redhat-developer / redhat-developer/rhdh-plugins
boost-common: add test coverage for permission array immutability
@durandom is already working on this.
Since Aug 12, 2026.
- Dominant language
- TypeScript
- Stars
- 48
- Forks
- 120
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 337
Description
Problem
The boostPermissions, boostAgentPermissions, boostToolPermissions, and boostFunctionalPermissions arrays exported from boost-common are mutable. A consumer could accidentally push() or splice() them, corrupting the shared reference for other callers.
Expected behavior
Add a test to plugins/boost-common/src/index.test.ts that verifies the exported permission arrays are frozen (or at minimum that mutating them throws or has no effect), so any future Object.freeze() addition is covered by tests.
Scope
- Workspace:
workspaces/boost - Package:
@red-hat-developer-hub/backstage-plugin-boost-common - File:
plugins/boost-common/src/index.test.ts
Add a new describe('permission array immutability') block with tests that attempt .push() on each exported array and assert it either throws or leaves the length unchanged.
Smoke-test issue for fullsend v0.30.0 upgrade verification.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.