tests/test_governance.py

• _uses_lines · function · L34-L36 — def _uses_lines(name)
• test_security_scanners_pin_every_action_to_a_commit · function · L43-L49 — def test_security_scanners_pin_every_action_to_a_commit(name)
• test_no_captured_web_page_is_extracted_as_executable_source · function · L52-L81 — def test_no_captured_web_page_is_extracted_as_executable_source()
• test_every_workflow_pins_every_action_to_a_commit · function · L84-L117 — def test_every_workflow_pins_every_action_to_a_commit()
• test_pr_ci_resolves_every_action_version_comment_with_pinact · function · L120-L144 — def test_pr_ci_resolves_every_action_version_comment_with_pinact()
• test_credential_scanning_is_a_working_tree_scan_not_a_history_scan · function · L147-L181 — def test_credential_scanning_is_a_working_tree_scan_not_a_history_scan()
• test_protocol_fuzzing_is_real_bounded_execution · function · L184-L193 — def test_protocol_fuzzing_is_real_bounded_execution()
• test_release_workflow_pins_every_action_to_a_commit · function · L196-L201 — def test_release_workflow_pins_every_action_to_a_commit()
• test_release_setup_uv_never_persists_a_cross_run_cache · function · L204-L217 — def test_release_setup_uv_never_persists_a_cross_run_cache()
• test_dependabot_tracks_uv_hooks_and_workflow_actions · function · L248-L259 — def test_dependabot_tracks_uv_hooks_and_workflow_actions()
• test_dependabot_entries_use_only_schema_keys · function · L262-L284 — def test_dependabot_entries_use_only_schema_keys()
• test_branch_naming_policy_exempts_dependabot_by_ref_not_by_actor · function · L287-L307 — def test_branch_naming_policy_exempts_dependabot_by_ref_not_by_actor()