aserto-dev / azm

72%

LAST BUILD ON BRANCH main

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• 0.21
• CVE-2025-22870
• add-safe-assert
• add_diff_validate
• allow-dots-in-permissions
• available-permissions
• azm
• azmcmd
• bugfix/checks-nil-default
• bugfix/expand-permission-term
• bugfix/invert-arrows
• bugfix/jobpool-panic
• bugfix/negation-type-subset
• bugfix/search-objects
• bugfix/validation
• bugfix/wildcard-only-relations
• cache-metadata
• cache-query
• check-cycles
• check-reason
• checks
• chore/cleanup-generics
• chore/upd-deps
• d5s-io/golang-set
• deps-250123
• error-messages
• errors
• expand
• fix-CVE-2024-21664
• fix-check-trace
• fix-inverse
• fix-inverted-negation-and-intersection
• fix-load-empty-manifest
• fix-subjectsearch-wildcard-exclusion
• fix/diff-mutex
• fix/errlistener
• fix/parser-warnings
• fix/upd-deps
• fix_panic
• get-graph
• go-aserto
• go-aserto-upd
• go-directory
• identifier
• implement_graph
• implement_model_diffing
• import-status
• inversion-fix
• invert-unions
• load-v2-manifest
• main
• model-v2
• modelcache
• more-tests
• paging
• parser-errors
• relpool
• relpool-rid
• rm-mage
• type-casing
• upd-20251208
• upd-migrate
• update-deps
• version-agnostic-paging

Build # 33004572686

Build Type

push

github

Committed by web-flow

Commit Message

Fix SubjectSearch over-listing subjects excluded via a wildcard relation (#81)

* Fix SubjectSearch over-listing subjects excluded via a wildcard relation

* Deny SubjectSearch exclusion when the exclude term is a cycle

Mirror Check: a cyclic exclude term yields an empty result set instead of
the full include set. Extract the exclusion branch into its own method and
add a cyclic-exclude fixture (can_edit) exercised by both Check and search.

Coverage Stats

24 of 32 new or added lines in 1 file covered. (75.0%)

1 existing line in 1 file now uncovered.

3304 of 4567 relevant lines covered (72.35%)

0.8 hits per line