Files
gclo/docs/security
james.maesandClaude Fable 5.2 9fc4e8a5ec fix(app): scope the UI test fixture to its token, never in an installed build
With GCLO_UITEST_FIXTURE=1 the fixture's git client answered "not a
repository" for every folder, whatever the token, so a real session
started with the variable set treated every existing repository as
missing. The variable was also honoured by installed release builds,
and nothing recorded that it was in effect.

- The fixture asks the real git client whether a folder is a repository;
  its own clones write nothing, so the fixture token still always clones.
- An installed build (one with a Velopack app id) ignores the variable.
- The app logs one line when the fixture is enabled; a UI test asserts it.

Threat model: the interface row for the variable says what now holds.

Closes #145

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Signed-off-by: James Maes <james@kof22.com>
2026-11-10 15:44:11 -06:00
..