Function TestComputeFirewallDiff_NewDomains

pkg/cli/audit_diff_test.go:14–56

(t *testing.T)

)

func TestComputeFirewallDiff_NewDomains(t *testing.T) {
	run1 := &FirewallAnalysis{
		TotalRequests:   5,
		AllowedRequests: 5,
		RequestsByDomain: map[string]DomainRequestStats{
			"api.github.com:443": {Allowed: 5, Blocked: 0},
		},
	}
	run2 := &FirewallAnalysis{
		TotalRequests:   20,
		AllowedRequests: 17,
		BlockedRequests: 3,
		RequestsByDomain: map[string]DomainRequestStats{
			"api.github.com:443":        {Allowed: 5, Blocked: 0},
			"registry.npmjs.org:443":    {Allowed: 15, Blocked: 0},
			"telemetry.example.com:443": {Allowed: 0, Blocked: 2},
		},
	}

	diff := computeFirewallDiff(100, 200, run1, run2)

	assert.Equal(t, int64(100), diff.Run1ID, "Run1ID should match")
	assert.Equal(t, int64(200), diff.Run2ID, "Run2ID should match")
	assert.Len(t, diff.NewDomains, 2, "Should have 2 new domains")
	assert.Empty(t, diff.RemovedDomains, "Should have no removed domains")
	assert.Empty(t, diff.StatusChanges, "Should have no status changes")

	// Check new domains are sorted
	assert.Equal(t, "registry.npmjs.org:443", diff.NewDomains[0].Domain, "First new domain should be registry.npmjs.org")
	assert.Equal(t, "new", diff.NewDomains[0].Status, "Status should be 'new'")
	assert.Equal(t, "allowed", diff.NewDomains[0].Run2Status, "Registry should be allowed")
	assert.False(t, diff.NewDomains[0].IsAnomaly, "Allowed new domain should not be anomaly")

	assert.Equal(t, "telemetry.example.com:443", diff.NewDomains[1].Domain, "Second new domain should be telemetry.example.com")
	assert.Equal(t, "denied", diff.NewDomains[1].Run2Status, "Telemetry should be denied")
	assert.True(t, diff.NewDomains[1].IsAnomaly, "New denied domain should be anomaly")
	assert.Equal(t, "new denied domain", diff.NewDomains[1].AnomalyNote, "Anomaly note should explain the issue")

	// Check summary
	assert.Equal(t, 2, diff.Summary.NewDomainCount, "Summary should show 2 new domains")
	assert.True(t, diff.Summary.HasAnomalies, "Should have anomalies")
	assert.Equal(t, 1, diff.Summary.AnomalyCount, "Should have 1 anomaly")
}

func TestComputeFirewallDiff_RemovedDomains(t *testing.T) {
	run1 := &FirewallAnalysis{