cargo-allow 0.1.11

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

use crate::artifact_contract_support::{assert_inventory_contract, parse_json_artifact};
use crate::diff;
use serde_json::Value;

#[test]
fn core_json_artifact_renderers_emit_parseable_v1_contracts() {
    let report_json = allow_report::render_json_with_context(
        "audit",
        &[],
        &[],
        false,
        allow_report::ReportContext::source_syntax(
            "filesystem_fallback",
            Some("fixtures/source-snapshot"),
            Some(7),
            None,
        ),
    );
    let report = parse_json_artifact(
        "report",
        &report_json,
        allow_report::REPORT_SCHEMA_ID,
        "audit",
    );
    assert_inventory_contract(
        "report",
        &report,
        "filesystem_fallback",
        Some("fixtures/source-snapshot"),
        Some(7),
    );

    let receipt_json = allow_report::render_receipt_with_context(
        "check",
        &[],
        false,
        allow_report::ReportContext::source_syntax(
            "git_tracked",
            Some("H:/Code/Rust/cargo-allow"),
            Some(42),
            None,
        ),
    );
    let receipt = parse_json_artifact(
        "receipt",
        &receipt_json,
        allow_report::RECEIPT_SCHEMA_ID,
        "check",
    );
    assert_inventory_contract(
        "receipt",
        &receipt,
        "git_tracked",
        Some("H:/Code/Rust/cargo-allow"),
        Some(42),
    );

    let diff_base_json = allow_report::render_json_with_context(
        "diff",
        &[],
        &[],
        false,
        allow_report::ReportContext::source_syntax(
            "git_tracked",
            Some("H:/Code/Rust/cargo-allow"),
            Some(8),
            None,
        ),
    );
    let cfg = allow_core::AllowConfig::empty();
    let ledger = diff::DiffLedgerContext::new(&cfg, &cfg, &[], &[]);
    let diff_json = diff::render_diff_json_with_posture(diff_base_json, 0, &[], &ledger);
    let diff = parse_json_artifact("diff", &diff_json, allow_report::REPORT_SCHEMA_ID, "diff");
    assert_eq!(
        diff.pointer("/diff/net_posture").and_then(Value::as_str),
        Some("unchanged"),
        "diff net posture"
    );
}

#[test]
fn receipt_result_classes_preserve_status_and_error_diagnostic() {
    let failed_json = allow_report::render_receipt_with_context(
        "check",
        &[],
        true,
        allow_report::ReportContext::source_syntax("git_tracked", None, None, None),
    );
    let failed = parse_json_artifact(
        "receipt_failed",
        &failed_json,
        allow_report::RECEIPT_SCHEMA_ID,
        "check",
    );
    assert_eq!(failed.get("status").and_then(Value::as_str), Some("failed"));
    assert_eq!(failed.get("failed").and_then(Value::as_bool), Some(true));

    let error_json = allow_report::render_error_receipt(
        "invalid policy field: \"mode\"",
        allow_report::ReportContext::source_syntax("filesystem_fallback", None, None, None),
    );
    let error = parse_json_artifact(
        "receipt_error",
        &error_json,
        allow_report::RECEIPT_SCHEMA_ID,
        "check",
    );
    assert_eq!(error.get("status").and_then(Value::as_str), Some("error"));
    assert_eq!(error.get("failed").and_then(Value::as_bool), Some(true));
    assert_eq!(
        error.get("diagnostic").and_then(Value::as_str),
        Some("invalid policy field: \"mode\"")
    );
}