keyhog 0.5.73

GPU-accelerated secret scanner for code, Git history, cloud, containers, browser assets, and live credential verification
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85

#![cfg(feature = "github")]

use clap::Parser;
use keyhog::args::ScanArgs;
use keyhog::testing::{CliTestApi as _, API};

#[test]
fn collaboration_target_requires_an_explicit_surface() {
    let args = ScanArgs::try_parse_from([
        "scan",
        "--github-collaboration",
        "acme/rocket",
        "--github-token",
        "test-token",
    ])
    .expect("flags parse before cross-field validation");
    let error = match API.build_sources(&args, vec![], None) {
        Ok(_) => panic!("surface-free collaboration source must be rejected"),
        Err(error) => error.to_string(),
    };
    assert!(error.contains("requires an explicit surface"), "{error}");
}

#[test]
fn independently_selected_surfaces_build_one_collaboration_source() {
    for flag in [
        "--github-issues",
        "--github-pull-requests",
        "--github-discussions",
        "--github-wiki",
        "--github-gists",
    ] {
        let args = ScanArgs::try_parse_from([
            "scan",
            "--github-collaboration",
            "acme/rocket",
            flag,
            "--github-token",
            "test-token",
        ])
        .unwrap_or_else(|error| panic!("{flag} must parse: {error}"));
        let sources = API
            .build_sources(&args, vec![], None)
            .unwrap_or_else(|error| panic!("{flag} must build: {error}"));
        assert_eq!(sources.len(), 1, "{flag}");
        assert_eq!(sources[0].name(), "github-collaboration", "{flag}");
    }
}

/// One concise flag must select the complete collaboration workflow without changing source count.
#[test]
fn all_surface_shorthand_builds_one_complete_collaboration_source() {
    let args = ScanArgs::try_parse_from([
        "scan",
        "--github-collaboration",
        "acme/rocket",
        "--github-all",
        "--github-token",
        "test-token",
    ])
    .expect("all-surface shorthand parses");
    let sources = API
        .build_sources(&args, vec![], None)
        .expect("all-surface shorthand builds");
    assert!(args.github_all);
    assert_eq!(sources.len(), 1);
    assert_eq!(sources[0].name(), "github-collaboration");
}

#[test]
fn repository_only_source_does_not_construct_collaboration_adapter() {
    let args = ScanArgs::try_parse_from([
        "scan",
        "--github-org",
        "acme",
        "--github-token",
        "test-token",
    ])
    .expect("repository-only source parses");
    let sources = API
        .build_sources(&args, vec![], None)
        .expect("repository-only source builds");
    assert_eq!(sources.len(), 1);
    assert_eq!(sources[0].name(), "github-org");
}