Function TestValidateAttestationOutputPath

cmd/validate/image_test.go:1837–1912

(t *testing.T)

}

func TestValidateAttestationOutputPath(t *testing.T) {
	// Get current working directory for tests
	cwd, err := os.Getwd()
	require.NoError(t, err)

	tests := []struct {
		name        string
		path        string
		expected    string
		shouldError bool
		errorMsg    string
	}{
		{
			name:     "empty path defaults to vsa- prefix",
			path:     "",
			expected: "vsa-",
		},
		{
			name:     "/tmp path is allowed",
			path:     "/tmp/vsa-test",
			expected: "/tmp/vsa-test",
		},
		{
			name:     "/tmp itself is allowed",
			path:     "/tmp",
			expected: "/tmp",
		},
		{
			name:     "relative path under cwd is allowed",
			path:     "./vsa-output",
			expected: filepath.Join(cwd, "vsa-output"),
		},
		{
			name:     "subdirectory under cwd is allowed",
			path:     "vsa-output",
			expected: filepath.Join(cwd, "vsa-output"),
		},
		{
			name:        "/etc path is rejected",
			path:        "/etc/vsa",
			shouldError: true,
			errorMsg:    "attestation output directory must be under /tmp or current working directory",
		},
		{
			name:        "/var path is rejected",
			path:        "/var/vsa",
			shouldError: true,
			errorMsg:    "attestation output directory must be under /tmp or current working directory",
		},
		{
			name:        "root path is rejected",
			path:        "/",
			shouldError: true,
			errorMsg:    "attestation output directory must be under /tmp or current working directory",
		},
		{
			name:     "path with .. under cwd is allowed after cleaning",
			path:     "./foo/../vsa",