Publish curated ITWorx_MCP_Hub source from ae713b53e32933192b7446ac25fd6394e69eb133

tests/test_mcp_hub_release_images.py

@@ -707,6 +707,7 @@ def test_scanner_stdout_bound_does_not_cap_or_capture_cache_files(tmp_path: Path
     def fake_scanner(command: list[str], **kwargs: object) -> subprocess.Popen[bytes]:
         assert "preexec_fn" not in kwargs
         assert kwargs.get("stdout") == subprocess.PIPE
+        assert kwargs.get("umask") == 0o077
         code = (
             "from pathlib import Path; import os; "
             "Path('cache.bin').write_bytes(b'x' * (3 * 1024 * 1024)); "
@@ -728,6 +729,7 @@ def test_scanner_stdout_bound_does_not_cap_or_capture_cache_files(tmp_path: Path
 
     assert output == b'{"complete":true}'
     assert (tmp_path / "cache.bin").stat().st_size == 3 * 1024 * 1024
+    assert (tmp_path / "cache.bin").stat().st_mode & 0o777 == 0o600
 
 
 @pytest.mark.skipif(