Function TestSetImageSignatureCheckFromError

internal/output/output_test.go:830–915

(t *testing.T)

}

func TestSetImageSignatureCheckFromError(t *testing.T) {
	noMatchingSignatures := cosign.ErrNoMatchingSignatures{}
	f := reflect.ValueOf(&noMatchingSignatures).Elem().Field(0)
	f = reflect.NewAt(f.Type(), unsafe.Pointer(f.UnsafeAddr())).Elem() //nolint:gosec // G115 - seems to be a false positive
	f.Set(reflect.ValueOf(errors.New("kaboom!")))

	cases := []struct {
		name           string
		err            error
		expectedPassed bool
		expectedResult *evaluator.Result
		policy         func(context.Context) policy.Policy
	}{
		{
			name:           "success",
			expectedPassed: true,
			expectedResult: &evaluator.Result{
				Message: "Pass",
				Metadata: map[string]interface{}{
					"code": "builtin.image.signature_check",
				},
			},
		},
		{
			name:           "generic failure",
			expectedPassed: false,
			err:            errors.New("kaboom!"),
			expectedResult: &evaluator.Result{
				Message: "Image signature check failed: kaboom!",
				Metadata: map[string]interface{}{
					"code": "builtin.image.signature_check",
				},
			},
		},
		{
			name:           "missing signatures failure",
			expectedPassed: false,
			err:            &noMatchingSignatures,
			expectedResult: &evaluator.Result{
				Message: fmt.Sprintf(missingSignatureMessage, &noMatchingSignatures),
				Metadata: map[string]interface{}{
					"code": "builtin.image.signature_check",
				},
			},
		},
		{
			name:           "missing signatures failure with keyless",
			expectedPassed: false,
			err:            &noMatchingSignatures,
			expectedResult: &evaluator.Result{
				Message: "Image signature check failed: kaboom!",
				Metadata: map[string]interface{}{
					"code": "builtin.image.signature_check",
				},
			},
			policy: func(ctx context.Context) policy.Policy {
				p, err := policy.NewPolicy(ctx, policy.Options{
					EffectiveTime: policy.Now,