Add tests for missing coverage

Signed-off-by: Facundo Tuesca <[email protected]>

Author: facutuesca

src/pypi_attestations/_cli.py

@@ -385,7 +385,7 @@ def _verify_attestation(args: argparse.Namespace) -> None:
     """Verify the files passed as argument."""
     pol = policy.Identity(identity=args.identity)
 
-    # Validate that both the attestations and files exists
+    # Validate that both the attestations and files exist
     _validate_files(args.files, should_exist=True)
     _validate_files(
         (Path(f"{file_path}.publish.attestation") for file_path in args.files),
@@ -394,16 +394,8 @@ def _verify_attestation(args: argparse.Namespace) -> None:
 
     inputs: list[Path] = []
     for file_path in args.files:
-        # Collect only the inputs themselves, not their attestations.
-        # Attestation paths are inferred subsequently.
-        if file_path.name.endswith(".publish.attestation"):
-            _logger.warning(f"skipping attestation path while collecting file inputs: {file_path}")
-            continue
         inputs.append(file_path)
 
-    if not inputs:
-        _die("No inputs given; make sure you passed distributions and not attestations as inputs")
-
     for input in inputs:
         attestation_path = Path(f"{input}.publish.attestation")
         try:

test/test_cli.py

@@ -21,7 +21,7 @@
     get_identity_token,
     main,
 )
-from pypi_attestations._impl import Attestation
+from pypi_attestations._impl import Attestation, AttestationError
 
 ONLINE_TESTS = "CI" in os.environ or "TEST_INTERACTIVE" in os.environ
 online = pytest.mark.skipif(not ONLINE_TESTS, reason="online tests not enabled")
@@ -101,9 +101,7 @@ def test_sign_command(tmp_path: Path) -> None:
 
 
 @online
-def test_sign_command_failures(
-    tmp_path: Path, monkeypatch: pytest.MonkeyPatch, caplog: pytest.LogCaptureFixture
-) -> None:
+def test_sign_missing_file(caplog: pytest.LogCaptureFixture) -> None:
     # Missing file
     with pytest.raises(SystemExit):
         run_main_with_command(
@@ -115,9 +113,10 @@ def test_sign_command_failures(
         )
 
     assert "not_exist.txt is not a file" in caplog.text
-    caplog.clear()
 
-    # Signature already exists
+
+@online
+def test_sign_signature_already_exists(tmp_path: Path, caplog: pytest.LogCaptureFixture) -> None:
     artifact = tmp_path / artifact_path.with_suffix(".copy2.whl").name
     artifact.touch(exist_ok=False)
 
@@ -135,7 +134,11 @@ def test_sign_command_failures(
     assert "already exists" in caplog.text
     caplog.clear()
 
-    # Invalid token
+
+@online
+def test_sign_invalid_token(
+    monkeypatch: pytest.MonkeyPatch, caplog: pytest.LogCaptureFixture
+) -> None:
     def return_invalid_token() -> str:
         return "invalid-token"
 
@@ -146,13 +149,49 @@ def return_invalid_token() -> str:
             [
                 "sign",
                 "--staging",
-                artifact.as_posix(),
+                artifact_path.as_posix(),
             ]
         )
 
     assert "Failed to detect identity" in caplog.text
 
 
+@online
+def test_sign_invalid_artifact(caplog: pytest.LogCaptureFixture, tmp_path: Path) -> None:
+    artifact = tmp_path / "pkg-1.0.0.exe"
+    artifact.touch(exist_ok=False)
+
+    with pytest.raises(SystemExit):
+        run_main_with_command(["sign", "--staging", artifact.as_posix()])
+
+    assert "Invalid Python package distribution" in caplog.text
+
+
+@online
+def test_sign_fail_to_sign(
+    monkeypatch: pytest.MonkeyPatch, caplog: pytest.LogCaptureFixture, tmp_path: Path
+) -> None:
+    monkeypatch.setattr(pypi_attestations._cli, "Attestation", stub(sign=raiser(AttestationError)))
+    copied_artifact = tmp_path / artifact_path.with_suffix(".copy.whl").name
+    shutil.copy(artifact_path, copied_artifact)
+
+    with pytest.raises(SystemExit):
+        run_main_with_command(["sign", "--staging", copied_artifact.as_posix()])
+
+    assert "Failed to sign:" in caplog.text
+
+
+@online
+def test_sign_invalid_distribution(tmp_path: Path, caplog: pytest.LogCaptureFixture) -> None:
+    copied_artifact = tmp_path / artifact_path.with_suffix(".copy.whl2").name
+    shutil.copy(artifact_path, copied_artifact)
+
+    with pytest.raises(SystemExit):
+        run_main_with_command(["sign", "--staging", copied_artifact.as_posix()])
+
+    assert "Invalid Python package distribution" in caplog.text
+
+
 def test_inspect_command(caplog: pytest.LogCaptureFixture, monkeypatch: pytest.MonkeyPatch) -> None:
     # Happy path
     run_main_with_command(["inspect", attestation_path.as_posix()])