sopsy 1.3.3

Public/private individual key encryption for repo secrets with biometrics support and explicit approval of who can decrypt. In other words — the missing good UX for SOPS
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

//! End-to-end smoke tests for the `sopsy` binary.
//!
//! These verify the CLI wiring (help/version/subcommands) using `assert_cmd`.
//! They intentionally avoid touching real `sops`/Secure Enclave state; deeper
//! integration tests against real `sops` arrive with the command implementations.

use assert_cmd::Command;
use predicates::prelude::*;

/// Build a `Command` for the compiled `sopsy` binary.
fn sopsy() -> Command {
    Command::cargo_bin("sopsy").expect("binary `sopsy` should build")
}

#[test]
fn help_lists_all_commands() {
    sopsy()
        .arg("--help")
        .assert()
        .success()
        .stdout(predicate::str::contains("init"))
        .stdout(predicate::str::contains("doctor"))
        .stdout(predicate::str::contains("edit"))
        .stdout(predicate::str::contains("recipient"))
        .stdout(predicate::str::contains("check"));
}

#[test]
fn version_prints_crate_version() {
    sopsy()
        .arg("--version")
        .assert()
        .success()
        .stdout(predicate::str::contains(env!("CARGO_PKG_VERSION")));
}

#[test]
fn doctor_runs_and_reports_tools() {
    // Non-interactive so it never blocks; doctor only probes PATH.
    sopsy()
        .args(["--non-interactive", "doctor"])
        .assert()
        .success()
        .stdout(predicate::str::contains("git"));
}

#[test]
fn recipient_help_lists_subcommands() {
    sopsy()
        .args(["recipient", "--help"])
        .assert()
        .success()
        .stdout(predicate::str::contains("add"))
        .stdout(predicate::str::contains("remove"))
        .stdout(predicate::str::contains("list"));
}

#[test]
fn unknown_command_fails() {
    sopsy().arg("definitely-not-a-command").assert().failure();
}