KeychainMDIP / kc

96%

main: 96%

LAST BUILD ON BRANCH bush/validate-replacement-documents

branch: bush/validate-replacement-documents

CHANGE BRANCH

x

Reset

• bush/validate-replacement-documents
• 1005-prepare-v121
• 1013-update-blockchain-checkpoints
• 1036-prepare-v130-release
• 1038-update-packages-for-v130
• 1045-add-wallet-metadata
• 1054-upgrade-redis
• 1060-import-credentials
• 1062-send-credential
• 1065-change-icon
• 107-recovery-did
• 1078-change-version-to-string
• 1089-publish-beta
• 1092-vc-doc
• 1096-remove-sub-second
• 1097-deactived-dids
• 1098-didresolutionmetadata
• 1105-resolution-errors
• 1107-return-valid-mdip-operation
• 1112-did-parameters
• 1114-v140-beta1
• 1143-return-did-from-createidoperation
• 147-log-level
• 149-rename-id
• 160-confirm-keys
• 163-add-helia-service
• 181-testnet-mediator
• 201-check-and-fix
• 204-improve-coverage
• 206-updated-after
• 207-duplicate-names
• 210-extend-eslint
• 210/extend-eslint
• 215-hotfix
• 216-refactor-resolvedid
• 219-credential-registry
• 220-backup-wallet-fails
• 225-faster-getdids
• 226-default-confirm
• 230-check-names
• 233-add-ephemeral
• 234-resolvedid-validate
• 237-faster-unconfirmed
• 238-update-readme
• 242-reorganize-repo
• 244-gc-logging
• 246-scrollable-lists
• 253-sonarjs-lint
• 256-keymasterclient
• 258-refactor-exceptions
• 259-keymaster-sdk
• 262-db-sync-perf
• 267-refactor-api
• 269-import-exports
• 270-configurable-registries
• 271-redundant-messages
• 275-timing-error
• 276-fix-cli-docs
• 279-wallet-recovery
• 28-hash-check
• 281-add-ftc
• 284-add-registration
• 285-add-testnet-nodes
• 290-investigate-performance
• 293-add-responder
• 294-keymaster-api-slow
• 296-permissions-error
• 298-update-credential
• 303-move-gc
• 309-consolidate-kc-dc
• 317-remove-explorer-route
• 319-update-keymaster-api-docs
• 320-sync-apps
• 322-create-npm-packages
• 326-publish-mdip-packages
• 330-update-readme
• 334-update-package-versions
• 335-responses-gc
• 341-syntaxerror
• 342-rename-service-files
• 344-deprecate-tess
• 345-sync-keymaster-functions
• 345-sync-take-2
• 348-refactor-keymaster-api
• 349-ftc-on-mac
• 353-refactor-start
• 354-upgrade-groups
• 355-update-batches
• 356-update-schemas
• 358-deprecate-resolveid
• 360-add-redis
• 361-invalid-did
• 365-batch-size-limits
• 372-deferred-confirmation
• 374-satoshi-mediator-import
• 376-did-versions
• 376-navigate-versions
• 377-wallet-404-not-found
• 382-standardize-challenge
• 387-improve-verifydb
• 390-gatekeeper-gc
• 391-processevents
• 397-add-encrypt-message
• 399-exceptions
• 403-track-imported
• 407-schema-faker
• 410-publish-v04-npm
• 412-update-node
• 417-update-vaults
• 418-update-polls
• 426-ipfs-mediator
• 427-update-loggin
• 429-issuecredential
• 430-publish-v041
• 435-gatekeeper-class
• 436-keymaster-class
• 440-processevents-mongodb
• 444-sync-with-sqlite
• 447-cipher_hash
• 448-satoshi-db
• 449-remove-tess
• 451-add-utils
• 453-checkdb
• 455-gossip-storm
• 457-rm-event-caching
• 471-use-encrypted-wallet
• 472-gatekeeper-status
• 475-encrypted-wallet
• 476-contributing
• 478-did-reorg
• 481-hyperswarm-slow
• 484-gatekeeper-start
• 486-protocol-config
• 493-add-db-to-status
• 494-publish-v05
• 498-report-interval
• 502-status-empty-db
• 506-consolidate-keymasterui
• 508-ephemeral-dids
• 510-periodic-status
• 511-kc-bind-credential
• 516-rename-gatekeeper-sdk-class
• 518-default-registry
• 520-keymaster-git-history
• 520-keymaster-history-2
• 521-default-prefix
• 523-add-versionid
• 528-server-wallet-db
• 535-invalid-registry
• 538-canonicalid
• 543-update-versions
• 546-v06-packages
