harn-vm 0.10.166

Async bytecode virtual machine for the Harn programming language
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

//! harn#9359: git commands that discard uncommitted working-tree changes carry
//! `git_discards_worktree`, so a policy can require approval for them. They
//! stay off the never-approvable floor.

use super::*;

fn scan(command: &str) -> JsonValue {
    command_risk_scan_json(&ctx(&["sh", "-c", command]), None)
}

fn discards(command: &str) -> bool {
    labels(&scan(command)).contains(&"git_discards_worktree".to_string())
}

#[test]
fn worktree_discards_are_labelled_from_the_parsed_argv() {
    for command in [
        "git checkout -- .",
        "git checkout -- src/main.rs",
        "git checkout HEAD~1 -- src/main.rs",
        "git checkout --ours -- conflicted.rs",
        "git checkout .",
        "git checkout ./src",
        "git checkout '*.rs'",
        "git checkout :/",
        "git checkout -f main",
        "git checkout --force main",
        "git checkout --pathspec-from-file=paths.txt",
        "git checkout HEAD src/main.rs",
        "git checkout origin/main Cargo.lock",
        "git checkout --theirs src/main.rs",
        "git checkout --forc main",
        "git switch --disc main",
        "git restore .",
        "git restore src/main.rs",
        "git restore --worktree .",
        "git restore --staged --worktree .",
        "git restore -SW .",
        "git restore --source=HEAD --worktree .",
        "git switch -f main",
        "git switch --discard-changes main",
        "git -C repo checkout -- .",
        "echo ok && git restore .",
        "env GIT_TRACE=1 git checkout -- .",
        "bash -c 'git restore .'",
    ] {
        assert!(
            discards(command),
            "expected git_discards_worktree: {command}"
        );
    }
}

#[test]
fn branch_switches_and_index_only_restores_are_unlabelled() {
    for command in [
        "git checkout main",
        "git checkout feature/foo",
        "git checkout -b feature/new",
        "git checkout -b feature/new origin/main",
        "git checkout -bfix",
        "git checkout --track origin/feature",
        "git checkout -m main",
        "git switch -cfix",
        "git checkout main --",
        "git switch main",
        "git switch -c feature/new",
        "git restore --staged src/main.rs",
        "git restore -S .",
        "git status",
        "git stash",
    ] {
        assert!(
            !discards(command),
            "unexpected git_discards_worktree: {command}"
        );
    }
}

#[test]
fn a_discard_needs_approval_but_is_not_on_the_floor() {
    for command in ["git checkout -- .", "git restore .", "git switch -f main"] {
        let result = scan(command);
        assert_eq!(
            result["recommended_action"], "require_approval",
            "{command}: {result}"
        );
        assert!(
            cat_reason(command, &[ROOT]).is_none(),
            "{command} must stay approvable"
        );
    }
}