docs/TESTING.md documents that existing integration tests should carry a build tag so they don't run on the default go test ./...:
Existing integration files will be moved under the build tag in a future tidy-up PR; the change is mechanical (add 2 lines at the top).
Currently pkg/security/executor_integration_test.go has no build tag, so it runs on every go test ./....
Task: add the build constraint at the very top of the file (above the package clause, after the existing SPDX/copyright header), followed by a blank line:
Why it's a good first issue: purely mechanical, fully documented in TESTING.md, easy to verify.
Acceptance: go test ./pkg/security/ no longer compiles/runs the integration file by default; go test -tags integration ./pkg/security/ still does.
Scope: small (1–2 lines + a blank line).
docs/TESTING.mddocuments that existing integration tests should carry a build tag so they don't run on the defaultgo test ./...:Currently
pkg/security/executor_integration_test.gohas no build tag, so it runs on everygo test ./....Task: add the build constraint at the very top of the file (above the package clause, after the existing SPDX/copyright header), followed by a blank line:
//go:build integrationWhy it's a good first issue: purely mechanical, fully documented in TESTING.md, easy to verify.
Acceptance:
go test ./pkg/security/no longer compiles/runs the integration file by default;go test -tags integration ./pkg/security/still does.Scope: small (1–2 lines + a blank line).