Function TestPermissionsLevelEnumValidation

pkg/workflow/permissions_enum_test.go:136–239

TestPermissionsLevelEnumValidation tests individual permission level values

(t *testing.T)

// TestPermissionsLevelEnumValidation tests individual permission level values
func TestPermissionsLevelEnumValidation(t *testing.T) {
	tests := []struct {
		name        string
		permissions string
		scope       string
		level       string
		expectValid bool
	}{
		// Valid permission levels
		{
			name:        "contents: read",
			permissions: "permissions:\n  contents: read",
			scope:       "contents",
			level:       "read",
			expectValid: true,
		},
		{
			name:        "contents: write",
			permissions: "permissions:\n  contents: write",
			scope:       "contents",
			level:       "write",
			expectValid: true,
		},
		{
			name:        "contents: none",
			permissions: "permissions:\n  contents: none",
			scope:       "contents",
			level:       "none",
			expectValid: true,
		},
		{
			name:        "issues: read",
			permissions: "permissions:\n  issues: read",
			scope:       "issues",
			level:       "read",
			expectValid: true,
		},
		{
			name:        "issues: write",
			permissions: "permissions:\n  issues: write",
			scope:       "issues",
			level:       "write",
			expectValid: true,
		},
		// Invalid permission levels - case sensitivity
		// Note: YAML parser will parse these, but GitHub Actions will reject them
		{
			name:        "contents: READ (uppercase)",
			permissions: "permissions:\n  contents: READ",
			scope:       "contents",
			level:       "READ",
			expectValid: false,
		},
		{
			name:        "contents: Write (mixed case)",
			permissions: "permissions:\n  contents: Write",
			scope:       "contents",
			level:       "Write",