66 lines
1.9 KiB
Go
66 lines
1.9 KiB
Go
package inspect
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/cli/cli/v2/pkg/cmd/attestation/logging"
|
|
"github.com/cli/cli/v2/pkg/cmd/attestation/test"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
const (
|
|
SigstoreSanValue = "https://github.com/sigstore/sigstore-js/.github/workflows/release.yml@refs/heads/main"
|
|
SigstoreSanRegex = "^https://github.com/sigstore/sigstore-js/"
|
|
)
|
|
|
|
var (
|
|
artifactPath = test.NormalizeRelativePath("../test/data/sigstore-js-2.1.0.tgz")
|
|
bundlePath = test.NormalizeRelativePath("../test/data/sigstore-js-2.1.0-bundle.json")
|
|
)
|
|
|
|
func TestRunInspect(t *testing.T) {
|
|
res := test.SuppressAndRestoreOutput()
|
|
defer res()
|
|
|
|
logger := logging.NewSystemLogger()
|
|
|
|
opts := Options{
|
|
ArtifactPath: artifactPath,
|
|
BundlePath: bundlePath,
|
|
DigestAlgorithm: "sha512",
|
|
Logger: logger,
|
|
}
|
|
|
|
t.Run("with valid artifact and bundle", func(t *testing.T) {
|
|
assert.Nil(t, RunInspect(&opts))
|
|
})
|
|
|
|
t.Run("with missing artifact path", func(t *testing.T) {
|
|
customOpts := opts
|
|
customOpts.ArtifactPath = "../test/data/non-existent-artifact.zip"
|
|
assert.Error(t, RunInspect(&customOpts))
|
|
})
|
|
|
|
t.Run("with missing bundle path", func(t *testing.T) {
|
|
customOpts := opts
|
|
customOpts.BundlePath = "../test/data/non-existent-sigstoreBundle.json"
|
|
assert.Error(t, RunInspect(&customOpts))
|
|
})
|
|
|
|
t.Run("with invalid signature", func(t *testing.T) {
|
|
customOpts := opts
|
|
customOpts.BundlePath = "../test/data/sigstoreBundle-invalid-signature.json"
|
|
|
|
err := RunInspect(&customOpts)
|
|
assert.Error(t, err)
|
|
assert.ErrorContains(t, err, "at least one attestation failed to verify")
|
|
assert.ErrorContains(t, err, "verifying with issuer \"sigstore.dev\"")
|
|
})
|
|
|
|
t.Run("with valid artifact and JSON lines file containing multiple bundles", func(t *testing.T) {
|
|
customOpts := opts
|
|
customOpts.BundlePath = "../test/data/sigstore-js-2.1.0_with_2_bundles.jsonl"
|
|
assert.Nil(t, RunInspect(&customOpts))
|
|
})
|
|
}
|