Function Test_FailureImageAccessibility

cmd/validate/image_test.go:980–1049

(t *testing.T)

}

func Test_FailureImageAccessibility(t *testing.T) {
	validate := func(_ context.Context, component app.SnapshotComponent, _ *app.SnapshotSpec, _ policy.Policy, _ []evaluator.Evaluator, _ bool) (*output.Output, error) {
		return &output.Output{
			ImageSignatureCheck: output.VerificationStatus{
				Passed: false,
				Result: &evaluator.Result{Message: "skipped due to inaccessible image ref"},
			},
			ImageAccessibleCheck: output.VerificationStatus{
				Passed: false,
				Result: &evaluator.Result{Message: "image ref not accessible. HEAD registry/image:tag: unexpected status code 404 Not Found (HEAD responses have no body, use GET for details)"},
			},
			AttestationSignatureCheck: output.VerificationStatus{
				Passed: false,
				Result: &evaluator.Result{Message: "skipped due to inaccessible image ref"},
			},
			ImageURL: component.ContainerImage,
		}, nil
	}

	validateImageCmd := validateImageCmd(validate)
	cmd := setUpCobra(validateImageCmd)
	cmd.SilenceUsage = true // The root command is set to prevent usage printouts when running the CLI directly. This setup is temporary workaround.

	client := fake.FakeClient{}
	commonMockClient(&client)
	ctx := utils.WithFS(context.Background(), afero.NewMemMapFs())
	ctx = oci.WithClient(ctx, &client)
	cmd.SetContext(ctx)

	effectiveTimeTest := time.Now().UTC().Format(time.RFC3339Nano)

	cmd.SetArgs(append(rootArgs, []string{
		"--image",
		"registry/image:tag",
		"--policy",
		fmt.Sprintf(`{"publicKey": %s}`, utils.TestPublicKeyJSON),
		"--effective-time",
		effectiveTimeTest,
	}...))

	var out bytes.Buffer
	cmd.SetOut(&out)

	utils.SetTestRekorPublicKey(t)

	err := cmd.Execute()
	assert.Error(t, err)
	assert.JSONEq(t, fmt.Sprintf(`{
		"success": false,
		"ec-version": "development",
		"effective-time": %q,
		"key": %s,
		"components": [
		  {
			"name": "Unnamed",
			"containerImage": "registry/image:tag",
			"source": {},
			"violations": [