keyhog 0.5.73

GPU-accelerated secret scanner for code, Git history, cloud, containers, browser assets, and live credential verification
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

//! Adversarial: retired KEYHOG_THREADS must not affect thread configuration.

use crate::support::{binary, write_temp_file};
use std::process::Command;

#[test]
fn keyhog_threads_empty_string_is_ignored() {
    let (_dir, path) = write_temp_file("clean.txt", "ok\n");
    let output = Command::new(binary())
        .env("KEYHOG_THREADS", "")
        .args([
            "scan",
            "--backend",
            "cpu",
            "--daemon=off",
            "--format",
            "json",
        ])
        .arg(&path)
        .output()
        .expect("spawn");
    let stderr = String::from_utf8_lossy(&output.stderr);
    assert_eq!(output.status.code(), Some(0), "stderr={stderr}");
    assert!(
        !stderr.contains("KEYHOG_THREADS"),
        "retired KEYHOG_THREADS must be ignored; use --threads or [scan].threads; stderr={stderr}"
    );
}