Repository navigation
fix(ci): initialize the shared scanner response fixture - #642
hyperpolymath wants to merge 2 commits into
Conversation
The common test fixture omitted Mock.responses, preventing the existing all-target build from compiling scan_tests. Initialize the override map empty while retaining the ready rate-limit state and every existing assertion. The existing Rust matrix supplies build, test, Clippy and formatting qualification; no new runtime pass is claimed.
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 48 minutes. View limit details
No actionable comments were generated in the recent review. Walkthrough
Merge Risk:
|
Use HTTP 500 for the existing fatal raw-response control; documented 404/410/451 behavior is already covered by both-fetch-path controls. Include the existing skippedUrls field in the exact serialized report. Repairs the two assertions exposed after E0063 was fixed in hosted job 126927683205. No production behavior changes or local test pass claimed.
|



Problem
The shared Idris dependent scanner test fixture no longer initializes
Mock.responses. Rust rejects the integration test with E0063 attests/scan_tests.rs:352, so all-target compilation and the following tests cannot run. The same defect is present on current main and blocks dependency PRs #633–#637.Actual failure: job 124701176251, with the same current-main failure in job 124813337915.
Change
Initialize the existing response override map with
BTreeMap::new()inready_mock. This is one source line; the real transport, assertions, dependency locks and vendored bot sources are unchanged.Verification
The source and exact Git blob were inspected, and the one-line diff was read back. No local Rust execution is claimed. The existing
idris-dependentshosted matrix must qualify this revision using its locked all-target build, tests, Clippy and formatting gates.The older E2E closure defect has a separate fix already on main (#639). Echidnabot's vendored source pin, existing governance/security findings and dependency updates need their own verified dispositions; this PR does not suppress them.
Summary by CodeRabbit
Hosted follow-up
The da53 hosted locked build passed the original missing-field failure, then the existing edge-case suite exposed two stale assertions in job126927683205/run41931039453. Current412bcad784dd16193475a09ecfa614147dc6fa51 keeps hard-error rejection by using HTTP500 for that fixture (404 is intentionally recorded as a skipped URL), and includes the already public skippedUrls field in the exact JSON assertion. Existing scan_tests already exercises both raw paths for skipped404/410/451 and hard401/403/422/429/500/503; production behavior is unchanged.
Current412 requires its own full hosted result. Separate governance failures—canonical action allowlist, retained Python audit/test implementations and the older scanner/native-lock contract—remain open and are not waived by this test repair. The vendored Echidnabot dependency PR also needs its upstream source closure resolved independently.