murk-cli 0.10.2

Encrypted secrets manager for developers — one file, age encryption, git-friendly
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

name: Mutants

# Mutation testing proves the suite CATCHES bugs — a surviving mutant is a change
# no test noticed, i.e. an assertion gap. It is slow (rebuild + retest per
# mutant), so it runs on a schedule and on demand only, never on pull requests.
# Scope, test args, and exclusions live in .cargo/mutants.toml.
on:
  schedule:
    - cron: "0 8 * * 1" # Mondays 08:00 UTC
  workflow_dispatch:

permissions:
  contents: read

env:
  CARGO_TERM_COLOR: always

jobs:
  mutants:
    name: cargo-mutants
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
      - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2

      - name: Install cargo-mutants
        run: cargo install cargo-mutants --locked --version 25.3.1

      - name: Prepare report directory
        run: mkdir -p target/mutants

      # The in-process crypto surface (scope + --lib test args from
      # .cargo/mutants.toml).
      - name: Mutation test — crypto core
        run: cargo mutants --output target/mutants/crypto

      # The MAC / integrity / load trust boundary in lib.rs, scoped by function
      # name so the run stays bounded and meaningful.
      - name: Mutation test — MAC & load core
        run: >
          cargo mutants --output target/mutants/mac
          --file src/lib.rs
          --re 'compute_mac|verify_mac|mac_bytes|schema_mac_bytes|decode_mac_key|generate_mac_key|signing_message|sign_vault|verify_vault_signature|check_signature|resolve_meta_state|decrypt_vault'

      - name: Upload mutation reports
        if: always()
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
        with:
          name: mutants-report
          path: target/mutants/