536f6249a6
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Created CycloneDX and SPDX SBOM files for both reachable and unreachable images. - Added symbols.json detailing function entry and sink points in the WordPress code. - Included runtime traces for function calls in both reachable and unreachable scenarios. - Developed OpenVEX files indicating vulnerability status and justification for both cases. - Updated README for evaluator harness to guide integration with scanner output.
42 lines
1.1 KiB
C#
42 lines
1.1 KiB
C#
using System.Text.Json;
|
|
using FluentAssertions;
|
|
using StellaOps.Replay.Core;
|
|
using Xunit;
|
|
|
|
namespace StellaOps.Replay.Core.Tests;
|
|
|
|
public sealed class ReplayManifestExtensionsTests
|
|
{
|
|
[Fact]
|
|
public void AddsReachabilityEvidence()
|
|
{
|
|
var manifest = new ReplayManifest
|
|
{
|
|
Scan = new ReplayScanMetadata { Id = "scan-1" }
|
|
};
|
|
|
|
manifest.AddReachabilityGraph(new ReplayReachabilityGraphReference
|
|
{
|
|
Kind = "static",
|
|
Analyzer = "scanner/java",
|
|
CasUri = "cas://replay/graph",
|
|
Sha256 = "abc",
|
|
Version = "1.0"
|
|
});
|
|
|
|
manifest.AddReachabilityTrace(new ReplayReachabilityTraceReference
|
|
{
|
|
Source = "zastava",
|
|
CasUri = "cas://replay/trace",
|
|
Sha256 = "def"
|
|
});
|
|
|
|
manifest.Reachability.Should().NotBeNull();
|
|
manifest.Reachability!.Graphs.Should().HaveCount(1);
|
|
manifest.Reachability.RuntimeTraces.Should().HaveCount(1);
|
|
|
|
var json = JsonSerializer.Serialize(manifest);
|
|
json.Should().Contain("\"reachability\"");
|
|
}
|
|
}
|