Function TestCommitVerifyAlignment

tests/objectverify/commit_test.go:16–139

(t *testing.T)

)

func TestCommitVerifyAlignment(t *testing.T) {
	t.Parallel()

	if testing.Short() {
		t.Skip("skipping commit verify")
	}

	if gpg == nil {
		t.Error("gpg not available")
		t.FailNow()
	}

	cases := []struct {
		name string
		// build returns the unsigned commit bytes that will be signed
		// by gpg. The signature is injected as a single canonical
		// "gpgsig" header in the standard location and the result is
		// what both verifiers see, unless postSign rewrites it.
		build func() []byte
		// postSign optionally rewrites the signed object bytes (e.g.
		// to inject a duplicated signature header). nil means use the
		// standard injection path.
		postSign func(signed []byte, sig string) []byte
	}{
		{
			name: "valid",
			build: func() []byte {
				h, m := canonicalCommit()
				return assembleCommit(h, m)
			},
		},
		{
			name: "duplicate-tree",
			build: func() []byte {
				h, m := canonicalCommit()
				dup := append([]string{
					h[0],
					"tree 5555555555555555555555555555555555555555",
				}, h[1:]...)
				return assembleCommit(dup, m)
			},
		},
		{
			name: "duplicate-author",
			build: func() []byte {
				h, m := canonicalCommit()
				dup := []string{
					h[0],
					h[1],
					h[2],
					"author Override Author <override@example.local> 1700000001 +0000",
					h[3],
				}
				return assembleCommit(dup, m)
			},
		},
		{
			name: "duplicate-committer",