tests/test_release_gate_manifest.py

• _good_receipt · function · L38-L63 — def _good_receipt(*, source_sha: str = SHA) -> dict
• _write · function · L66-L69 — def _write(directory: Path, document: dict) -> Path
• _verify · function · L72-L74 — def _verify(tmp_path: Path, document: dict, *, expected_sha: str = SHA)
• test_a_faithful_receipt_is_accepted · function · L77-L83 — def test_a_faithful_receipt_is_accepted(tmp_path)
• test_the_two_gate_receipt_the_old_consumer_accepted_is_refused · function · L86-L102 — def test_the_two_gate_receipt_the_old_consumer_accepted_is_refused(tmp_path)
• test_a_missing_gate_is_named · function · L105-L109 — def test_a_missing_gate_is_named(tmp_path)
• test_a_duplicated_gate_cannot_pad_the_count_back_up · function · L112-L118 — def test_a_duplicated_gate_cannot_pad_the_count_back_up(tmp_path)
• test_an_unknown_gate_is_refused · function · L121-L127 — def test_an_unknown_gate_is_refused(tmp_path)
• test_a_substituted_command_is_refused · function · L130-L137 — def test_a_substituted_command_is_refused(tmp_path)
• test_a_command_that_merely_gained_an_argument_is_refused · function · L140-L146 — def test_a_command_that_merely_gained_an_argument_is_refused(tmp_path)
• test_a_failing_exit_code_is_still_refused · function · L149-L153 — def test_a_failing_exit_code_is_still_refused(tmp_path)
• test_an_older_schema_version_is_refused · function · L156-L162 — def test_an_older_schema_version_is_refused(tmp_path)
• test_a_receipt_from_a_different_manifest_is_refused · function · L165-L169 — def test_a_receipt_from_a_different_manifest_is_refused(tmp_path)
• test_a_receipt_with_no_manifest_digest_is_refused · function · L172-L176 — def test_a_receipt_with_no_manifest_digest_is_refused(tmp_path)
• test_a_receipt_for_another_commit_is_refused · function · L179-L181 — def test_a_receipt_for_another_commit_is_refused(tmp_path)
• test_a_missing_required_check_is_refused · function · L187-L191 — def test_a_missing_required_check_is_refused(tmp_path)
• test_a_check_that_ran_on_another_commit_is_refused · function · L194-L200 — def test_a_check_that_ran_on_another_commit_is_refused(tmp_path)
• test_a_check_that_did_not_conclude_success_is_refused · function · L203-L207 — def test_a_check_that_did_not_conclude_success_is_refused(tmp_path)
• test_a_check_with_no_run_id_is_refused · function · L210-L215 — def test_a_check_with_no_run_id_is_refused(tmp_path)
• test_python_browser_and_linux_private_pid_checks_are_required · function · L218-L226 — def test_python_browser_and_linux_private_pid_checks_are_required()
• test_every_required_check_names_a_job_that_really_exists_in_ci · function · L229-L256 — def test_every_required_check_names_a_job_that_really_exists_in_ci()
• _listing · function · L262-L276 — def _listing(*, head_sha: str = SHA, conclusion: str = "success") -> dict
• test_attestation_records_the_ids_a_reader_would_need · function · L279-L283 — def test_attestation_records_the_ids_a_reader_would_need()
• test_attestation_refuses_green_checks_from_another_commit · function · L286-L288 — def test_attestation_refuses_green_checks_from_another_commit()
• test_attestation_refuses_a_check_that_was_skipped · function · L291-L295 — def test_attestation_refuses_a_check_that_was_skipped()
• test_attestation_refuses_an_absent_check · function · L298-L302 — def test_attestation_refuses_an_absent_check()
• test_attestation_uses_the_latest_attempt_for_a_name · function · L305-L318 — def test_attestation_uses_the_latest_attempt_for_a_name()
• _paginated · function · L321-L328 — def _paginated(listing: dict, *, pages: int = 2) -> list[dict]
• test_the_quality_job_reads_every_page_of_the_check_run_listing · function · L348-L369 — def test_the_quality_job_reads_every_page_of_the_check_run_listing(tmp_path, render)
• test_a_later_page_still_decides_the_latest_attempt · function · L372-L388 — def test_a_later_page_still_decides_the_latest_attempt(tmp_path)
• test_a_malformed_check_run_listing_is_refused_not_guessed · function · L404-L410 — def test_a_malformed_check_run_listing_is_refused_not_guessed(tmp_path, text, reason)
• test_the_quality_job_collects_the_listing_in_a_shape_the_reader_accepts · function · L413-L425 — def test_the_quality_job_collects_the_listing_in_a_shape_the_reader_accepts()
• test_staging_refuses_a_forged_receipt_through_step_test · function · L431-L461 — def test_staging_refuses_a_forged_receipt_through_step_test(tmp_path)
• runner · function · L445-L451 — def runner(argv, cwd=None)
• test_staging_accepts_a_faithful_receipt_through_step_test · function · L464-L489 — def test_staging_accepts_a_faithful_receipt_through_step_test(tmp_path)
• runner · function · L469-L475 — def runner(argv, cwd=None)
• _pipeline_assets · function · L498-L524 — def _pipeline_assets(tmp_path, *, source_sha=SHA)
