test(cmd): clear SOCKGUARD_* before asserting clean pre-validation stderr

[scttbnsn]

The promotion PR's podman integration legs (rootful and rootless) both failed on one unit test: TestRunServeErrorPaths/validate_before_opening_log_output asserts nothing reaches stderr before validation, and the job exports SOCKGUARD_TEST_PODMAN_SOCKET, which the new unknown-variable warning (#469) correctly reports before validation runs. The Go Test job has no such variable, so dev Verify was green.

The validate-command tests already handle this with clearSockguardEnv; this applies the same call to that subtest. Reproduced locally with the variable exported (fails before, passes after), and the whole internal/cmd package passes both with and without it set.

Changelog

• 🐛 Fixed TestRunServeErrorPaths/validate_before_opening_log_output by clearing SOCKGUARD_* variables with clearSockguardEnv(t) before the stderr assertion.
• 🔧 Changed the test to avoid warnings from SOCKGUARD_TEST_PODMAN_SOCKET in Podman integration jobs.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
sockguard-website	Ready	Preview	Sep 6, 2026 1:31pm UTC

[biggest-littlest]

Reviewed against the CHANGELOG entry and the diff; CI green outside the qlty/Vercel quota noise.

[ALARGECOMPANY]

Reviewed against the CHANGELOG entry and the diff; CI green outside the qlty/Vercel quota noise.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: e6f7b2ef-4ed2-4041-89d7-63b7d560788c

📥 Commits

Reviewing files that changed from the base of the PR and between a17d8fc and 9138f28.

⛔ Files ignored due to path filters (1)

• CHANGELOG.md is excluded by !CHANGELOG.md

📒 Files selected for processing (1)

• app/internal/cmd/serve_run_test.go

---

📝 Walkthrough

Walkthrough

The “validate before opening log output” test now calls clearSockguardEnv(t) before dependency setup. This removes externally exported SOCKGUARD_* variables before the test checks stderr output.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/serve-env-injectable

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}