mig5/enroll
1
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Activity Actions
enroll/tests
History
Miguel Jacq 3c1e08bdde
Some checks failed
CI / test (push) Successful in 48s
Details
CI / test (almalinux, docker.io/library/almalinux:9, python3.11) (push) Failing after 2m32s
Details
CI / test (debian, docker.io/library/debian:13, python3) (push) Failing after 3m0s
Details
Lint / test (push) Successful in 44s
Details
More TOCTOU, update to tests for jinjaturtle
2026-06-29 14:30:07 +10:00
..
conftest.py Update tests 2026-06-22 11:06:24 +10:00
state_helpers.py Update tests 2026-06-22 09:58:54 +10:00
test___main__.py 0.1.6 2025-12-28 15:32:40 +11:00
test_accounts.py Better protection against symlink traversal in flatpak. Other hardening 2026-06-28 17:03:24 +10:00
test_cache_security.py Be strict about XDG_CACHE_DIR ownership etc 2026-06-22 17:22:27 +10:00
test_cli.py Remove puppet and salt 2026-06-25 16:54:23 +10:00
test_cli_config_and_sops.py Don't allow .enroll.ini in CWD, rely on env var or XDG path 2026-06-22 09:52:33 +10:00
test_cli_helpers.py More safety about writing output harvests/manifests to safe locations, including SOPS and diff. 2026-06-22 12:21:33 +10:00
test_cm.py Fix notification of individual services when related config changes, even when roles are grouped 2026-06-20 15:31:42 +10:00
test_debian.py Handle gracefully debian stuff when testing on rhel-like 2026-06-21 16:15:33 +10:00
test_diff_bundle.py Close TOCTOU gap by freezing directory harvest bundles into a private 0700 copy before the two consumers that actually read artifacts (manifest and diff) touch them. 2026-06-28 21:07:49 +10:00
test_diff_ignore_versions_exclude.py Remove 'enroll diff --enforce' option. Tighten yaml data re: handlers - use listen: instead of notify: 2026-06-28 16:01:11 +10:00
test_diff_notifications.py Update tests 2026-06-22 09:58:54 +10:00
test_diff_usr_local_custom.py Fix tests 2025-12-29 16:35:21 +11:00
test_explain.py More test coverage 2026-01-05 14:27:56 +11:00
test_fsutil.py More TOCTOU, update to tests for jinjaturtle 2026-06-29 14:30:07 +10:00
test_fsutil_extra.py More test coverage (71%) 2026-01-03 12:34:39 +11:00
test_harvest.py More TOCTOU, update to tests for jinjaturtle 2026-06-29 14:30:07 +10:00
test_harvest_collectors.py More TOCTOU, update to tests for jinjaturtle 2026-06-29 14:30:07 +10:00
test_harvest_collectors_package_manager.py Fix for remote harvest tmp dir 2026-06-22 12:46:45 +10:00
test_harvest_cron_logrotate.py More refactoring, support hiera and multi site mode for Puppet 2026-06-17 10:54:46 +10:00
test_harvest_helpers.py More refactoring, support hiera and multi site mode for Puppet 2026-06-17 10:54:46 +10:00
test_harvest_safety.py hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate. 2026-06-28 18:17:45 +10:00
test_harvest_symlinks.py More refactoring, support hiera and multi site mode for Puppet 2026-06-17 10:54:46 +10:00
test_ignore.py hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate. 2026-06-28 18:17:45 +10:00
test_ignore_dir.py More TOCTOU, update to tests for jinjaturtle 2026-06-29 14:30:07 +10:00
test_jinjaturtle.py Escape verbatim JSON and defend against jinja in it. Add option to salt role prefix to guard against malicious injection of var names 2026-06-28 20:34:06 +10:00
test_manifest.py Show a warning when manifesting from a harvest as reminder it should be trusted first 2026-06-29 12:25:35 +10:00
test_manifest_ansible.py Remove puppet and salt 2026-06-25 16:54:23 +10:00
test_manifest_safety.py fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting 2026-06-29 08:56:06 +10:00
test_manifest_symlinks.py Fix tests for deb build 2026-06-22 10:05:17 +10:00
test_package_hints.py Fix for remote harvest tmp dir 2026-06-22 12:46:45 +10:00
test_pathfilter.py Better protection against symlink traversal in flatpak. Other hardening 2026-06-28 17:03:24 +10:00
test_platform.py more test coverage 2026-05-31 16:50:57 +10:00
test_platform_backends.py More test coverage (71%) 2026-01-03 12:34:39 +11:00
test_remote.py fail loudly on an empty/truncated frozen harvest bundle. Tighten as much as we can the remote harvesting 2026-06-29 08:56:06 +10:00
test_render_safety.py hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate. 2026-06-28 18:17:45 +10:00
test_rpm.py Group all package roles into Debian/RPM 'sections' 2026-06-14 19:19:59 +10:00
test_rpm_run.py More test coverage 2026-01-05 14:27:56 +11:00
test_secret_detection.py Remove 'enroll diff --enforce' option. Tighten yaml data re: handlers - use listen: instead of notify: 2026-06-28 16:01:11 +10:00
test_sopsutil.py More coverage 2026-05-31 17:15:22 +10:00
test_state_safety.py Validate state.json is a normal file 2026-06-22 17:47:36 +10:00
test_systemd.py More coverage 2026-05-31 17:15:22 +10:00
test_validate.py hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate. 2026-06-28 18:17:45 +10:00
test_version_extra.py More test coverage 2026-06-21 13:37:37 +10:00