now-runner 0.2.0

Nix-based distributed command runner
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

// now: A Nix-based distributed command runner
// Copyright (C) 2026 Eric Rodrigues Pires
//
// This program is free software: you can redistribute it and/or modify it under
// the terms of the GNU Affero General Public License as published by the Free
// Software Foundation, either version 3 of the License, or (at your option)
// any later version.
//
// This program is distributed in the hope that it will be useful, but WITHOUT
// ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
// FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for
// more details.
//
// You should have received a copy of the GNU Affero General Public License along
// with this program. If not, see <https://www.gnu.org/licenses/>.

pub const SecretCollection = @import("secret_collection.zig");

const std = @import("std");
const expect = std.testing.expect;

test "ignore empty secrets" {
    var arena: std.heap.ArenaAllocator = .init(std.heap.page_allocator);
    defer arena.deinit();
    const allocator = arena.allocator();

    var map = std.process.Environ.Map.init(allocator);
    defer map.deinit();
    try map.put("FOO", "Secret");
    try map.put("BAR", "");

    var secret_names: std.ArrayList([]const u8) = .empty;
    defer secret_names.deinit(allocator);
    try secret_names.append(allocator, "FOO");
    try secret_names.append(allocator, "BAR");

    var collection = try SecretCollection.init(allocator, &map, secret_names.items);
    defer collection.deinit();

    try expect(std.mem.eql(u8, try collection.redactLine("Regular"), "Regular"));
    try expect(std.mem.eql(u8, try collection.redactLine("Secret"), "***"));
}

test "anonymize" {
    var arena: std.heap.ArenaAllocator = .init(std.heap.page_allocator);
    defer arena.deinit();
    const allocator = arena.allocator();

    var map = std.process.Environ.Map.init(allocator);
    defer map.deinit();
    try map.put("ONE", "SECRET");
    try map.put("TWO", "ANOTHER_ONE");
    try map.put("THREE", "MORE_SECRET");
    try map.put("FOUR", "SECRET");

    var secret_names: std.ArrayList([]const u8) = .empty;
    defer secret_names.deinit(allocator);
    try secret_names.append(allocator, "ONE");
    try secret_names.append(allocator, "TWO");
    try secret_names.append(allocator, "THREE");
    try secret_names.append(allocator, "FOUR");

    var collection = try SecretCollection.init(allocator, &map, secret_names.items);
    defer collection.deinit();

    try expect(std.mem.eql(u8, try collection.redactLine("input"), "input"));
    try expect(std.mem.eql(u8, try collection.redactLine("SECRET"), "***"));
    try expect(std.mem.eql(u8, try collection.redactLine("123ANOTHER_ONE456MORE_SECRET789"), "123***456***789"));
}

test "multiple matches" {
    var arena: std.heap.ArenaAllocator = .init(std.heap.page_allocator);
    defer arena.deinit();
    const allocator = arena.allocator();

    var map = std.process.Environ.Map.init(allocator);
    defer map.deinit();
    try map.put("ABA", "aba");

    var secret_names: std.ArrayList([]const u8) = .empty;
    defer secret_names.deinit(allocator);
    try secret_names.append(allocator, "ABA");

    var collection = try SecretCollection.init(allocator, &map, secret_names.items);
    defer collection.deinit();

    try expect(std.mem.eql(u8, try collection.redactLine("123aba123ababa123"), "123***123***ba123"));
}