Function TestParseAndDisplayRunnerGuardOutput

pkg/cli/runner_guard_test.go:12–288

(t *testing.T)

)

func TestParseAndDisplayRunnerGuardOutput(t *testing.T) {
	tests := []struct {
		name           string
		stdout         string
		verbose        bool
		expectedOutput []string
		expectError    bool
		expectedCount  int
	}{
		{
			name: "single high severity finding",
			stdout: `{
  "findings": [
    {
      "rule_id": "RGS-001",
      "name": "Unsafe Runner Usage",
      "severity": "high",
      "description": "Runner pulls from untrusted source",
      "remediation": "Pin runner image digest",
      "file": ".github/workflows/test.lock.yml",
      "line": 15
    }
  ]
}`,
			expectedOutput: []string{
				".github/workflows/test.lock.yml:15:1",
				"error",
				"RGS-001",
				"Unsafe Runner Usage",
				"Runner pulls from untrusted source",
			},
			expectError:   false,
			expectedCount: 1,
		},
		{
			name: "critical severity maps to error type",
			stdout: `{
  "findings": [
    {
      "rule_id": "RGS-002",
      "name": "Critical Finding",
      "severity": "critical",
      "description": "Dangerous configuration",
      "file": ".github/workflows/test.lock.yml",
      "line": 10
    }
  ]
}`,
			expectedOutput: []string{
				"error",
				"RGS-002",
				"Critical Finding",
			},
			expectError:   false,
			expectedCount: 1,
		},
		{
			name: "note severity maps to info type",