up

src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/PromotionAttestationBuilderTests.cs

@@ -3,6 +3,7 @@ using System.Collections.Generic;
 using FluentAssertions;
 using System.Threading.Tasks;
 using StellaOps.Provenance.Attestation;
+using StellaOps.Cryptography;
 using Xunit;
 
 namespace StellaOps.Provenance.Attestation.Tests;
@@ -37,7 +38,7 @@ public class PromotionAttestationBuilderTests
             PromotionId: "prom-1");
 
         var key = new InMemoryKeyProvider("kid-1", Encoding.UTF8.GetBytes("secret"));
-        var signer = new HmacSigner(key);
+        var signer = new HmacSigner(key, DefaultCryptoHmac.CreateForTests());
 
         var attestation = await PromotionAttestationBuilder.BuildAsync(
             predicate,

src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/RotatingSignerTests.cs

@@ -4,6 +4,7 @@ using System.Collections.Generic;
 using System.Threading.Tasks;
 using FluentAssertions;
 using StellaOps.Provenance.Attestation;
+using StellaOps.Cryptography;
 using Xunit;
 
 namespace StellaOps.Provenance.Attestation.Tests;
@@ -28,7 +29,7 @@ public sealed class RotatingSignerTests
 
         var audit = new InMemoryAuditSink();
         var rotating = new RotatingKeyProvider(new[] { keyOld, keyNew }, t, audit);
-        var signer = new HmacSigner(rotating, audit, t);
+        var signer = new HmacSigner(rotating, DefaultCryptoHmac.CreateForTests(), audit, t);
 
         var req = new SignRequest(
             Encoding.UTF8.GetBytes("payload"),

src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/SignerTests.cs

@@ -4,6 +4,7 @@ using System.Threading.Tasks;
 using System.Collections.Generic;
 using FluentAssertions;
 using StellaOps.Provenance.Attestation;
+using StellaOps.Cryptography;
 using Xunit;
 
 namespace StellaOps.Provenance.Attestation.Tests;
@@ -15,7 +16,7 @@ public class SignerTests
     {
         var key = new InMemoryKeyProvider("test-key", Encoding.UTF8.GetBytes("secret"));
         var audit = new InMemoryAuditSink();
-        var signer = new HmacSigner(key, audit, TimeProvider.System);
+        var signer = new HmacSigner(key, DefaultCryptoHmac.CreateForTests(), audit, TimeProvider.System);
 
         var request = new SignRequest(Encoding.UTF8.GetBytes("payload"), "application/json");
 
@@ -32,7 +33,7 @@ public class SignerTests
     {
         var key = new InMemoryKeyProvider("test-key", Encoding.UTF8.GetBytes("secret"));
         var audit = new InMemoryAuditSink();
-        var signer = new HmacSigner(key, audit, TimeProvider.System);
+        var signer = new HmacSigner(key, DefaultCryptoHmac.CreateForTests(), audit, TimeProvider.System);
 
         var request = new SignRequest(
             Payload: Encoding.UTF8.GetBytes("payload"),

src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/StellaOps.Provenance.Attestation.Tests.csproj

@@ -13,8 +13,7 @@
     <ProjectReference Include="../../StellaOps.Provenance.Attestation/StellaOps.Provenance.Attestation.csproj" />
     <ProjectReference Include="../../../../src/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.csproj" />
     <PackageReference Include="FluentAssertions" Version="6.12.0" />
-    <PackageReference Include="Microsoft.Extensions.TimeProvider.Testing" Version="10.0.0" />
-    <PackageReference Include="xunit" Version="2.9.2" />
+    <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2" />
   </ItemGroup>
 </Project>

src/Provenance/__Tests/StellaOps.Provenance.Attestation.Tests/VerificationTests.cs

@@ -2,6 +2,7 @@ using System.Text;
 using FluentAssertions;
 using System.Threading.Tasks;
 using StellaOps.Provenance.Attestation;
+using StellaOps.Cryptography;
 using Xunit;
 
 namespace StellaOps.Provenance.Attestation.Tests;
@@ -15,7 +16,7 @@ public class VerificationTests
     public async Task Verifier_accepts_valid_signature()
     {
         var key = new InMemoryKeyProvider("test-key", Encoding.UTF8.GetBytes("secret"));
-        var signer = new HmacSigner(key);
+        var signer = new HmacSigner(key, DefaultCryptoHmac.CreateForTests());
         var verifier = new HmacVerifier(key);
 
         var request = new SignRequest(Encoding.UTF8.GetBytes(Payload), ContentType);
@@ -30,7 +31,7 @@ public class VerificationTests
     public async Task Verifier_rejects_tampered_payload()
     {
         var key = new InMemoryKeyProvider("test-key", Encoding.UTF8.GetBytes("secret"));
-        var signer = new HmacSigner(key);
+        var signer = new HmacSigner(key, DefaultCryptoHmac.CreateForTests());
         var verifier = new HmacVerifier(key);
 
         var request = new SignRequest(Encoding.UTF8.GetBytes(Payload), ContentType);