ben/dotfiles-public
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

test: lab asserts GitHub reads stay https after the private tier applies

Browse Source
This commit is contained in:
bcherb2
2026-08-22 22:33:32 -04:00
parent e682ed8a1d
commit 607745ecfd
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.tests/lab/scenarios/30-private-tier.sh
+12
View File
@@ -190,4 +190,16 @@ done
ls "$HOME/.config/zsh"/.secrets.zsh.* >/dev/null 2>&1 && fail "a temp file survived a failed refresh"
ok "a failed refresh leaves secrets.zsh byte-identical and no temp file behind"
# ---- GitHub reads stay anonymous https after the tier applies ---------------
# The tier ships a git@github.com: rewrite for PUSHES. If it ever regresses to
# a blanket insteadOf, every https clone on a keyless fresh box breaks -- the
# first casualty was nvim's plugin bootstrap (live, 2026-08-22).
# Plain `git config --get`, not --global: --global does not follow the
# [include] seam by default, which made this pair pass vacuously.
git config --get 'url.git@github.com:.insteadof' >/dev/null 2>&1 \
&& fail "GitHub https READS are rewritten to ssh — a keyless box cannot clone plugins"
git config --get 'url.git@github.com:.pushinsteadof' >/dev/null 2>&1 \
|| fail "the GitHub push-over-ssh rewrite is gone entirely"
ok "GitHub reads stay https; only pushes are rewritten to ssh"
echo "PRIVATE TIER PASS"