jtschladen / lemur
60%
main: 61%

LAST BUILD BRANCH: jschladen/fix-test-failures-post-ghsa
DEFAULT BRANCH: main
Repo Added
Token YT0yrIyquXVYAuDT4xzlOZm0PMhBjUaHz regen
Build 274 Last
Files 13
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH jschladen/fix-test-failures-post-ghsa
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 59.879%. Remained the same
27297912863

push

github

web-flow 
Merge branch 'main' into jschladen/fix-test-failures-post-ghsa

594 of 992 relevant lines covered (59.88%)

0.6 hits per line

Relevant lines Covered
992 RELEVANT LINES 594 COVERED LINES
0.6 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
27297912863 jschladen/fix-test-failures-post-ghsa Merge branch 'main' into jschladen/fix-test-failures-post-ghsa push web-flow github
59.88
27297431505 jschladen/fix-test-failures-post-ghsa fix: update tests to reflect GHSA security hardening changes - test_role_put: non-admin users now get 403 (admin-only) before schema validation can return 400 - test_role_put_with_data_and_user: role members no longer permitted to update role... push jtschladen github
59.88
26980609255 jschladen/fix-test-user-service-lint test: add read-only user coverage across all StrictRolePermission-gated endpoints Every write endpoint gated by StrictRolePermission now has an HTTP-level test verifying that a read-only user gets 403. Endpoints covered: - POST /notifications (c... push jtschladen github
60.86
26978985051 jschladen/fix-test-user-service-lint docs: document authz surface and security implications of default-open model Add a security note to LEMUR_STRICT_ROLE_ENFORCEMENT explaining that any authenticated user can manage notifications (webhook SSRF), upload certs to destinations, and ma... push jtschladen github
60.86
26978088232 jschladen/fix-test-user-service-lint fix: remove extra blank line in test_permissions.py (E303) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> push jtschladen github
60.86
26923379791 jschladen/fix-test-user-service-lint test: add read-only user coverage for GHSA-qcqw-jwxc-2hqg Add VALID_READ_ONLY_HEADER_TOKEN (sub=3) and a read-only user fixture to conftest. Tests that read-only users are denied write operations via StrictRolePermission: notification delete (403... push jtschladen github
60.86
26921906730 jschladen/fix-test-user-service-lint fix: block read-only users from write ops without requiring admin/operator The GHSA-qcqw-jwxc-2hqg fix changed LEMUR_STRICT_ROLE_ENFORCEMENT to default True, which correctly closed the empty-needs Flask-Principal bypass but broke normal cert issu... push jtschladen github
60.86
26471797818 main Merge pull request #5464 from Netflix/dependabot/pip/pyopenssl-26.2.0 Build(deps): Bump pyopenssl from 26.1.0 to 26.2.0 push web-flow github
60.86
23616185830 jschladen/fix-auth Update lemur/auth/service.py Co-authored-by: Sayali Charhate <charhate@usc.edu> push web-flow github
60.86
23615843703 jschladen/fix-auth Add test push jtschladen github
60.86
See All Builds (209)

Badge your Repo: lemur

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh