1
68%
main: 68%

Ran 19 Jan 2026 08:59PM UTC

Files 96

Run time 2s

Badge

Embed ▾

Committed 19 Jan 2026 08:52PM UTC coverage: 68.133% (+0.02%) from 68.114%

Job # 21151146192.1

Build Type

push

github

Committed by

web-flow

Commit Message

Fix some audit medium severity issues (#904)

* fix(service): address issue TRST-M-1

This is about changing a constant name which was confusing
the backend rate limits at 10req per second

* fix(service): add configurable batch size limit for /cost endpoint (TRST-M-7)

Prevents DoS attacks via unbounded input in the costModels GraphQL resolver.

- Add `max_cost_model_batch_size` config option (default: 200)
- Reject requests exceeding the limit with a clear error message
- Add `indexer_cost_model_batch_limit_exceeded_total` metric for observability

Operators can adjust via TOML or env var if serving many subgraphs.

* fix(service): require Horizon mode when DIPS is enabled (TRST-M-8)

DIPS uses V2 escrow accounts from the network subgraph, which requires
Horizon contracts to be deployed. Previously, DIPS would unconditionally
use V2 escrow even in legacy mode, potentially causing silent failures.

- Add startup validation: error if [dips] configured without [horizon].enabled
- Remove unreachable V1 fallback code for DIPS (~30 lines)
- Document the requirement in maximal-config-example.toml

Run Details

10173 of 14931 relevant lines covered (68.13%)

82.48 hits per line

graphprotocol / indexer-rs / 21151146192 / 1
68%
main: 68%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21151146192.1

graphprotocol / indexer-rs / 21151146192 / 1 68% main: 68%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 21151146192.1

graphprotocol / indexer-rs / 21151146192 / 1
68%
main: 68%

README BADGES
x