Add unit tests for SBOM ingestion and transformation

- Implement `SbomIngestServiceCollectionExtensionsTests` to verify the SBOM ingestion pipeline exports snapshots correctly. - Create `SbomIngestTransformerTests` to ensure the transformation produces expected nodes and edges, including deduplication of license nodes and normalization of timestamps. - Add `SbomSnapshotExporterTests` to test the export functionality for manifest, adjacency, nodes, and edges. - Introduce `VexOverlayTransformerTests` to validate the transformation of VEX nodes and edges. - Set up project file for the test project with necessary dependencies and configurations. - Include JSON fixture files for testing purposes.
2025-11-04 07:49:39 +02:00
parent f72c5c513a
commit 2eb6852d34
491 changed files with 39445 additions and 3917 deletions
--- a/tests/Graph/StellaOps.Graph.Indexer.Tests/PolicyOverlayProcessorTests.cs
+++ b/tests/Graph/StellaOps.Graph.Indexer.Tests/PolicyOverlayProcessorTests.cs
@@ -0,0 +1,136 @@
+using System;
+using System.Threading;
+using System.Threading.Tasks;
+using FluentAssertions;
+using Microsoft.Extensions.Logging.Abstractions;
+using StellaOps.Graph.Indexer.Ingestion.Policy;
+using StellaOps.Graph.Indexer.Ingestion.Sbom;
+using Xunit;
+
+namespace StellaOps.Graph.Indexer.Tests;
+
+public sealed class PolicyOverlayProcessorTests
+{
+    [Fact]
+    public async Task ProcessAsync_persists_overlay_and_records_success_metrics()
+    {
+        var snapshot = CreateSnapshot();
+        var transformer = new PolicyOverlayTransformer();
+        var writer = new CaptureWriter();
+        var metrics = new CaptureMetrics();
+        var processor = new PolicyOverlayProcessor(
+            transformer,
+            writer,
+            metrics,
+            NullLogger<PolicyOverlayProcessor>.Instance);
+
+        await processor.ProcessAsync(snapshot, CancellationToken.None);
+
+        writer.LastBatch.Should().NotBeNull();
+        metrics.LastRecord.Should().NotBeNull();
+        metrics.LastRecord!.Success.Should().BeTrue();
+        metrics.LastRecord.NodeCount.Should().Be(writer.LastBatch!.Nodes.Length);
+        metrics.LastRecord.EdgeCount.Should().Be(writer.LastBatch!.Edges.Length);
+    }
+
+    [Fact]
+    public async Task ProcessAsync_records_failure_when_writer_throws()
+    {
+        var snapshot = CreateSnapshot();
+        var transformer = new PolicyOverlayTransformer();
+        var writer = new CaptureWriter(shouldThrow: true);
+        var metrics = new CaptureMetrics();
+        var processor = new PolicyOverlayProcessor(
+            transformer,
+            writer,
+            metrics,
+            NullLogger<PolicyOverlayProcessor>.Instance);
+
+        var act = () => processor.ProcessAsync(snapshot, CancellationToken.None);
+
+        await act.Should().ThrowAsync<InvalidOperationException>();
+        metrics.LastRecord.Should().NotBeNull();
+        metrics.LastRecord!.Success.Should().BeFalse();
+    }
+
+    private static PolicyOverlaySnapshot CreateSnapshot()
+    {
+        return new PolicyOverlaySnapshot
+        {
+            Tenant = "tenant-alpha",
+            Source = "policy.engine.v1",
+            CollectedAt = DateTimeOffset.Parse("2025-10-30T12:07:00Z"),
+            EventOffset = 4200,
+            Policy = new PolicyVersionDetails
+            {
+                Source = "policy.engine.v1",
+                PolicyPackDigest = "sha256:fff666",
+                PolicyName = "Default Runtime Policy",
+                EffectiveFrom = DateTimeOffset.Parse("2025-10-28T00:00:00Z"),
+                ExpiresAt = DateTimeOffset.Parse("2026-01-01T00:00:00Z"),
+                ExplainHash = "sha256:explain001",
+                CollectedAt = DateTimeOffset.Parse("2025-10-28T00:00:05Z"),
+                EventOffset = 4100
+            },
+            Evaluations = new[]
+            {
+                new PolicyEvaluation
+                {
+                    ComponentPurl = "pkg:nuget/Newtonsoft.Json@13.0.3",
+                    ComponentSourceType = "inventory",
+                    FindingExplainHash = "sha256:explain001",
+                    ExplainHash = "sha256:explain001",
+                    PolicyRuleId = "rule:runtime/critical-dependency",
+                    Verdict = "fail",
+                    EvaluationTimestamp = DateTimeOffset.Parse("2025-10-30T12:07:00Z"),
+                    SbomDigest = "sha256:sbom111",
+                    Source = "policy.engine.v1",
+                    CollectedAt = DateTimeOffset.Parse("2025-10-30T12:07:00Z"),
+                    EventOffset = 4200
+                }
+            }
+        };
+    }
+
+    private sealed class CaptureWriter : IGraphDocumentWriter
+    {
+        private readonly bool _shouldThrow;
+
+        public CaptureWriter(bool shouldThrow = false)
+        {
+            _shouldThrow = shouldThrow;
+        }
+
+        public GraphBuildBatch? LastBatch { get; private set; }
+
+        public Task WriteAsync(GraphBuildBatch batch, CancellationToken cancellationToken)
+        {
+            LastBatch = batch;
+
+            if (_shouldThrow)
+            {
+                throw new InvalidOperationException("Simulated persistence failure");
+            }
+
+            return Task.CompletedTask;
+        }
+    }
+
+    private sealed class CaptureMetrics : IPolicyOverlayMetrics
+    {
+        public MetricRecord? LastRecord { get; private set; }
+
+        public void RecordBatch(string source, string tenant, int nodeCount, int edgeCount, TimeSpan duration, bool success)
+        {
+            LastRecord = new MetricRecord(source, tenant, nodeCount, edgeCount, duration, success);
+        }
+    }
+
+    private sealed record MetricRecord(
+        string Source,
+        string Tenant,
+        int NodeCount,
+        int EdgeCount,
+        TimeSpan Duration,
+        bool Success);
+}