so
identity stays stable when a tag moves to a new digest. The previous
digest-bearing upstream_id changed on every refresh.

Adds oci/digest as a new entity property (following the oci/repository
pattern from #6929), carrying the digest the identity used to encode.

Adds a registration-time validator rejecting tagless artifact names
(e.g. bare alpine), since a tagless name and its tagged equivalent
(alpine:latest) would otherwise resolve to the same upstream_id. This
is forward-only: any already-registered tagless entity keeps working,
and in the rare case both a tagless and tagged form of the same image
are registered in one project, their upstream IDs can collide after
this ships (existing name-based fallback handles the lookup).

Part of #6978 (M2 Phase 1).

* Add end-to-end test proving manual registration and policy evaluation on repo:tag identity

* fix: update golang.org/x/net to address CVE-2026-78661

Coverage Stats

24005 of 35745 relevant lines covered (67.16%)

59.65 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	42829781376.1	10 Nov 2026 02:34PM UTC	361	67.16	GitHub Action Run

mindersec / minder / 42829781376
67%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 42829781376

mindersec / minder / 42829781376 67%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 42829781376

mindersec / minder / 42829781376
67%

README BADGES
x