cargo-allow 0.1.11

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

use std::collections::BTreeSet;
use std::fs;
use std::path::{Path, PathBuf};

use allow_core::{AllowConfig, FindingKind, MatchStatus};

use super::{list_rows, list_rows_with_source_tree_files};
use crate::list::test_support::{test_entry, test_finding, test_outcome};

fn list_fixture_dir() -> PathBuf {
    let mut path = std::env::temp_dir();
    path.push(format!(
        "cargo-allow-list-rows-tests-{}",
        std::process::id()
    ));
    let _ = fs::remove_dir_all(&path);
    path
}

#[test]
fn entry_reference_diagnostics_for_source_tree_call_presence_observer() {
    let root = list_fixture_dir();
    fs::create_dir_all(root.join("docs"))
        .unwrap_or_else(|err| std::panic::panic_any(format!("fixture docs dir: {err}")));
    fs::write(root.join("docs/untracked.md"), "evidence")
        .unwrap_or_else(|err| std::panic::panic_any(format!("fixture evidence file: {err}")));
    let mut cfg = AllowConfig::empty();
    let mut entry = test_entry("allow-diagnostics", FindingKind::Unsafe);
    entry.evidence = vec!["doc:docs/untracked.md".to_string()];
    cfg.allow.push(entry);
    let source_tree_files = BTreeSet::new();

    let rows = list_rows_with_source_tree_files(&root, &cfg, &[], &[], Some(&source_tree_files));

    match rows.as_slice() {
        [row] => {
            assert_eq!(row.id, "allow-diagnostics");
            assert_eq!(row.broken_evidence_references, 1);
        }
        other => assert_eq!(other.len(), 1),
    }

    let _ = fs::remove_dir_all(root);
}

#[test]
fn list_entry_status_call_presence_observer() {
    let mut cfg = AllowConfig::empty();
    let entry = test_entry("allow-new", FindingKind::Panic);
    cfg.allow.push(entry);
    let outcomes = vec![test_outcome(
        MatchStatus::New,
        Some("allow-new"),
        None,
        "new finding",
    )];

    let rows = list_rows(Path::new("."), &cfg, &[], &outcomes);

    match rows.as_slice() {
        [row] => assert_eq!(row.status, MatchStatus::New),
        other => assert_eq!(other.len(), 1),
    }
}

#[test]
fn list_and_worklist_share_expired_status_for_matched_entry() {
    let mut cfg = AllowConfig::empty();
    let mut entry = test_entry("allow-expired", FindingKind::Panic);
    entry.lifecycle.expires = Some("2020-01-01".to_string());
    cfg.allow.push(entry);
    let outcomes = vec![test_outcome(
        MatchStatus::Matched,
        Some("allow-expired"),
        Some(0),
        "allow-expired matched",
    )];
    let findings = vec![test_finding(
        FindingKind::Panic,
        Some("unwrap"),
        "tracked.file",
        "unwrap",
    )];

    let rows = list_rows(Path::new("."), &cfg, &findings, &outcomes);
    match rows.as_slice() {
        [row] => assert_eq!(row.status, MatchStatus::Expired),
        rows => assert_eq!(rows.len(), 1),
    }
}