Function TestKeychainGetNotFound

store/keychain/keychain_linux_test.go:205–212

TestKeychainGetNotFound exercises the full Get path against the fake — open, resolve collection, search — and asserts an empty search maps to ErrCredentialNotFound, all without a live keyring.

(t *testing.T)

// resolve collection, search — and asserts an empty search maps to
// ErrCredentialNotFound, all without a live keyring.
func TestKeychainGetNotFound(t *testing.T) {
	fake := &fakeService{} // no items -> not found
	withFakeService(t, fake)

	ks := setupKeychain(t, nil)
	_, err := ks.Get(t.Context(), store.MustParseID("com.test.test/test/missing"))
	assert.ErrorIs(t, err, store.ErrCredentialNotFound)
}

// TestKeychainGetAllMetadataEmpty is a regression test for `docker pass ls`
// against an empty keychain: listing all is a valid empty result, not a miss,