28 lines
1.4 KiB
Python
28 lines
1.4 KiB
Python
"""Static safety regression tests; run with python3 -m unittest discover -s tests."""
|
|
from pathlib import Path
|
|
import subprocess
|
|
import unittest
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
class ScannerTests(unittest.TestCase):
|
|
@classmethod
|
|
def setUpClass(cls):
|
|
source = (ROOT / 'PHPGuard/SSHScanner.swift').read_text()
|
|
cls.script = source.split('static let script = #"""',1)[1].split('"""#',1)[0]
|
|
def test_posix_shell_syntax(self):
|
|
p = subprocess.run(['sh','-n'],input=self.script,text=True,capture_output=True)
|
|
self.assertEqual(p.returncode,0,p.stderr)
|
|
def test_required_sections(self):
|
|
for section in ('OS_RELEASE','PACKAGE_MANAGER','PACKAGES','PACKAGE_SOURCES','UPDATES','PACKAGE_ORIGINS','DOCKER','END'):
|
|
self.assertIn('===%s===' % section,self.script)
|
|
def test_supported_managers(self):
|
|
for manager in ('apt','dnf','yum','rpm','zypper','apk'):
|
|
self.assertIn(manager,self.script)
|
|
def test_no_package_mutation(self):
|
|
for command in ('apt upgrade','apt install','dnf update','yum update','apk upgrade','zypper update'):
|
|
self.assertNotIn(command,self.script)
|
|
def test_unknown_vendor_not_verified(self):
|
|
store=(ROOT/'PHPGuard/AuditStore.swift').read_text()
|
|
self.assertIn('No vendor advisory adapter for this distribution',store)
|
|
self.assertIn('vendor-verified:',store)
|
|
if __name__=='__main__': unittest.main()
|