Function TestGraphQLControlPlaneSecurityQuery

serv/control_plane_graphql_test.go:655–734

(t *testing.T)

}

func TestGraphQLControlPlaneSecurityQuery(t *testing.T) {
	svc := newControlPlaneGraphQLTestService(t, MCPConfig{
		AllowConfigUpdates:   true,
		AllowSchemaUpdates:   true,
		AllowWorkflowUpdates: true,
		AllowRawQueries:      true,
	}, createSQLiteDBFile(t, "app.sqlite3", true))
	svc.conf.Serv.Production = true
	svc.conf.Core.Production = true
	if err := svc.refreshSystemNanoDB(); err != nil {
		t.Fatalf("refresh system nanodb: %v", err)
	}

	res, err := svc.gj.GraphQL(sourceModeAdminTestContext(), `query {
		summary: gj_security(id: "summary") {
			id
			kind
			mode
			summary_json
		}
		findings: gj_security(
			where: {
				kind: { eq: "finding" }
				severity: { in: ["high", "critical"] }
			}
			order_by: { severity_rank: desc }
		) {
			id
			kind
			severity
			severity_rank
			title
			capability
			recommendation
			evidence_json
		}
	}`, nil, &core.RequestConfig{})
	if err != nil {
		t.Fatalf("security query error: %v", err)
	}
	if len(res.Errors) != 0 {
		t.Fatalf("security query returned errors: %+v", res.Errors)
	}

	var out struct {
		Summary struct {
			ID          string         `json:"id"`
			Kind        string         `json:"kind"`
			Mode        string         `json:"mode"`
			SummaryJSON map[string]any `json:"summary_json"`
		} `json:"summary"`
		Findings []struct {
			ID             string         `json:"id"`
			Kind           string         `json:"kind"`
			Severity       string         `json:"severity"`
			SeverityRank   int            `json:"severity_rank"`
			Title          string         `json:"title"`
			Capability     string         `json:"capability"`