From 7949ce50031b462f69bb50cd84723fe89e30007e Mon Sep 17 00:00:00 2001 From: Tonis Tiigi Date: Wed, 1 Apr 2026 21:58:30 -0700 Subject: [PATCH] policy: fix flaky HTTP PGP test Ensure the negative checksum case always mutates the digest instead of sometimes reproducing the original value when it already starts with 0. Signed-off-by: Tonis Tiigi --- policy/funcs_http_pgp_test.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/policy/funcs_http_pgp_test.go b/policy/funcs_http_pgp_test.go index 0916a34da..5b498d06f 100644 --- a/policy/funcs_http_pgp_test.go +++ b/policy/funcs_http_pgp_test.go @@ -67,7 +67,11 @@ func TestBuiltinVerifyHTTPPGPSignatureImpl(t *testing.T) { t.Run("verify-failure-returns-false", func(t *testing.T) { encoded := checksumDigest.Encoded() require.NotEmpty(t, encoded) - flipped := "0" + encoded[1:] + flippedFirst := byte('0') + if encoded[0] == '0' { + flippedFirst = '1' + } + flipped := string(flippedFirst) + encoded[1:] badDigest := digest.NewDigestFromEncoded(checksumDigest.Algorithm(), flipped) st := &state{