cargo-allow 0.1.11

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86

use crate::artifact_schema_support::{
    assert_enum_equals, assert_required_fields, match_status_enum, parse_schema,
    required_schema_pointer,
};
use serde_json::Value;

#[test]
fn why_schema_locks_finding_outcome_and_candidates_contract() {
    let schema = parse_schema("why", include_str!("../../../docs/schemas/why.schema.json"));

    assert_required_fields(
        "why",
        &schema,
        &[
            "schema_version",
            "schema_id",
            "tool",
            "command",
            "claim_boundary",
            "scanner_limitations",
            "inventory",
            "finding",
            "outcome",
            "candidate_entries",
            "next",
        ],
    );

    assert_eq!(
        schema
            .pointer("/properties/schema_id/const")
            .and_then(Value::as_str),
        Some("cargo-allow.why.v1"),
        "why schema_id const"
    );
    assert_eq!(
        schema
            .pointer("/properties/command/const")
            .and_then(Value::as_str),
        Some("why"),
        "why command const"
    );
    assert_eq!(
        schema
            .pointer("/properties/finding/$ref")
            .and_then(Value::as_str),
        Some("#/$defs/current_finding"),
        "why finding should reuse current_finding"
    );
    assert_eq!(
        schema
            .pointer("/properties/outcome/$ref")
            .and_then(Value::as_str),
        Some("#/$defs/match_outcome"),
        "why outcome should reuse match_outcome"
    );
    assert_enum_equals(
        "why match status",
        &schema,
        "/$defs/match_status/enum",
        &match_status_enum(),
    );

    let candidate = required_schema_pointer("why", &schema, "/$defs/candidate_entry");
    assert_required_fields(
        "why candidate_entry",
        candidate,
        &[
            "id",
            "kind",
            "family",
            "path",
            "glob",
            "selector_glob",
            "mismatch_reasons",
        ],
    );
    let next = required_schema_pointer("why", &schema, "/properties/next");
    assert_required_fields(
        "why next",
        next,
        &["suggested_actions", "proof_commands", "proof_plans"],
    );
    let proof_plan = required_schema_pointer("why", &schema, "/$defs/proof_plan");
    assert_required_fields("why proof_plan", proof_plan, &["program", "args"]);
}