fetch_ml/tests/benchmarks
Jeremie Fraeys 9434f4c8e6
feat(security): Artifact ingestion caps enforcement
Add MaxArtifactFiles and MaxArtifactTotalBytes to SandboxConfig:
- Default MaxArtifactFiles: 10,000 (configurable via SecurityDefaults)
- Default MaxArtifactTotalBytes: 100GB (configurable via SecurityDefaults)
- ApplySecurityDefaults() sets defaults if not specified

Enforce caps in scanArtifacts() during directory walk:
- Returns error immediately when MaxArtifactFiles exceeded
- Returns error immediately when MaxArtifactTotalBytes exceeded
- Prevents resource exhaustion attacks from malicious artifact trees

Update all call sites to pass SandboxConfig for cap enforcement:
- Native bridge libs updated to pass caps argument
- Benchmark tests updated with nil caps (unlimited for benchmarks)
- Unit tests updated with nil caps

Closes: artifact ingestion caps items from security plan
2026-02-23 19:43:28 -05:00
..
api_benchmark_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
artifact_and_snapshot_bench_test.go feat(security): Artifact ingestion caps enforcement 2026-02-23 19:43:28 -05:00
artifact_scanner_bench_test.go feat(security): Artifact ingestion caps enforcement 2026-02-23 19:43:28 -05:00
config_parsing_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
context_reuse_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
dataset_hash_bench_native_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
dataset_hash_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
dataset_size_comparison_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
go_native_leak_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
json_serialization_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
jupyter_service_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
log_sanitize_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
ml_experiment_benchmark_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
native_integration_test.go ci: push all workflow updates 2026-02-12 13:28:15 -05:00
native_queue_basic_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
native_queue_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
payload_performance_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
queue_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
response_packet_benchmark_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00
response_packet_regression_test.go test(benchmarks): add tolerance to response packet regression test 2026-02-18 12:45:40 -05:00
streaming_io_bench_test.go test(benchmarks): update benchmark tests with job cleanup and improvements 2026-02-23 18:03:54 -05:00