feat: initial open marketplace with llm-security, config-audit, ultraplan-local
This commit is contained in:
commit
f93d6abdae
380 changed files with 65935 additions and 0 deletions
124
plugins/config-audit/tests/scanners/conflict-detector.test.mjs
Normal file
124
plugins/config-audit/tests/scanners/conflict-detector.test.mjs
Normal file
|
|
@ -0,0 +1,124 @@
|
|||
import { describe, it, beforeEach } from 'node:test';
|
||||
import assert from 'node:assert/strict';
|
||||
import { resolve } from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import { resetCounter } from '../../scanners/lib/output.mjs';
|
||||
import { discoverConfigFiles } from '../../scanners/lib/file-discovery.mjs';
|
||||
import { scan } from '../../scanners/conflict-detector.mjs';
|
||||
|
||||
const __dirname = fileURLToPath(new URL('.', import.meta.url));
|
||||
const FIXTURES = resolve(__dirname, '../fixtures');
|
||||
|
||||
describe('CNF scanner — conflict project', () => {
|
||||
let result;
|
||||
beforeEach(async () => {
|
||||
resetCounter();
|
||||
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'conflict-project'));
|
||||
result = await scan(resolve(FIXTURES, 'conflict-project'), discovery);
|
||||
});
|
||||
|
||||
it('returns status ok', () => {
|
||||
assert.equal(result.status, 'ok');
|
||||
});
|
||||
|
||||
it('reports scanner prefix CNF', () => {
|
||||
assert.equal(result.scanner, 'CNF');
|
||||
});
|
||||
|
||||
it('finding IDs match CA-CNF-NNN pattern', () => {
|
||||
for (const f of result.findings) {
|
||||
assert.match(f.id, /^CA-CNF-\d{3}$/);
|
||||
}
|
||||
});
|
||||
|
||||
it('detects model key conflict', () => {
|
||||
assert.ok(result.findings.some(f => f.title.includes('model')));
|
||||
});
|
||||
|
||||
it('settings conflict is medium severity', () => {
|
||||
const model = result.findings.find(f => f.title.includes('model'));
|
||||
assert.equal(model.severity, 'medium');
|
||||
});
|
||||
|
||||
it('detects effortLevel key conflict', () => {
|
||||
assert.ok(result.findings.some(f => f.title.includes('effortLevel')));
|
||||
});
|
||||
|
||||
it('detects permission allow/deny conflict', () => {
|
||||
assert.ok(result.findings.some(f => f.title.includes('Permission allow/deny')));
|
||||
});
|
||||
|
||||
it('permission conflict is high severity', () => {
|
||||
const perm = result.findings.find(f => f.title.includes('Permission allow/deny'));
|
||||
assert.equal(perm.severity, 'high');
|
||||
});
|
||||
|
||||
it('detects duplicate hook definition', () => {
|
||||
assert.ok(result.findings.some(f => f.title.includes('Duplicate hook')));
|
||||
});
|
||||
|
||||
it('duplicate hook is low severity', () => {
|
||||
const hook = result.findings.find(f => f.title.includes('Duplicate hook'));
|
||||
assert.equal(hook.severity, 'low');
|
||||
});
|
||||
|
||||
it('has exactly 4 findings', () => {
|
||||
assert.equal(result.findings.length, 4);
|
||||
});
|
||||
|
||||
it('includes evidence with scope info', () => {
|
||||
const perm = result.findings.find(f => f.title.includes('Permission'));
|
||||
assert.ok(perm.evidence);
|
||||
});
|
||||
});
|
||||
|
||||
describe('CNF scanner — healthy project', () => {
|
||||
let result;
|
||||
beforeEach(async () => {
|
||||
resetCounter();
|
||||
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'healthy-project'));
|
||||
result = await scan(resolve(FIXTURES, 'healthy-project'), discovery);
|
||||
});
|
||||
|
||||
it('returns ok with no conflicts', () => {
|
||||
assert.equal(result.status, 'ok');
|
||||
});
|
||||
|
||||
it('has 0 findings', () => {
|
||||
assert.equal(result.findings.length, 0);
|
||||
});
|
||||
});
|
||||
|
||||
describe('CNF scanner — empty project', () => {
|
||||
let result;
|
||||
beforeEach(async () => {
|
||||
resetCounter();
|
||||
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'empty-project'));
|
||||
result = await scan(resolve(FIXTURES, 'empty-project'), discovery);
|
||||
});
|
||||
|
||||
it('returns skipped when no config files', () => {
|
||||
assert.equal(result.status, 'skipped');
|
||||
});
|
||||
|
||||
it('has 0 findings', () => {
|
||||
assert.equal(result.findings.length, 0);
|
||||
});
|
||||
});
|
||||
|
||||
describe('CNF scanner — minimal project', () => {
|
||||
let result;
|
||||
beforeEach(async () => {
|
||||
resetCounter();
|
||||
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'minimal-project'));
|
||||
result = await scan(resolve(FIXTURES, 'minimal-project'), discovery);
|
||||
});
|
||||
|
||||
it('returns skipped with no settings files', () => {
|
||||
assert.equal(result.status, 'skipped');
|
||||
});
|
||||
|
||||
it('has 0 findings', () => {
|
||||
assert.equal(result.findings.length, 0);
|
||||
});
|
||||
});
|
||||
Loading…
Add table
Add a link
Reference in a new issue