jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-31 18:22:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): sanitize diagnostics fail-closed and purge malformed trace records

Browse Source
This commit is contained in:
Alexandre Teixeira
2026-10-30 23:13:46 +00:00
parent fd79776964
commit 84c7eabfce
6 changed files with 518 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/maintainers/native-test-coverage.md
+4
View File
@@ -25,6 +25,10 @@ Default CI trace suppression remains intact. Only this job's explicit opt-in plu
a newly generated authenticated synthetic fixture marker permits failure traces.
The existing structured sanitizer runs before artifacts are uploaded; invalid
ownership, failed sanitization and missing tooling purge sensitive artifacts.
Unsupported or malformed sensitive records cause the affected archive to be removed
fail-closed. An independent fail-closed verification step (.github/scripts/verify_sanitized_artifacts.py)
runs after test suite execution or abnormal runner termination to prevent publishing
unsanitized diagnostics while preserving safe JUnit reporting.
Never upload the fixture directory, database or browser storage state.
The stroke budget now excludes measured synthetic event-delivery pacing and also