Function TestRego_MatchesParameters

pkg/policies/engine/rego/rego_test.go:339–388

(t *testing.T)

}

func TestRego_MatchesParameters(t *testing.T) {
	regoContent, err := os.ReadFile("testfiles/matches_parameters.rego")
	require.NoError(t, err)

	r := NewEngine()
	policy := &engine.Policy{
		Name:   "matches-parameters-test",
		Source: regoContent,
	}

	t.Run("high expectation matches low severity", func(t *testing.T) {
		matches, err := r.MatchesParameters(context.TODO(), policy,
			map[string]string{"severity": "low"},
			map[string]string{"severity": "high"})
		require.NoError(t, err)
		assert.True(t, matches)
	})

	t.Run("medium expectation does not match high severity", func(t *testing.T) {
		matches, err := r.MatchesParameters(context.TODO(), policy,
			map[string]string{"severity": "high"},
			map[string]string{"severity": "medium"})
		require.NoError(t, err)
		assert.False(t, matches)
	})

	t.Run("critical severity matches critical expectation", func(t *testing.T) {
		matches, err := r.MatchesParameters(context.TODO(), policy,
			map[string]string{"severity": "critical"},
			map[string]string{"severity": "critical"})
		require.NoError(t, err)
		assert.True(t, matches)
	})

	t.Run("unknown severity parameter", func(t *testing.T) {
		matches, err := r.MatchesParameters(context.TODO(), policy,
			map[string]string{"severity": "unknown"},
			map[string]string{"severity": "medium"})
		require.NoError(t, err)
		assert.False(t, matches)
	})

	t.Run("empty parameters", func(t *testing.T) {
		matches, err := r.MatchesParameters(context.TODO(), policy,
			map[string]string{},
			map[string]string{})
		require.NoError(t, err)
		assert.False(t, matches)
	})
}

func TestRego_MatchesEvaluation(t *testing.T) {
	regoContent, err := os.ReadFile("testfiles/matches_evaluation.rego")