wehub-resource-sync
a06f331eb8
CI / benchmark (push) Has been skipped
install-script / posix-syntax (push) Successful in 6m1s
CI / build-onnx (push) Failing after 6m43s
init-smoke / dry-run (push) Failing after 15m57s
security / govulncheck (push) Has been cancelled
security / trivy-fs (push) Has been cancelled
CI / test (1.26, ubuntu-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
CI / test (1.26, macos-latest) (push) Has been cancelled
CI / build-windows (push) Has been cancelled
CI / lint (push) Has been cancelled
install-script / powershell-syntax (push) Has been cancelled
install-script / install (macos-14) (push) Has been cancelled
install-script / install (ubuntu-latest) (push) Has been cancelled
89 lines
2.5 KiB
Go
89 lines
2.5 KiB
Go
package astquery
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestLoadUserRulesData_RegistersRules(t *testing.T) {
|
|
src := `
|
|
[[rule]]
|
|
name = "fr80-feature-flag"
|
|
description = "flags.Register calls"
|
|
domain = "feature_flag"
|
|
severity = "info"
|
|
tags = ["flags"]
|
|
[rule.query]
|
|
go = '(call_expression) @match'
|
|
|
|
[[rule]]
|
|
name = "fr80-cli-command"
|
|
domain = "cli_command"
|
|
[rule.query]
|
|
go = '(function_declaration) @match'
|
|
`
|
|
n, err := LoadUserRulesData([]byte(src))
|
|
require.NoError(t, err)
|
|
require.Equal(t, 2, n)
|
|
|
|
d := LookupDetector("user:fr80-feature-flag")
|
|
require.NotNil(t, d)
|
|
require.Equal(t, "domain", d.Category)
|
|
require.Contains(t, d.Tags, "feature_flag")
|
|
require.Contains(t, d.Tags, "user-rule")
|
|
require.Contains(t, d.Tags, "flags")
|
|
require.Equal(t, "(call_expression) @match", d.Languages["go"])
|
|
|
|
// The domain category bundle now includes the user rules — this
|
|
// is what `analyze kind=domain` fans out over.
|
|
names := map[string]bool{}
|
|
for _, dd := range DetectorsByCategory("domain") {
|
|
names[dd.Name] = true
|
|
}
|
|
require.True(t, names["user:fr80-feature-flag"])
|
|
require.True(t, names["user:fr80-cli-command"])
|
|
}
|
|
|
|
func TestLoadUserRulesData_DefaultsApplied(t *testing.T) {
|
|
n, err := LoadUserRulesData([]byte("[[rule]]\nname = \"fr80-defaults\"\n[rule.query]\ngo = '(x) @match'\n"))
|
|
require.NoError(t, err)
|
|
require.Equal(t, 1, n)
|
|
d := LookupDetector("user:fr80-defaults")
|
|
require.NotNil(t, d)
|
|
require.Equal(t, "info", d.Severity) // default severity
|
|
require.Contains(t, d.Tags, "custom") // default domain
|
|
}
|
|
|
|
func TestLoadUserRulesData_InvalidTOML(t *testing.T) {
|
|
_, err := LoadUserRulesData([]byte("[[rule]\nname = "))
|
|
require.Error(t, err)
|
|
}
|
|
|
|
func TestLoadUserRulesData_MissingName(t *testing.T) {
|
|
_, err := LoadUserRulesData([]byte("[[rule]]\n[rule.query]\ngo = '(x) @match'\n"))
|
|
require.Error(t, err)
|
|
}
|
|
|
|
func TestLoadUserRulesData_MissingQuery(t *testing.T) {
|
|
_, err := LoadUserRulesData([]byte("[[rule]]\nname = \"fr80-noquery\"\n"))
|
|
require.Error(t, err)
|
|
}
|
|
|
|
func TestLoadUserRulesFile(t *testing.T) {
|
|
dir := t.TempDir()
|
|
path := filepath.Join(dir, "rules.toml")
|
|
require.NoError(t, os.WriteFile(path,
|
|
[]byte("[[rule]]\nname = \"fr80-fromfile\"\n[rule.query]\ngo = '(x) @match'\n"), 0o644))
|
|
|
|
n, err := LoadUserRulesFile(path)
|
|
require.NoError(t, err)
|
|
require.Equal(t, 1, n)
|
|
require.NotNil(t, LookupDetector("user:fr80-fromfile"))
|
|
|
|
_, err = LoadUserRulesFile(filepath.Join(dir, "does-not-exist.toml"))
|
|
require.Error(t, err)
|
|
}
|