cargo-allow 0.1.9

Source-tree exception ledger and policy scanner for Rust repositories.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89

#[test]
fn readme_preserves_source_tree_boundary() {
    let readme = include_str!("../../../README.md");

    for required_text in [
        "`cargo-allow` is a source-tree exception ledger for Rust repositories.",
        "`cargo-allow` scans repository files directly.",
        "the primary UX is the standalone `cargo-allow` binary",
        "does **not** require a successful build",
        "does **not** invoke\nCargo metadata, Cargo commands, rustc, Clippy, build scripts, proc macros",
        "`Cargo.toml` and `Cargo.lock` are files in the scanned source tree, not required\nbuild metadata.",
        "No new unreceipted findings were found in scanned source-tree inventory.",
        "They must not claim that no unsafe, panic, lint suppression, or other exception\nexists outside the syntax-visible surface that was scanned.",
    ] {
        assert!(
            readme.contains(required_text),
            "README should preserve source-tree boundary text: {required_text}"
        );
    }
}

#[test]
fn readmes_preserve_green_checkmark_logo() {
    let root_readme = include_str!("../../../README.md");
    let crate_readme = include_str!("../README.md");
    let logo = include_str!("../../../docs/assets/cargo-allow-checkmark.svg");

    assert!(
        root_readme.contains("docs/assets/cargo-allow-checkmark.svg"),
        "root README should show the local cargo-allow logo asset"
    );
    assert!(
        crate_readme.contains(
            "https://raw.githubusercontent.com/EffortlessMetrics/cargo-allow/main/docs/assets/cargo-allow-checkmark.svg"
        ),
        "crate README should use an absolute logo URL for published crate rendering"
    );
    for readme in [root_readme, crate_readme] {
        assert!(
            readme.contains("alt=\"cargo-allow green checkmark logo\""),
            "README logo image should keep descriptive alt text"
        );
        assert!(
            readme.contains("width=\"96\"") && readme.contains("height=\"96\""),
            "README logo image should keep stable dimensions"
        );
    }
    assert!(
        logo.contains("<title id=\"title\">cargo-allow green checkmark logo</title>")
            && logo.contains("fill=\"#1f9d55\""),
        "logo asset should remain a green checkmark SVG"
    );
}

#[test]
fn claim_boundary_docs_preserve_source_package_boundary() {
    let claim_boundaries = include_str!("../../../docs/claim-boundaries.md");

    for required_text in [
        "When cargo-allow reports `source_package`, that value is optional context read\nfrom source-tree `Cargo.toml` text",
        "Invalid, unreadable, or non-UTF8 manifests are ignored for that context so the\nsource scan can continue",
        "the value is not Cargo metadata or build-membership\nproof.",
    ] {
        assert!(
            claim_boundaries.contains(required_text),
            "claim boundary docs should preserve source_package boundary text: {required_text}"
        );
    }
}

#[test]
fn ci_docs_preserve_source_tree_scan_boundary() {
    let ci = include_str!("../../../docs/ci.md");

    for required_text in [
        "The examples install and run the standalone `cargo-allow` binary before\nscanning.",
        "`cargo allow ...` remains optional Cargo external subcommand compatibility.",
        "The scan itself is source-tree only.",
        "It does not invoke Cargo metadata, Cargo\ncommands, rustc, Clippy, build scripts, proc macros, external evidence tools,\nor repository code.",
        "the policy\nscan should remain usable even when the checked-out repository does not build.",
        "This is reviewer guidance for source-syntax and policy-ledger posture.",
        "It does\nnot claim macro expansion, type information, build awareness, proof adequacy, or\ncoverage.",
    ] {
        assert!(
            ci.contains(required_text),
            "CI docs should preserve source-tree scan boundary text: {required_text}"
        );
    }
}