Function TestPermissionsParser_ToPermissions

pkg/workflow/permissions_parser_test.go:592–705

(t *testing.T)

}

func TestPermissionsParser_ToPermissions(t *testing.T) {
	tests := []struct {
		name        string
		input       any
		wantYAML    string
		contains    []string
		notContains []string
	}{
		{
			name:     "shorthand read-all",
			input:    "read-all",
			wantYAML: "permissions: read-all",
		},
		{
			name:     "shorthand write-all",
			input:    "write-all",
			wantYAML: "permissions: write-all",
		},
		{
			name: "all: read without overrides",
			input: map[string]any{
				"all": "read",
			},
			contains: []string{
				"permissions:",
				"      actions: read",
				"      contents: read",
				"      issues: read",
			},
			notContains: []string{
				"      id-token: read", // id-token doesn't support read
			},
		},
		{
			name: "all: read with contents: write override",
			input: map[string]any{
				"all":      "read",
				"contents": "write",
			},
			contains: []string{
				"permissions:",
				"      actions: read",
				"      contents: write", // Override
				"      issues: read",
			},
			notContains: []string{
				"      contents: read",
			},
		},
		{
			name: "all: read with id-token: write override",
			input: map[string]any{
				"all":      "read",
				"id-token": "write",
			},
			contains: []string{
				"permissions:",
				"      actions: read",