Function TestValidateSandboxConfig

pkg/workflow/sandbox_test.go:14–114

(t *testing.T)

)

func TestValidateSandboxConfig(t *testing.T) {
	tests := []struct {
		name        string
		data        *WorkflowData
		expectError bool
		errorMsg    string
	}{
		{
			name: "nil workflow data",
			data: nil,
		},
		{
			name: "nil sandbox config",
			data: &WorkflowData{},
		},
		{
			name: "valid AWF sandbox config",
			data: &WorkflowData{
				SandboxConfig: &SandboxConfig{
					Agent: &AgentSandboxConfig{
						Type: SandboxTypeAWF,
					},
				},
				Tools: map[string]any{
					"github": map[string]any{
						"mode": "remote",
					},
				},
			},
		},
		{
			name: "sandbox.agent false with valid justification",
			data: &WorkflowData{
				Features: map[string]any{
					"dangerously-disable-sandbox-agent": "controlled environment with no internet access",
				},
				SandboxConfig: &SandboxConfig{
					Agent: &AgentSandboxConfig{
						Disabled: true,
					},
				},
			},
		},
		{
			name: "sandbox.agent false without justification",
			data: &WorkflowData{
				SandboxConfig: &SandboxConfig{
					Agent: &AgentSandboxConfig{
						Disabled: true,
					},
				},
			},
			expectError: true,
			errorMsg:    "dangerously-disable-sandbox-agent",
		},
		{
			name: "sandbox.agent false with short justification",
			data: &WorkflowData{