Function TestExtractActionsFromLockFile

pkg/workflow/action_sha_checker_test.go:14–73

(t *testing.T)

)

func TestExtractActionsFromLockFile(t *testing.T) {
	// Create a temporary lock file with test content
	tmpDir := testutil.TempDir(t, "test-*")
	lockFile := filepath.Join(tmpDir, "test.lock.yml")

	lockContent := `# gh-aw-metadata: {"schema_version":"v1"}
name: Test Workflow
on: push
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd
      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
      - name: Run tests
        run: npm test
      - uses: github/codeql-action/upload-sarif@ab2e54f42aa112ff08704159b88a57517f6f0ebb
`

	if err := os.WriteFile(lockFile, []byte(lockContent), 0644); err != nil {
		t.Fatalf("Failed to create test lock file: %v", err)
	}

	// Extract actions
	actions, err := ExtractActionsFromLockFile(lockFile)
	if err != nil {
		t.Fatalf("ExtractActionsFromLockFile failed: %v", err)
	}

	// Verify we extracted the expected actions
	if len(actions) != 3 {
		t.Errorf("Expected 3 actions, got %d", len(actions))
	}

	// Check that we have the expected repositories
	expectedRepos := map[string]bool{
		"actions/checkout":                  false,
		"actions/setup-node":                false,
		"github/codeql-action/upload-sarif": false,
	}

	for _, action := range actions {
		if _, exists := expectedRepos[action.Repo]; exists {
			expectedRepos[action.Repo] = true
		}
	}

	for repo, found := range expectedRepos {
		if !found {
			t.Errorf("Expected to find action %s, but it was not extracted", repo)
		}
	}

	// Verify SHA format
	for _, action := range actions {
		if len(action.SHA) != 40 {
			t.Errorf("Expected SHA to be 40 characters, got %d for %s", len(action.SHA), action.Repo)
		}