• _runner_at · function · L527-L536 — def _runner_at(head)
• runner · function · L530-L534 — def runner(argv, cwd=None)
• test_a_tag_that_moved_between_jobs_is_refused · function · L539-L557 — def test_a_tag_that_moved_between_jobs_is_refused(tmp_path)
• test_the_frozen_sha_is_checked_not_believed · function · L560-L572 — def test_the_frozen_sha_is_checked_not_believed(tmp_path)
• test_an_artifact_built_from_a_different_commit_is_refused · function · L575-L616 — def test_an_artifact_built_from_a_different_commit_is_refused(tmp_path)
• test_an_artifact_whose_bytes_changed_after_the_receipt_is_refused · function · L619-L630 — def test_an_artifact_whose_bytes_changed_after_the_receipt_is_refused(tmp_path)
• test_an_artifact_with_no_build_receipt_is_refused · function · L633-L643 — def test_an_artifact_with_no_build_receipt_is_refused(tmp_path)
• test_a_seal_failure_stops_the_release · function · L646-L674 — def test_a_seal_failure_stops_the_release(tmp_path, monkeypatch)
• explode · function · L669-L670 — def explode(a, *k)
• test_the_evidence_bundle_carries_the_facts_it_claims_to · function · L677-L717 — def test_the_evidence_bundle_carries_the_facts_it_claims_to(tmp_path)
• test_the_evidence_bundle_is_sealed_before_anything_is_uploaded · function · L720-L731 — def test_the_evidence_bundle_is_sealed_before_anything_is_uploaded()
• test_replacing_a_draft_asset_and_its_manifest_together_is_caught · function · L734-L768 — def test_replacing_a_draft_asset_and_its_manifest_together_is_caught(tmp_path)
• test_an_attestation_for_another_version_is_refused · function · L771-L786 — def test_an_attestation_for_another_version_is_refused(tmp_path)
• test_the_finalize_job_refuses_when_its_attestation_is_absent · function · L789-L807 — def test_the_finalize_job_refuses_when_its_attestation_is_absent(tmp_path)
• _workflow · function · L819-L821 — def _workflow(name)
• _checkout_refs · function · L824-L831 — def _checkout_refs(job)
• test_every_release_job_checks_out_the_immutable_workflow_sha · function · L834-L865 — def test_every_release_job_checks_out_the_immutable_workflow_sha()
• test_every_downstream_checkout_waits_for_source_validation · function · L868-L879 — def test_every_downstream_checkout_waits_for_source_validation()
• test_every_publication_boundary_revalidates_the_remote_annotated_tag · function · L882-L918 — def test_every_publication_boundary_revalidates_the_remote_annotated_tag()
• test_the_tag_revalidation_is_one_implementation_with_teeth · function · L921-L930 — def test_the_tag_revalidation_is_one_implementation_with_teeth()
• test_the_container_publication_boundary_is_held_to_the_same_rule · function · L933-L965 — def test_the_container_publication_boundary_is_held_to_the_same_rule()
• test_a_published_release_dispatches_its_container_image · function · L968-L1017 — def test_a_published_release_dispatches_its_container_image()
• test_every_job_has_an_explicit_timeout · function · L1021-L1031 — def test_every_job_has_an_explicit_timeout(workflow)
• test_the_quality_job_budget_fits_two_full_suite_runs · function · L1034-L1059 — def test_the_quality_job_budget_fits_two_full_suite_runs()
• _addopts_quiet · function · L1062-L1072 — def _addopts_quiet() -> int
• _quiet_flags · function · L1075-L1088 — def _quiet_flags(argv) -> list[int]
• _suite_invocations · function · L1091-L1120 — def _suite_invocations(tmp_path, monkeypatch)
• record · function · L1101-L1103 — def record(argv, **_kwargs)
• test_no_suite_gate_repeats_the_quiet_flag_addopts_already_passes · function · L1123-L1143 — def test_no_suite_gate_repeats_the_quiet_flag_addopts_already_passes( tmp_path, monkeypatch )
• test_linux_bwrap_interrupt_smoke_is_an_independent_real_runtime_job · function · L1146-L1229 — def test_linux_bwrap_interrupt_smoke_is_an_independent_real_runtime_job()
• test_linux_sandbox_full_is_an_independent_enforce_job_without_raw_network · function · L1232-L1298 — def test_linux_sandbox_full_is_an_independent_enforce_job_without_raw_network()
• test_full_boundary_smoke_refuses_a_raw_network_override · function · L1301-L1318 — def test_full_boundary_smoke_refuses_a_raw_network_override()
• test_a_skipped_linux_full_boundary_check_is_refused · function · L1321-L1331 — def test_a_skipped_linux_full_boundary_check_is_refused()
• test_the_release_binds_the_platform_checks_to_the_frozen_sha · function · L1334-L1368 — def test_the_release_binds_the_platform_checks_to_the_frozen_sha()
• test_the_release_declares_every_platform_it_does_not_prove · function · L1371-L1417 — def test_the_release_declares_every_platform_it_does_not_prove()
• test_the_evidence_bundle_and_attestation_leave_the_attach_job · function · L1420-L1443 — def test_the_evidence_bundle_and_attestation_leave_the_attach_job()