test: keep tirith checks hermetic

This commit is contained in:
helix4u 2026-05-22 17:05:23 -06:00 committed by Teknium
parent 52a368fa72
commit 71291d83cd
5 changed files with 25 additions and 5 deletions

View file

@ -831,7 +831,8 @@ class TestDiskFailureMarker:
with patch("tools.tirith_security._failure_marker_path", return_value=marker):
from tools.tirith_security import _mark_install_failed, _is_install_failed_on_disk
_mark_install_failed("cosign_missing")
assert _is_install_failed_on_disk() # cosign still absent
with patch("tools.tirith_security.shutil.which", return_value=None):
assert _is_install_failed_on_disk() # cosign still absent
# Now cosign appears on PATH
with patch("tools.tirith_security.shutil.which", return_value="/usr/local/bin/cosign"):