fix tests

Author: joejstuart

cmd/validate/vsa_test.go

@@ -2061,12 +2061,12 @@ func TestShortenImageDigest(t *testing.T) {
 		{
 			name:     "image without digest, long ref",
 			imageRef: "registry.com/very/long/repository/path/image:tag",
-			expected: "…e:tag",
+			expected: "…mage:tag", // Last 8 characters
 		},
 		{
 			name:     "image without digest, short ref",
 			imageRef: "image:tag",
-			expected: "image:tag",
+			expected: "…mage:tag", // 9 chars, so last 8 with ellipsis
 		},
 		{
 			name:     "image ref with exactly 8 chars",
@@ -2124,9 +2124,9 @@ func TestExtractFallbackReason(t *testing.T) {
 			expected: "no vsa",
 		},
 		{
-			name: "no vsa found lowercase",
+			name: "no vsa found lowercase with capital VSA",
 			result: &vsa.ValidationResult{
-				Message: "no vsa found for image",
+				Message: "no VSA found for image",
 			},
 			expected: "no vsa",
 		},

internal/validate/report_test.go

@@ -555,9 +555,10 @@ func TestCollectComponentResults(t *testing.T) {
 func TestWriteReport(t *testing.T) {
 	ctx := context.Background()
 
-	// Create a minimal policy
+	// Create a minimal policy with a public key to avoid keyless workflow validation
 	testPolicy, err := policy.NewPolicy(ctx, policy.Options{
 		EffectiveTime: "now",
+		PublicKey:     "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECBtqKHcvxYkGx7ZXqps3nrYS+ZSA\nmh3m1MZfTGlnr2oN0z+sBWEC23s4RkVSXkEydI6SLYatUtJK8OmiBRS+Xw==\n-----END PUBLIC KEY-----",
 	})
 	require.NoError(t, err)