• 560-did-names
• 564-update-versions
• 565-id-inconsistent
• 569-recover-id
• 579-hyper-export-interval
• 580-gk-client-tests
• 581-km-client-tests
• 584-add-updateasset
• 586-op-size-limit
• 593-did-validator
• 594-op-size-limit
• 596-add-eventsqueue
• 606-hyperswarm-oom
• 614-groupvault
• 614-groupvault-2
• 615-bad-dids
• 618-stress-test
• 619-mongodb
• 622-queue-sync
• 624-docker-cli
• 630-v1-release
• 632-gc-disabled
• 633-rename-set-asset
• 638-remove-openapijson
• 650-arm64
• 650-build-arm64
• 652-fix-dockerfile-errors
• 656-remove-passphrase
• 662-upgrade-ftc
• 663-default-registry
• 667-mediators-crash
• 685-upgrade-node
• 692-update-sampleenv
• 694-add-cas
• 697-convert-kuboclient
• 698-add-image
• 700-rename-ipfs
• 702-clone-asset
• 703-transfer-did
• 704-image-assets
• 706-add-name
• 711-rename-did
• 715-add-image
• 717-update-image
• 718-document-assets
• 723-transfer-asset
• 724-clone-asset
• 725-peer-network
• 726-backup-id
• 728-share-schema
• 731-cli-create-schema
• 737-create-schema-template
• 742-rotate-keys
• 746-creategroup
• 747-update-image
• 754-wait-for-node-id
• 755-document-assets
• 757-check-ownership
• 762-merge-data
• 771-create-the-node-id
• 776-issue-credential
• 787-prepare-v11
• 789-update-packages
• 792-pre-release
• 801-cleanup-peers
• 804-revoke-did
• 805-search-server
• 810-upgrade-base
• 815-add-explorer
• 822-signet
• 837-prepare-v111-release
• 838-gv-key-rotatation
• 839-add-groupvaults
• 840-secret-members
• 841-name-standard
• 853-bad-peers
• 860-item-downloads
• 861-fix-memberid
• 862-prepare-v113
• 866-add-shared-logins
• 868-split-test
• 874-mime-types
• 876-pow-primitives
• 878-cipher-base
• 881-notice
• 885-add-dmail
• 892-prepare-v114
• 900-gv-local-storage
• 902-notice-search
• 903-add-cc
• 904-add-reply
• 905-dmail-attachments
• 906-add-archive
• 907-revoke-dmail
• 908-dmail-reply
• 918-add-contact
• 922-ephemeral-dmail
• 928-upgrade-kubo
• 935-prepare-v120-release
• 937-update-diagram
• 962-mark-dmails
• 963-dmail-sorting
• 969-dmail-search
• 976-forward-attachments
• 989-create-operations
• 992-custom-headers
• 997-resolve-did
• Flaxscrip-deployment-guide-1
• Flaxscrip-integration-guide-1
• Flaxscrip-openapi-patch-1
• Flaxscrip-patch-1
• Flaxscrip-patch-2
• activate-cli-test-pipeline
• add-tbtc-dockerfiles
• android-apk-releases-page
• android-keystore
• api-docs
• api-hotfix
• async-wallet
• bitcoin-core-image-update
• bush/add-agentic-docs
• bush/add-identities-endpoint
• bush/align-credential-schema-position
• bush/allow-empty-wallet-new-body
• bush/android-cred
• bush/android-layout
• bush/android-tablet
• bush/android-wide
• bush/api-to-ts
• bush/app-reload-serv
• bush/apps-challenge
• bush/arbitrary-search-prefix
• bush/atomic-json-wallet-save
• bush/atomic-operation-publication
• bush/auto-publish-challenge-receipts
• bush/browser
• bush/browser-cjs-logger
• bush/btc-mainnet
• bush/canonical-agent-prefixes
• bush/challenge-receipt
• bush/challenge-type
• bush/chrome-ext
• bush/cipher-noble-hashes
• bush/cipher-ts
• bush/clear-hash
• bush/clear-queue
• bush/cluster-client
• bush/conf-maxops
• bush/config-json-limit
• bush/coverage-fix
• bush/cred-exp
• bush/cred-link
• bush/deno-search
• bush/did-list
• bush/disable-client
• bush/dmail-view
• bush/docker-image-optimization
• bush/dual-build
• bush/enc-mnemonic
• bush/enc-wallet
• bush/encrypt-wallet
• bush/encrypt-web
• bush/env
• bush/ephemeral-dmail
• bush/exp-abs
• bush/exp-back-button
• bush/exp-port
• bush/exp-preload-events
• bush/exp-refactor
• bush/exp-shutdown
• bush/explorer
• bush/explorer-metrics-tab
