#!/usr/bin/env bash

# The mise registry marks github:aubepkg/aube as publishing GitHub attestations
# from 2.2.5 on (`attestations_since`). Locking such a version records
# github-attestations provenance, and installing it verifies an attestation,
# rather than trusting a "none" answer from mise-versions.

export MISE_LOCKFILE=1

cat <<EOF >mise.toml
[tools]
"github:aubepkg/aube" = "2.3.0"
EOF
touch mise.lock

mise lock --platform linux-x64
assert_contains "cat mise.lock" 'provenance = "github-attestations"'

mise install
assert_contains "mise x -- aube --version" "2.3.0"
