tests.test_attestation module

Tests for the attestation bundle naming rule.

tests.test_attestation.write_bundle(path, *subjects)

Write a sigstore bundle attesting subjects.

Mirrors the shape actions/attest emits: a DSSE envelope whose base64 payload is an in-toto statement listing one entry per attested file.

Return type:

Path

tests.test_attestation.test_bundle_subjects_reads_every_name(tmp_path)

Subjects come back in the order the statement lists them.

tests.test_attestation.test_bundle_subjects_rejects_malformed(tmp_path, content, message)

A file that is not a readable bundle fails with a specific message.

tests.test_attestation.test_bundle_subjects_rejects_empty_subject_list(tmp_path)

A bundle attesting nothing has no name to give.

tests.test_attestation.test_bundle_subjects_rejects_path_subject(tmp_path, name)

A subject naming a path could escape the asset directory.

tests.test_attestation.test_bundle_filename(subjects, set_name, expected)

One subject names the bundle; several fall back to the set name.

tests.test_attestation.test_bundle_filename_needs_a_set_name_for_several_subjects()

No single filename can claim a bundle covering several assets.

tests.test_attestation.test_bundle_filename_rejects_no_subject()

Naming a bundle that attests nothing is a programming error.

tests.test_attestation.test_pack_attestation_names_bundle_and_lists_uploads(tmp_path)

The bundle lands beside its subject, and both are listed for upload.

tests.test_attestation.test_pack_attestation_covers_a_whole_set(tmp_path)

Several subjects yield one set-named bundle and every asset.

tests.test_attestation.test_pack_attestation_rejects_a_missing_subject(tmp_path)

A bundle covering a file that is not there attested another tree.