• bush/explorer-update
• bush/export-root
• bush/expose-search-did-events
• bush/ext-attach
• bush/ext-clear-viewer
• bush/ext-copy
• bush/ext-dmail
• bush/ext-docs
• bush/ext-explorer
• bush/ext-fixes
• bush/ext-groups
• bush/ext-identity
• bush/ext-image-update
• bush/ext-images
• bush/ext-msg
• bush/ext-poll
• bush/ext-revoke
• bush/ext-schema
• bush/ext-search
• bush/ext-search-fix
• bush/ext-speed
• bush/ext-update-dmail
• bush/ext-updates
• bush/ext-ux
• bush/ext-v1.0.0
• bush/ext-vaults
• bush/ext-wallet-browser
• bush/ext-wallet-full
• bush/ext-workflow
• bush/ext/max-version
• bush/fail-closed-response-verification
• bush/fail-keymaster-startup
• bush/fix-api
• bush/fix-cjs
• bush/fix-cli-flows
• bush/fix-commit
• bush/fix-credential-update-issuer
• bush/fix-credential-validity-windows
• bush/fix-cyclic-group-traversal
• bush/fix-delegated-asset-owned-list
• bush/fix-doc-site-links
• bush/fix-empty-challenge-issuers
• bush/fix-environment-wiring
• bush/fix-hypr
• bush/fix-identity-rename-alias-collision
• bush/fix-keymaster-client-url-encoding
• bush/fix-keymaster-update-metadata
• bush/fix-list-names-wallet-mutation
• bush/fix-name-normalization
• bush/fix-notice-cleanup-outages
• bush/fix-ordering
• bush/fix-package
• bush/fix-partial-notice-import
• bush/fix-postgres-compose-url
• bush/fix-recovered-id-account-counter
• bush/fix-response-subject-binding
• bush/fix-sqlite-wallet-replacement
• bush/fix-stale-group-updates
• bush/fix-transition
• bush/fix-truncation
• bush/fix-url-bug
• bush/fix-verify-response-matching
• bush/fix-wallet-mutation-rollback
• bush/fix-wallet-outage-safety
• bush/fix-wallet-restore-validation
• bush/fix-wallet-root-key-cache
• bush/forward-keymaster-http-options
• bush/gatekeeper-client-ts
• bush/gatekeeper-db-ts
• bush/gatekeeper-gc-dependencies
• bush/gatekeeper-ts
• bush/gc-profiler
• bush/generatedid
• bush/getimage-data
• bush/gk-did-lock
• bush/gk-json-race
• bush/gk-mongo-race
• bush/gk-redis-race
• bush/gk-sqlite-race
• bush/graceful-shutdown
• bush/hyperswarm-bootstrap-retry
• bush/hyperswarm-lan-connectivity
• bush/hypr-full-tests
• bush/hypr-rbsr
• bush/hypr-remove-legacy-sync-wip
• bush/improve-query
• bush/ins-export
• bush/ins-plaintext
• bush/ins-tests
• bush/inscription
• bush/inscription-hd-path-normalization
• bush/inscription-lib
• bush/interface-fix
• bush/ipfs-ts
• bush/java-keymaster
• bush/jsdoc
• bush/jsdoc-km
• bush/json-viewer
• bush/keymaster-client-ts
• bush/keymaster-db-race
• bush/keymaster-db-ts
• bush/keymaster-did-prefix
• bush/keymaster-ts
• bush/log-levels
• bush/mass-delete
• bush/mdip-messaging
• bush/mediator-reorg
• bush/mediator-ts
• bush/mod-wallet
• bush/network-metric-prefixes
• bush/ordered-sync
• bush/patch-rpc
• bush/pin-keymaster-operation-identity
• bush/poll-updates
• bush/postgres
• bush/postgres-password-env
• bush/postgres-readiness-pool-logging
• bush/preserve-cas-proxy-errors
• bush/preserve-pending-events-on-verify
• bush/propagate-wallet-recovery-errors
• bush/publish-java
• bush/pykm-sdk
• bush/python-1.2.1
• bush/python-ci
• bush/rate-limiter
• bush/react-wallet-ci
• bush/read-only
• bush/receipt-explorer
• bush/reconcile-published-identity-account
• bush/recover-rotated-identity
• bush/ref-main
• bush/refactor
• bush/refactor-decorator
• bush/refactor-ext
• bush/refactor-snackbar
• bush/reimport-fix
• bush/reject-controller-cycles
• bush/release-2.2.0
• bush/rem-builder
• bush/rem-node-forge
• bush/rem-receipt-time
• bush/rem-temp-files
• bush/rem-txindex
• bush/rem-types
• bush/remove-mutating-challenge-get
