From 44f76ec2ee4c04309006cd9d0a9f297cccfe05ec Mon Sep 17 00:00:00 2001 From: Yeongseon Choe Date: Tue, 6 Oct 2026 13:13:57 +0900 Subject: [PATCH] test(byok): keep the operator-key leak test on the HTTP path under replay Co-Authored-By: Claude Opus 5.5 --- tests/unit/test_operator_key_never_leaves.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tests/unit/test_operator_key_never_leaves.py b/tests/unit/test_operator_key_never_leaves.py index b13558ed..e425758d 100644 --- a/tests/unit/test_operator_key_never_leaves.py +++ b/tests/unit/test_operator_key_never_leaves.py @@ -70,6 +70,9 @@ def service(tmp_path: Path, monkeypatch: pytest.MonkeyPatch) -> BuilderService: for name in ("KPUBDATA_DATAGO_API_KEY", "DATAGO_API_KEY", "KPUBDATA_API_KEY"): monkeypatch.setenv(name, _OPERATOR) monkeypatch.setenv("KPUBDATA_BUILDER_REQUIRE_OWN_PROVIDER_CREDENTIAL", "true") + # The cross-repo job replays recorded fixtures instead of calling HTTP; this test + # needs the HTTP path it observes. + monkeypatch.delenv("KPUBDATA_REPLAY_DIR", raising=False) repository = SQLiteCredentialRepository( tmp_path / "credentials.sqlite3", AesGcmCredentialCipher(b"k" * 32) )