Function TestConcurrentVerifyStatement

pkg/policies/concurrency_test.go:36–80

TestConcurrentVerifyStatement runs VerifyStatement from multiple goroutines to exercise errgroup parallelism and catch race conditions. Run with: go test -race -count=1 -run TestConcurrentVerifyStatement ./pkg/policies/...

(t *testing.T)

// to exercise errgroup parallelism and catch race conditions.
// Run with: go test -race -count=1 -run TestConcurrentVerifyStatement ./pkg/policies/...
func TestConcurrentVerifyStatement(t *testing.T) {
	logger := zerolog.Nop()

	schema := &v12.CraftingSchema{
		Policies: &v12.Policies{
			Attestation: []*v12.PolicyAttachment{
				{Policy: &v12.PolicyAttachment_Ref{Ref: "file://testdata/workflow.yaml"}},
				{Policy: &v12.PolicyAttachment_Ref{Ref: "file://testdata/materials.yaml"}},
			},
		},
	}

	statement := loadStatementForTest(t, "testdata/statement.json")

	pv := NewPolicyVerifier(schema.GetPolicies(), nil, &logger)

	// Run multiple VerifyStatement calls concurrently
	const goroutines = 10
	var wg sync.WaitGroup
	errs := make([]error, goroutines)
	results := make([][]*v1.PolicyEvaluation, goroutines)

	for i := range goroutines {
		wg.Add(1)
		go func() {
			defer wg.Done()
			res, err := pv.VerifyStatement(context.Background(), statement)
			errs[i] = err
			results[i] = res
		}()
	}

	wg.Wait()

	// All calls should succeed
	for i := range goroutines {
		assert.NoError(t, errs[i], "goroutine %d failed", i)
	}

	// All calls should return the same number of evaluations
	for i := 1; i < goroutines; i++ {
		assert.Equal(t, len(results[0]), len(results[i]),
			"goroutine %d returned different number of evaluations", i)
	}
}

// TestConcurrentVerifyMaterial runs VerifyMaterial from multiple goroutines.
func TestConcurrentVerifyMaterial(t *testing.T) {