Function TestSourceToInputSingleSource

policy/validate_test.go:26–884

(t *testing.T)

)

func TestSourceToInputSingleSource(t *testing.T) {
	tm := time.Date(2024, 1, 2, 3, 4, 5, 0, time.UTC)

	tests := []struct {
		name      string
		src       *gwpb.ResolveSourceMetaResponse
		platform  *ocispecs.Platform
		verifier  PolicyVerifierProvider
		expInput  Input
		expUnk    []string
		expErrMsg string
		assert    func(*testing.T, Input, []string, error)
	}{
		{
			name:      "nil-source-metadata",
			src:       nil,
			expErrMsg: "no source info in request",
		},
		{
			name: "invalid-source-identifier",
			src: &gwpb.ResolveSourceMetaResponse{
				Source: &pb.SourceOp{Identifier: "not-a-source"},
			},
			expErrMsg: "invalid source identifier: not-a-source",
		},
		{
			name: "http-source-with-checksum-and-auth",
			src: &gwpb.ResolveSourceMetaResponse{
				Source: &pb.SourceOp{
					Identifier: "https://example.com/foo.tar.gz?download=1",
					Attrs: map[string]string{
						pb.AttrHTTPAuthHeaderSecret: "my-secret",
					},
				},
				HTTP: &gwpb.ResolveSourceHTTPResponse{
					Checksum: "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
				},
			},
			expInput: Input{
				HTTP: &HTTP{
					URL:      "https://example.com/foo.tar.gz?download=1",
					Schema:   "https",
					Host:     "example.com",
					Path:     "/foo.tar.gz",
					Query:    map[string][]string{"download": {"1"}},
					HasAuth:  true,
					Checksum: "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
				},
			},
		},
		{
			name: "http-source-without-checksum",
			src: &gwpb.ResolveSourceMetaResponse{
				Source: &pb.SourceOp{
					Identifier: "http://example.com/archive.tgz",
				},
			},
			expInput: Input{