Coverage audit found 5 untested branches in cmd_verify (all single-test fills, no logic defects): external blob decrypt-failure (only the missing case was covered), the rail-skip finding for an unsafe dotenv path in the manifest, the unknown-flag die, a malformed manifest through the verify entry point, and the empty-store 'verify --all' no-op. Full suite 210/210. |
||
|---|---|---|
| .. | ||
| manifest.bats | ||
| run-security.sh | ||
| secrets.bats | ||
| test_helper.bash | ||