ci: remove pin files on test completion
What changed, and why it matters
This change cleans up temporary '.pin' test files after automated tests finish. It is a minor hygiene improvement in test code, not a fix for an exploitable product vulnerability. There is no indication these leftover files create meaningful security risk in normal use.
No security action required. Treat as routine test-maintenance cleanup.
Security signals we found
Test-only cleanup change
No product code modified
No cryptographic, authentication, or firmware logic changed
Evidence from the diff
The commit adds two lines to test_jade.py’s main-block finally handler: it globs for any ‘.pin’ files in the current directory and deletes them after test completion. These files appear to be artifacts generated during CI/test runs. The patch does not touch firmware, wallet logic, cryptography, or user-facing behavior.
Changed components
test_jade.pyInspect captured patch +2 / −0
diff --git a/test_jade.py b/test_jade.py
index 5e817af..cf52ee2 100644
--- a/test_jade.py
+++ b/test_jade.py
@@ -4305,5 +4305,7 @@ if __name__ == '__main__':
else:
assert False, 'Failed to connect to Jade over serial or BLE'
finally:
+ for f in glob.glob("./*.pin"):
+ os.remove(f)
if btagent:
kill_agent(btagent)
Why this scored 17/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.