Function Test_ValidateImageCommandKeyless

cmd/validate/image_test.go:481–525

(t *testing.T)

}

func Test_ValidateImageCommandKeyless(t *testing.T) {
	called := false
	validateImageCmd := validateImageCmd(func(_ context.Context, _ app.SnapshotComponent, _ *app.SnapshotSpec, p policy.Policy, _ []evaluator.Evaluator, _ bool) (*output.Output, error) {
		assert.Equal(t, cosign.Identity{
			Issuer:        "my-certificate-oidc-issuer",
			Subject:       "my-certificate-identity",
			IssuerRegExp:  "my-certificate-oidc-issuer-regexp",
			SubjectRegExp: "my-certificate-identity-regexp",
		}, p.Identity())

		called = true

		return &output.Output{}, nil
	})
	cmd := setUpCobra(validateImageCmd)

	client := fake.FakeClient{}
	commonMockClient(&client)
	ctx := utils.WithFS(context.Background(), afero.NewMemMapFs())
	ctx = oci.WithClient(ctx, &client)
	cmd.SetContext(ctx)

	cmd.SetArgs(append(rootArgs, []string{
		"--image",
		"registry/image:tag",
		"--policy",
		"",
		"--certificate-identity",
		"my-certificate-identity",
		"--certificate-oidc-issuer",
		"my-certificate-oidc-issuer",
		"--certificate-identity-regexp",
		"my-certificate-identity-regexp",
		"--certificate-oidc-issuer-regexp",
		"my-certificate-oidc-issuer-regexp",
	}...))

	utils.SetTestRekorPublicKey(t)
	utils.SetTestFulcioRoots(t)
	utils.SetTestCTLogPublicKey(t)

	err := cmd.Execute()
	assert.NoError(t, err)
	assert.True(t, called)
}

func Test_ValidateImageCommandYAMLPolicyFile(t *testing.T) {
	cases := []struct {