You are now the owner of this repo.

tiagojcperez / maestro-cli
100%

Repo Added 04 Jun 2026 08:25PM UTC

Token qLeeOKUUBamTaSqB3IpmlXNt8NawNoNPR regen

Build 29 Last

Files 69

Badge

Embed ▾

LAST BUILD ON BRANCH main
branch: SELECT

CHANGE BRANCH
x

Sync Branches

No branch selected

ci/bump-pytest-9.0.3

ci/pin-actions-to-sha

ci/reduce-ci-false-alarms

dependabot/github_actions/dot-github/workflows/SonarSource/sonarqube-scan-action-6

dependabot/github_actions/github-actions-ec92e20944

main

Committed 11 Jun 2026 07:55PM UTC coverage: 99.874%. Remained the same

Build # 27373528707

Build Type

push

github

Committed by

web-flow

Commit Message

ci: stop recurring CI false alarms (Codacy .github scope + flaky timing test) (#10)

Two independent CI-reliability fixes, each of which was making CI-touching
PRs either flake or get blocked by a bot false positive:

1. Codacy: exclude `.github/**` from analysis. Codacy's generic security
   profile kept raising HIGH-RISK FALSE POSITIVES on workflow/CI files — a
   40-char Action commit SHA flagged as a leaked API key (#8), an exact
   pinned dependency version flagged as "dependency confusion" (#9) — each
   blocking the merge via the branch's required-conversation-resolution rule
   with zero true positives. Supply-chain coverage for `.github` is already
   provided by CodeQL, SHA-pinned actions and Dependabot.

2. De-flake `test_callback_slow_does_not_block_parallelism`. task_complete
   callbacks run serially on the main dispatch thread, so the test only
   guards that a slow callback overlaps worker execution rather than
   serializing the pool. With 0.02s tasks the absolute 2x ceiling (~1.4s)
   sat too close to fixed scheduler / per-task file-hash / CI overhead and
   flaked at ~2.06s on a loaded Windows runner. Raising task_duration to
   0.2s lifts the ceiling to ~5s (well clear of that overhead) while still
   catching the >2x-serial blow-up a real parallelism regression would cause.

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Coverage Stats

23730 of 23760 relevant lines covered (99.87%)

1.0 hits per line

Relevant lines Covered

23760 RELEVANT LINES 23730 COVERED LINES

1.0 HITS PER LINE

Source Files on main

Recent builds

Builds	Branch	Commit	Type	Ran	Committer	Via	Coverage
27373528707	main	ci: stop recurring CI false alarms (Codacy .github scope + flaky timing test) (#10) Two independent CI-reliability fixes, each of which was making CI-touching PRs either flake or get blocked by a bot false positive: 1. Codacy: exclude `.github/*...	push	11 Jun 2026 07:58PM UTC	web-flow	github	99.87
27373198603	ci/reduce-ci-false-alarms	Merge 19fade5ac into 0377e457b	Pull #10	11 Jun 2026 07:52PM UTC	web-flow	github	99.87
27372796510	main	ci(security): bump pinned pytest 9.0.2 -> 9.0.3 (GHSA tmpdir handling) (#9) pytest <= 9.0.2 on UNIX uses a predictable /tmp/pytest-of-{user} basetemp directory, letting a local user cause a denial of service or possibly gain privileges (Dependabo...	push	11 Jun 2026 07:44PM UTC	web-flow	github	99.87
27371727253	ci/bump-pytest-9.0.3	Merge d5f07871c into d2821efe6	Pull #9	11 Jun 2026 07:25PM UTC	web-flow	github	99.87
27371646928	main	ci: pin all GitHub Actions to commit SHAs (#8) Replace mutable version-tag refs (@vN) and the @release/v1 branch ref with full-length commit SHAs across all six workflows, each annotated with a `# vX.Y.Z` trailing comment for readability. Dependa...	push	11 Jun 2026 07:23PM UTC	web-flow	github	99.87
27371472492	ci/bump-pytest-9.0.3	Merge fb1560b0d into 68787407f	Pull #9	11 Jun 2026 07:20PM UTC	web-flow	github	99.87
27371285683	ci/pin-actions-to-sha	Merge a4ad1837c into 68787407f	Pull #8	11 Jun 2026 07:17PM UTC	web-flow	github	99.87
27234212032	dependabot/github_actions/github-actions-ec92e20944	Merge 3e0145c56 into 68787407f	Pull #7	09 Jun 2026 08:39PM UTC	web-flow	github	99.87
27234121167	main	release: 2.5.4 -- parameter-scoped tool grants + CI pinning + codebase_map/scip standalone fix PATCH release per the versioning policy (additive opt-in feature + fixes). Rolls up everything accumulated on main since 2.5.3: - feat: parameter-scop...	push	09 Jun 2026 08:37PM UTC	tiagojcperez	github	99.87
27215207805	main	docs(testing): real-engine ✅ for context/quality/budget (Ollama, verified) The three previously "partial" per-area real-engine marks (context passing, budgets/cost, quality gates) are now backed by passing free Ollama E2E tests (verified green on...	push	09 Jun 2026 03:02PM UTC	tiagojcperez	github	99.87

See All Builds (29)

Badge your Repo: maestro-cli

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Embed ▾

Refresh

tiagojcperez / maestro-cli
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

CHANGE BRANCH
x

Relevant lines Covered

Source Files on main

Recent builds

Badge your Repo: maestro-cli

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

tiagojcperez / maestro-cli 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main branch: SELECT CHANGE BRANCH x Sync Branches No branch selected ci/bump-pytest-9.0.3 ci/pin-actions-to-sha ci/reduce-ci-false-alarms dependabot/github_actions/dot-github/workflows/SonarSource/sonarqube-scan-action-6 dependabot/github_actions/github-actions-ec92e20944 main

CHANGE BRANCH x

Relevant lines Covered

Source Files on main

Recent builds

Badge your Repo: maestro-cli

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

tiagojcperez / maestro-cli
100%

README BADGES
x

CHANGE BRANCH
x

README BADGES
x