mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
80 lines
2.3 KiB
Go
80 lines
2.3 KiB
Go
package util
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestGetMandatoryDenyPatterns(t *testing.T) {
|
|
t.Run("always blocks dangerous files", func(t *testing.T) {
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should contain patterns for each dangerous file
|
|
assert.Contains(t, patterns, "**/.env")
|
|
assert.Contains(t, patterns, "**/.ssh")
|
|
assert.Contains(t, patterns, "**/.aws")
|
|
assert.Contains(t, patterns, "**/.gcloud")
|
|
assert.Contains(t, patterns, "**/.kube")
|
|
assert.Contains(t, patterns, "**/.gnupg")
|
|
assert.Contains(t, patterns, "**/.docker/config.json")
|
|
})
|
|
|
|
t.Run("always blocks git hooks", func(t *testing.T) {
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should block git hooks
|
|
assert.Contains(t, patterns, "**/.git/hooks")
|
|
assert.Contains(t, patterns, "**/.git/hooks/**")
|
|
})
|
|
|
|
t.Run("blocks git config when allowGitConfig is false", func(t *testing.T) {
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should block git config
|
|
assert.Contains(t, patterns, "**/.git/config")
|
|
})
|
|
|
|
t.Run("allows git config when allowGitConfig is true", func(t *testing.T) {
|
|
patterns := GetMandatoryDenyPatterns(true)
|
|
|
|
// Should NOT block git config
|
|
for _, pattern := range patterns {
|
|
assert.NotContains(t, pattern, ".git/config")
|
|
}
|
|
})
|
|
|
|
t.Run("includes CWD-relative patterns", func(t *testing.T) {
|
|
cwd, err := os.Getwd()
|
|
assert.NoError(t, err)
|
|
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should include absolute paths in CWD
|
|
assert.Contains(t, patterns, filepath.Join(cwd, ".env"))
|
|
assert.Contains(t, patterns, filepath.Join(cwd, ".ssh"))
|
|
assert.Contains(t, patterns, filepath.Join(cwd, ".git/hooks"))
|
|
})
|
|
|
|
t.Run("includes HOME-relative patterns", func(t *testing.T) {
|
|
home, err := os.UserHomeDir()
|
|
assert.NoError(t, err)
|
|
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should include absolute paths in HOME
|
|
assert.Contains(t, patterns, filepath.Join(home, ".env"))
|
|
assert.Contains(t, patterns, filepath.Join(home, ".ssh"))
|
|
assert.Contains(t, patterns, filepath.Join(home, ".aws"))
|
|
})
|
|
|
|
t.Run("includes glob patterns for env variants", func(t *testing.T) {
|
|
patterns := GetMandatoryDenyPatterns(false)
|
|
|
|
// Should include pattern for .env.* files
|
|
assert.Contains(t, patterns, "**/.env.*")
|
|
})
|
|
}
|