Function TestComputePolicyHash_NoPolicy

pkg/workflow/cache_integrity_test.go:15–31

TestComputePolicyHash_NoPolicy verifies that workflows without a guard policy use the "nopolicy" sentinel hash.

(t *testing.T)

// TestComputePolicyHash_NoPolicy verifies that workflows without a guard policy
// use the "nopolicy" sentinel hash.
func TestComputePolicyHash_NoPolicy(t *testing.T) {
	tests := []struct {
		name         string
		githubConfig *GitHubToolConfig
	}{
		{name: "nil config", githubConfig: nil},
		{name: "empty config", githubConfig: &GitHubToolConfig{}},
		{name: "config without min-integrity", githubConfig: &GitHubToolConfig{AllowedRepos: "all"}},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			hash := computePolicyHash(tt.githubConfig)
			assert.Equal(t, noPolicySentinel, hash, "Should return nopolicy sentinel when no guard policy is configured")
		})
	}
}

// TestComputePolicyHash_Deterministic verifies that the same policy always produces the same hash.
func TestComputePolicyHash_Deterministic(t *testing.T) {