From 78c09eea9d98bdfda59c25652e853aa9654facb9 Mon Sep 17 00:00:00 2001 From: garrytan Date: Tue, 3 Nov 2026 01:55:42 +0000 Subject: [PATCH] test(review): GST-972 key-file fixture holds no key header the credential scan flags Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> --- test/review-exclude.test.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/review-exclude.test.ts b/test/review-exclude.test.ts index de38365b1..8d7b4f942 100644 --- a/test/review-exclude.test.ts +++ b/test/review-exclude.test.ts @@ -398,7 +398,7 @@ describe('a branch cannot hide code under a base pattern', () => { const repo = makeFixtureRepo({ prefix: 'gstack-exclude-', baseFiles: { '.gstack/ship-policy.json': policyText(['assets/**']) } }); repos.push(repo); fs.mkdirSync(path.join(repo.work, 'assets'), { recursive: true }); const nul = (code: string) => Buffer.from(`/* \0 */ ${code}\n`); - const kept = { 'assets/Build.groovy': nul('println "x"'), 'assets/build.gradle': nul('apply plugin: "java"'), 'assets/id_ed25519': nul('-----BEGIN OPENSSH PRIVATE KEY-----'), 'assets/main.tf': nul('resource "x" "y" {}'), 'assets/query.sql': nul('DROP TABLE users;'), 'assets/server.p12': Buffer.from([0x30, 0x82, 0, 1, 2, 3]) }; + const kept = { 'assets/Build.groovy': nul('println "x"'), 'assets/build.gradle': nul('apply plugin: "java"'), 'assets/id_ed25519': nul('openssh-key-v1'), 'assets/main.tf': nul('resource "x" "y" {}'), 'assets/query.sql': nul('DROP TABLE users;'), 'assets/server.p12': Buffer.from([0x30, 0x82, 0, 1, 2, 3]) }; const content = { 'assets/report.pdf': GZ, 'assets/shot.png': GZ }; for (const [rel, bytes] of Object.entries({ ...kept, ...content })) fs.writeFileSync(path.join(repo.work, rel), bytes); commit(repo, {});