Review SSH Key Configuration

Nucleic-Session: 6B6440C0-1A04-4A74-A5D7-A3125244F7C4 Co-authored-by: Nucleic <[email protected]>
2026-06-27 17:56:09 -07:00
parent 71f70e6ca0
commit ceffeeb2e8
1 changed files with 3 additions and 0 deletions
@@ -423,6 +423,9 @@ struct GitHubCredentialsTests {
        #expect(flags.contains("gpg.format=ssh"))
        #expect(flags.contains("commit.gpgsign=true"))
        #expect(flags.contains("tag.gpgsign=true"))
+        // The signer is pinned to OpenSSH, hermetic from a user's 1Password `gpg.ssh.program`
+        // (which would otherwise hijack signing and reject the Managed Git key).
+        #expect(flags.contains("gpg.ssh.program=/usr/bin/ssh-keygen"))
        // A managed key carries no passphrase, so no askpass env is needed.
        #expect(env.isEmpty)