• bush/remove-obsolete-ipfs-opid-writes
• bush/remove-wallet-cache
• bush/restrict-keymaster-host-binding
• bush/reveal-change
• bush/sat-updates
• bush/schema-options
• bush/search-arrays
• bush/search-cors
• bush/search-fix
• bush/search-mem-only
• bush/search-prefix-filter
• bush/search-server
• bush/search-server-network-metrics
• bush/serialize-wallet-replacements
• bush/simplify-wallet
• bush/skip-invalid-response-credentials
• bush/start-node-ci-logs
• bush/tbtc-explorer
• bush/test-credential-controller-delegation
• bush/theme-ext
• bush/toggle-ipfs
• bush/update-ci-script
• bush/update-debian12-base-images
• bush/update-documentation
• bush/update-endpoint
• bush/update-packages
• bush/upload-wallet
• bush/v1.4.0
• bush/v1.4.0-beta.2
• bush/v2.0.0-beta.1
• bush/v2.1.0
• bush/validate-import-event-did
• bush/validate-imported-opid
• bush/validate-recovered-identity-names
• bush/validate-verifiable-credential-structure
• bush/verify-challenge-ownership
• bush/verify-create-operation-hashes
• bush/verify-credential-issuer
• bush/verify-duplicate-event-merges
• bush/verify-response-content-hash
• bush/verify-response-credential-structure
• bush/web-polls
• bush/webui-ts
• chore/root-typecheck-ci
• ci-cli-pipeline-patch
• cli-expect-update-2
• cli-test-pipelne
• cli-test-update
• cli-tests-cont
• cli-tests-update
• commitlint-activation
• container-scanning-enable
• coverage-test
• cred-perf
• debug-pipeline
• dm-enc-mnemonic
• docker-release-update
• enable-code-coverage
• enable-container-scanning
• expect-cli-tests
• experimental-warnings
• fancy-test-reporter
• fix-lerna-npm
• fix-npm-publishing
• fix-pass-on-0
• fix-publish-docker-images
• fix-workflow
• fix/docker-release-image-scan
• fix/npm-package-versions-2.1.0
• import-wallet
• install-steps
• ipfs-server
• jh/test-1
• kc-performance
• kubo-test
• lerna-final
• lerna-fix
• lerna-setup
• mac-fix
• main
• npm-publish-fix
• ops-docker-build-improvement
• ops/push-to-dockerhub
• ops/trivy-db-image
• ops/trivy-replacement
• packages
• pre-release
• publish-2.0.0
• py-test
• refactor-ci-docker-build
• refactor-docker-build-push
• release
• release-0.5
• release-0.6
• release-1.0
• release-1.1
• release-1.2
• release-1.3
• release-1.4-beta
• release-1.4.0
• release-1.4.0-beta.3
• release-1.4.0-beta.4
• release-1.4.0-beta.5
• release-2.0.0
• release-2.0.0-beta.2
• release-2.0.0-graduate
• release-2.1.0
• release-2.1.1-beta.0
• release-2.2.0
• release-multiarch
• release-publish-update
• restructure
• revert-347-345-sync-keymaster-functions
• revert-createIdOperation-change
• sec/add-vulnerability-scanning
• security-docker-scanning
• semantic-release
• test-branch
• test-release
• test2-release
• tftc-node
• theme-ext
• timestamps
• token-test
• type-exports
• ui-automation
• update-arch-diagram
• update-e2e-report-path
• update-license
• updating-docs
• v1.4.0
• v2.1.0-release
• verify-challenge
• website-update
• webui-url-params

Build # 36698236674

Build Type

Pull #1320

github

Committed by Bushstar

Commit Message

fix(gatekeeper): validate DID replacements

Signed updates could replace a DID with malformed data or change its stable type and registry. Validate replacement invariants before signature acceptance and persistence.

Pull Request Pull Request #1320: Validate DID replacement documents

Coverage Stats

7687 of 8089 branches covered (95.03%)

Branch coverage included in aggregate %.

16 of 16 new or added lines in 1 file covered. (100.0%)

1 existing line in 1 file now uncovered.

9430 of 9718 relevant lines covered (97.04%)

1999.48 hits per line