From 6edc2c16116f474a386666179e7200fb23022ca9 Mon Sep 17 00:00:00 2001 From: mateo-berri <277851410+mateo-berri@users.noreply.github.com> Date: Mon, 7 Sep 2026 17:13:39 -0700 Subject: [PATCH] fix(ci): tier nested MCP OAuth and flow files as always-human The two MCP globs only matched files directly under mcp_server, so faults/render_oauth.py, which renders the OAuth and DCR fault responses, scored medium. Both globs now use **/ so nested files match too. The last 400 staging merges still score 217 high, 139 medium, 44 low --- .github/risk-tiers.yml | 4 ++-- tests/test_litellm/test_github_risk_tier.py | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/risk-tiers.yml b/.github/risk-tiers.yml index ce7428e7b6b..63d61a69f22 100644 --- a/.github/risk-tiers.yml +++ b/.github/risk-tiers.yml @@ -25,8 +25,8 @@ paths: - "litellm/proxy/_experimental/mcp_server/auth/**" - "litellm/proxy/_experimental/mcp_server/outbound_credentials/**" - "litellm/proxy/_experimental/mcp_server/discoverable_endpoints.py" - - "litellm/proxy/_experimental/mcp_server/*oauth*" - - "litellm/proxy/_experimental/mcp_server/*_flow.py" + - "litellm/proxy/_experimental/mcp_server/**/*oauth*" + - "litellm/proxy/_experimental/mcp_server/**/*_flow.py" - "litellm/proxy/_experimental/mcp_server/proxy_api_credentials.py" - ".github/**" - ".circleci/**" diff --git a/tests/test_litellm/test_github_risk_tier.py b/tests/test_litellm/test_github_risk_tier.py index eb905a2e25a..696f5464d78 100644 --- a/tests/test_litellm/test_github_risk_tier.py +++ b/tests/test_litellm/test_github_risk_tier.py @@ -342,6 +342,8 @@ def test_author_factor(risk_tier, rules, author, from_fork, expected): ("litellm/proxy/_experimental/mcp_server/byok_oauth_endpoints.py", "high"), ("litellm/proxy/_experimental/mcp_server/bridge_token_flow.py", "high"), ("litellm/proxy/_experimental/mcp_server/proxy_api_credentials.py", "high"), + ("litellm/proxy/_experimental/mcp_server/faults/render_oauth.py", "high"), + ("litellm/proxy/_experimental/mcp_server/faults/classify.py", "medium"), ("litellm/proxy/_experimental/mcp_server/server.py", "medium"), ("enterprise/litellm_enterprise/proxy/hooks/x.py", "high"), ("enterprise/litellm_enterprise/proxy/auth/x.py", "high"),