Function test_sarif_generic_descriptions

test/cli/sarif_test.py:496–524

Test that ALL rule descriptions are empty for GitHub integration.

()

def test_sarif_generic_descriptions():
    """Test that ALL rule descriptions are empty for GitHub integration."""
    sarif = run_sarif_check(TEST_CODE)

    run = sarif["runs"][0]
    driver = run["tool"]["driver"]
    rules = driver["rules"]

    assert len(rules) > 0, "Should have at least one rule"

    # Verify that ALL rule descriptions are empty so GitHub uses instance-specific messages
    for rule in rules:
        rule_id = rule["id"]

        # All rules must have these fields
        assert "name" in rule, f"Rule {rule_id} missing 'name'"
        assert "shortDescription" in rule, f"Rule {rule_id} missing 'shortDescription'"
        assert "fullDescription" in rule, f"Rule {rule_id} missing 'fullDescription'"

        # The key test: ALL descriptions should be empty
        assert (
            rule["name"] == ""
        ), f"Rule {rule_id} name should be empty, got: {rule['name']}"
        assert (
            rule["shortDescription"]["text"] == ""
        ), f"Rule {rule_id} shortDescription should be empty, got: {rule['shortDescription']['text']}"
        assert (
            rule["fullDescription"]["text"] == ""
        ), f"Rule {rule_id} fullDescription should be empty, got: {rule['fullDescription']['text']}"


def test_sarif_security_rules_classification():