Function TestSetAttestationSignatureCheckFromError

internal/output/output_test.go:917–1002

(t *testing.T)

}

func TestSetAttestationSignatureCheckFromError(t *testing.T) {
	noMatchingAttestations := cosign.ErrNoMatchingAttestations{}
	f := reflect.ValueOf(&noMatchingAttestations).Elem().Field(0)
	f = reflect.NewAt(f.Type(), unsafe.Pointer(f.UnsafeAddr())).Elem() //nolint:gosec // G115 - seems to be a false positive
	f.Set(reflect.ValueOf(errors.New("kaboom!")))

	cases := []struct {
		name           string
		err            error
		expectedPassed bool
		expectedResult *evaluator.Result
		policy         func(context.Context) policy.Policy
	}{
		{
			name:           "success",
			expectedPassed: true,
			expectedResult: &evaluator.Result{
				Message: "Pass",
				Metadata: map[string]interface{}{
					"code": "builtin.attestation.signature_check",
				},
			},
		},
		{
			name:           "generic failure",
			expectedPassed: false,
			err:            errors.New("kaboom!"),
			expectedResult: &evaluator.Result{
				Message: "Image attestation check failed: kaboom!",
				Metadata: map[string]interface{}{
					"code": "builtin.attestation.signature_check",
				},
			},
		},
		{
			name:           "missing attestations failure",
			expectedPassed: false,
			err:            &noMatchingAttestations,
			expectedResult: &evaluator.Result{
				Message: fmt.Sprintf(missingAttestationMessage, &noMatchingAttestations),
				Metadata: map[string]interface{}{
					"code": "builtin.attestation.signature_check",
				},
			},
		},
		{
			name:           "missing attestations failure with keyless",
			expectedPassed: false,
			err:            &noMatchingAttestations,
			expectedResult: &evaluator.Result{
				Message: "Image attestation check failed: kaboom!",
				Metadata: map[string]interface{}{
					"code": "builtin.attestation.signature_check",
				},
			},
			policy: func(ctx context.Context) policy.Policy {
				p, err := policy.NewPolicy(ctx, policy.Options{
					EffectiveTime: policy.Now,