up

src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/ScansEndpointsTests.cs

@@ -72,6 +72,44 @@ public sealed partial class ScansEndpointsTests
         Assert.True(coordinator.LastToken.CanBeCanceled);
     }
 
+    [Fact]
+    public async Task SubmitScanAddsDeterminismPinsToMetadata()
+    {
+        using var secrets = new TestSurfaceSecretsScope();
+        RecordingCoordinator coordinator = null!;
+
+        using var factory = new ScannerApplicationFactory(configuration =>
+        {
+            configuration["scanner:determinism:feedSnapshotId"] = "feed-2025-11-26";
+            configuration["scanner:determinism:policySnapshotId"] = "rev-42";
+        }, configureServices: services =>
+        {
+            services.AddSingleton<IScanCoordinator>(sp =>
+            {
+                coordinator = new RecordingCoordinator(
+                    sp.GetRequiredService<IHttpContextAccessor>(),
+                    sp.GetRequiredService<TimeProvider>(),
+                    sp.GetRequiredService<IScanProgressPublisher>());
+                return coordinator;
+            });
+        });
+
+        using var client = factory.CreateClient();
+        var request = new ScanSubmitRequest
+        {
+            Image = new ScanImageDescriptor { Reference = "example.com/demo:1.0" }
+        };
+
+        var response = await client.PostAsJsonAsync("/api/v1/scans", request);
+
+        Assert.Equal(HttpStatusCode.Accepted, response.StatusCode);
+        Assert.NotNull(coordinator?.LastSubmission);
+        var metadata = coordinator!.LastSubmission!.Metadata;
+
+        Assert.Equal("feed-2025-11-26", metadata["determinism.feed"]);
+        Assert.Equal("rev-42", metadata["determinism.policy"]);
+    }
+
     [Fact]
     public async Task GetEntryTraceReturnsStoredResult()
     {
@@ -154,11 +192,13 @@ public sealed partial class ScansEndpointsTests
 
         public CancellationToken LastToken { get; private set; }
         public bool TokenMatched { get; private set; }
+        public ScanSubmission? LastSubmission { get; private set; }
 
         public async ValueTask<ScanSubmissionResult> SubmitAsync(ScanSubmission submission, CancellationToken cancellationToken)
         {
             LastToken = cancellationToken;
             TokenMatched = _accessor.HttpContext?.RequestAborted.Equals(cancellationToken) ?? false;
+            LastSubmission = submission;
             return await _inner.SubmitAsync(submission, cancellationToken);
         }