test: keep tirith checks hermetic

2026-05-23 02:20:14 -07:00
parent 52a368fa72
commit 71291d83cd
5 changed files with 25 additions and 5 deletions
@@ -831,7 +831,8 @@ class TestDiskFailureMarker:
        with patch("tools.tirith_security._failure_marker_path", return_value=marker):
            from tools.tirith_security import _mark_install_failed, _is_install_failed_on_disk
            _mark_install_failed("cosign_missing")
-            assert _is_install_failed_on_disk()  # cosign still absent
+            with patch("tools.tirith_security.shutil.which", return_value=None):
+                assert _is_install_failed_on_disk()  # cosign still absent

            # Now cosign appears on PATH
            with patch("tools.tirith_security.shutil.which", return_value="/usr/local/bin/cosign"):