86 lines
2.9 KiB
JavaScript
86 lines
2.9 KiB
JavaScript
import { describe, it, beforeEach } from 'node:test';
|
|
import assert from 'node:assert/strict';
|
|
import { resolve } from 'node:path';
|
|
import { fileURLToPath } from 'node:url';
|
|
import { resetCounter } from '../../scanners/lib/output.mjs';
|
|
import { discoverConfigFiles } from '../../scanners/lib/file-discovery.mjs';
|
|
import { scan } from '../../scanners/hook-validator.mjs';
|
|
|
|
const __dirname = fileURLToPath(new URL('.', import.meta.url));
|
|
const FIXTURES = resolve(__dirname, '../fixtures');
|
|
|
|
describe('HKV scanner — healthy project', () => {
|
|
let result;
|
|
beforeEach(async () => {
|
|
resetCounter();
|
|
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'healthy-project'));
|
|
result = await scan(resolve(FIXTURES, 'healthy-project'), discovery);
|
|
});
|
|
|
|
it('returns status ok', () => {
|
|
assert.strictEqual(result.status, 'ok');
|
|
});
|
|
|
|
it('has scanner prefix HKV', () => {
|
|
assert.strictEqual(result.scanner, 'HKV');
|
|
});
|
|
|
|
it('finds no critical or high issues', () => {
|
|
const serious = result.findings.filter(f => f.severity === 'critical' || f.severity === 'high');
|
|
assert.strictEqual(serious.length, 0, `Found: ${serious.map(f => f.title).join(', ')}`);
|
|
});
|
|
|
|
it('all finding IDs match CA-HKV-NNN', () => {
|
|
for (const f of result.findings) {
|
|
assert.match(f.id, /^CA-HKV-\d{3}$/);
|
|
}
|
|
});
|
|
});
|
|
|
|
describe('HKV scanner — broken project', () => {
|
|
let result;
|
|
beforeEach(async () => {
|
|
resetCounter();
|
|
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'broken-project'));
|
|
result = await scan(resolve(FIXTURES, 'broken-project'), discovery);
|
|
});
|
|
|
|
it('detects unknown hook event', () => {
|
|
const found = result.findings.some(f => f.title === 'Unknown hook event');
|
|
assert.ok(found, 'Should detect InvalidEvent');
|
|
});
|
|
|
|
it('detects object matcher (should be string)', () => {
|
|
const found = result.findings.some(f => f.title.includes('Matcher must be a string'));
|
|
assert.ok(found, 'Should detect nested object matcher');
|
|
});
|
|
|
|
it('detects invalid handler type', () => {
|
|
const found = result.findings.some(f => f.title === 'Invalid hook handler type');
|
|
assert.ok(found, 'Should detect invalid_type');
|
|
});
|
|
|
|
it('detects timeout below minimum', () => {
|
|
const found = result.findings.some(f => f.title.includes('timeout'));
|
|
assert.ok(found, 'Should detect timeout of 500ms');
|
|
});
|
|
|
|
it('marks unknown event as high severity', () => {
|
|
const f = result.findings.find(f => f.title === 'Unknown hook event');
|
|
assert.strictEqual(f?.severity, 'high');
|
|
});
|
|
});
|
|
|
|
describe('HKV scanner — empty project', () => {
|
|
let result;
|
|
beforeEach(async () => {
|
|
resetCounter();
|
|
const discovery = await discoverConfigFiles(resolve(FIXTURES, 'empty-project'));
|
|
result = await scan(resolve(FIXTURES, 'empty-project'), discovery);
|
|
});
|
|
|
|
it('returns status ok with 0 findings', () => {
|
|
assert.strictEqual(result.status, 'ok');
|
|
assert.strictEqual(result.findings.length, 0);
|
|
});
|
|
});
|