egbt/secrets
1
0
Fork 0
Code Issues Pull requests Projects Releases 13 Packages Wiki Activity Actions

test: pin security fixtures to the validation rail (EGB-283)

Browse source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Brian Majewski 2026-06-24 13:21:33 -07:00
parent 28f44f043c
commit b09f94c92f
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
test/recipients.bats
View file

@ -320,6 +320,8 @@ make_second_identity() {
run "$SECRETS_BIN" push run "$SECRETS_BIN" push
[ "$status" -ne 0 ] [ "$status" -ne 0 ]
[[ "$output" == *"Invalid recipient"* ]] || false [[ "$output" == *"Invalid recipient"* ]] || false
# The push must have aborted before encrypting — no blob should exist.
[ ! -e "$SECRETS_DIR/myproj/.env.age" ]
} }
@test "SECURITY: control/ANSI characters in recipients.txt are rejected" { @test "SECURITY: control/ANSI characters in recipients.txt are rejected" {
@ -329,6 +331,7 @@ make_second_identity() {
create_project_dir myproj create_project_dir myproj
run "$SECRETS_BIN" push run "$SECRETS_BIN" push
[ "$status" -ne 0 ] [ "$status" -ne 0 ]
[[ "$output" == *"Invalid recipient"* ]] || false
} }
@test "SECURITY: recipients add rejects a key with embedded whitespace" { @test "SECURITY: recipients add rejects a key with embedded whitespace" {