5a480a3c2a
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
Findings Ledger CI / build-test (push) Has been cancelled
Findings Ledger CI / migration-validation (push) Has been cancelled
Findings Ledger CI / generate-manifest (push) Has been cancelled
Lighthouse CI / Lighthouse Audit (push) Has been cancelled
Lighthouse CI / Axe Accessibility Audit (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Reachability Corpus Validation / validate-corpus (push) Has been cancelled
Reachability Corpus Validation / validate-ground-truths (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Signals CI & Image / signals-ci (push) Has been cancelled
Signals Reachability Scoring & Events / reachability-smoke (push) Has been cancelled
Reachability Corpus Validation / determinism-check (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
Signals Reachability Scoring & Events / sign-and-upload (push) Has been cancelled
- Introduced `all-edge-reasons.json` to test edge resolution reasons in .NET. - Added `all-visibility-levels.json` to validate method visibility levels in .NET. - Created `dotnet-aspnetcore-minimal.json` for a minimal ASP.NET Core application. - Included `go-gin-api.json` for a Go Gin API application structure. - Added `java-spring-boot.json` for the Spring PetClinic application in Java. - Introduced `legacy-no-schema.json` for legacy application structure without schema. - Created `node-express-api.json` for an Express.js API application structure.
66 lines
2.4 KiB
C#
66 lines
2.4 KiB
C#
using System.Security.Cryptography;
|
|
using System.Text;
|
|
using FluentAssertions;
|
|
using StellaOps.AirGap.Importer.Reconciliation;
|
|
|
|
namespace StellaOps.AirGap.Importer.Tests.Reconciliation;
|
|
|
|
public sealed class EvidenceDirectoryDiscoveryTests
|
|
{
|
|
[Fact]
|
|
public void Discover_ReturnsDeterministicRelativePathsAndHashes()
|
|
{
|
|
var root = Path.Combine(Path.GetTempPath(), "stellaops-evidence-" + Guid.NewGuid().ToString("N"));
|
|
Directory.CreateDirectory(root);
|
|
|
|
try
|
|
{
|
|
WriteUtf8(Path.Combine(root, "sboms", "a.cdx.json"), "{\"bom\":1}");
|
|
WriteUtf8(Path.Combine(root, "attestations", "z.intoto.jsonl.dsig"), "dsse");
|
|
WriteUtf8(Path.Combine(root, "vex", "v.openvex.json"), "{\"vex\":true}");
|
|
|
|
var discovered = EvidenceDirectoryDiscovery.Discover(root);
|
|
discovered.Should().HaveCount(3);
|
|
|
|
discovered.Select(d => d.RelativePath).Should().Equal(
|
|
"attestations/z.intoto.jsonl.dsig",
|
|
"sboms/a.cdx.json",
|
|
"vex/v.openvex.json");
|
|
|
|
discovered[0].Kind.Should().Be(EvidenceFileKind.Attestation);
|
|
discovered[1].Kind.Should().Be(EvidenceFileKind.Sbom);
|
|
discovered[2].Kind.Should().Be(EvidenceFileKind.Vex);
|
|
|
|
discovered[0].ContentSha256.Should().Be(HashUtf8("dsse"));
|
|
discovered[1].ContentSha256.Should().Be(HashUtf8("{\"bom\":1}"));
|
|
discovered[2].ContentSha256.Should().Be(HashUtf8("{\"vex\":true}"));
|
|
}
|
|
finally
|
|
{
|
|
Directory.Delete(root, recursive: true);
|
|
}
|
|
}
|
|
|
|
[Fact]
|
|
public void Discover_WhenDirectoryMissing_Throws()
|
|
{
|
|
var missing = Path.Combine(Path.GetTempPath(), "stellaops-missing-" + Guid.NewGuid().ToString("N"));
|
|
Action act = () => EvidenceDirectoryDiscovery.Discover(missing);
|
|
act.Should().Throw<DirectoryNotFoundException>();
|
|
}
|
|
|
|
private static void WriteUtf8(string path, string content)
|
|
{
|
|
Directory.CreateDirectory(Path.GetDirectoryName(path)!);
|
|
File.WriteAllText(path, content, new UTF8Encoding(encoderShouldEmitUTF8Identifier: false));
|
|
}
|
|
|
|
private static string HashUtf8(string content)
|
|
{
|
|
using var sha256 = SHA256.Create();
|
|
var bytes = Encoding.UTF8.GetBytes(content);
|
|
var hash = sha256.ComputeHash(bytes);
|
|
return "sha256:" + Convert.ToHexString(hash).ToLowerInvariant();
|
|
}
|
|
}
|