provenant-cli 0.0.8

Provenant is a high-performance Rust scanner for licenses, packages, and source provenance.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88

#[cfg(test)]
mod tests {
    use std::fs;
    use std::path::Path;

    use super::super::scan_test_utils::{
        assert_dependency_present, assert_file_links_to_package, scan_and_assemble,
    };
    use crate::models::{DatasourceId, PackageType};

    #[test]
    fn test_conda_assembly_scan_keeps_conda_and_pypi_package_contracts() {
        let (files, result) = scan_and_assemble(Path::new("testdata/conda/assembly"));

        let conda_package = result
            .packages
            .iter()
            .find(|package| {
                package.package_type == Some(PackageType::Conda)
                    && package.name.as_deref() == Some("requests")
            })
            .expect("conda requests package should be assembled");
        let pypi_package = result
            .packages
            .iter()
            .find(|package| {
                package.package_type == Some(PackageType::Pypi)
                    && package.name.as_deref() == Some("requests")
            })
            .expect("embedded pypi requests package should be assembled");

        assert_eq!(conda_package.version.as_deref(), Some("2.32.3"));
        assert_eq!(
            conda_package.purl.as_deref(),
            Some("pkg:conda/requests@2.32.3")
        );
        assert_eq!(pypi_package.version.as_deref(), Some("2.32.3"));
        assert_eq!(
            pypi_package.purl.as_deref(),
            Some("pkg:pypi/requests@2.32.3")
        );
        assert_dependency_present(&result.dependencies, "pkg:conda/zlib", "meta.yaml");
        assert_file_links_to_package(
            &files,
            "/requests-2.32.3-py312h06a4308_1.json",
            &conda_package.package_uid,
            DatasourceId::CondaMetaJson,
        );
        assert_file_links_to_package(
            &files,
            "/site-packages/requests-2.32.3.dist-info/METADATA",
            &pypi_package.package_uid,
            DatasourceId::PypiWheelMetadata,
        );
    }

    #[test]
    fn test_conda_hyphenated_environment_alias_scans_and_assembles() {
        let temp_dir = tempfile::TempDir::new().expect("create temp dir");
        fs::write(
            temp_dir.path().join("conda-env.yaml"),
            "name: alias-env\ndependencies:\n  - requests=2.32.3\n",
        )
        .expect("write conda-env.yaml");

        let (files, result) = scan_and_assemble(temp_dir.path());

        let package = result
            .packages
            .iter()
            .find(|package| package.package_type == Some(PackageType::Conda))
            .expect("conda alias environment should assemble a package");

        assert_eq!(package.name.as_deref(), Some("alias-env"));
        assert_eq!(package.datasource_ids, vec![DatasourceId::CondaYaml]);
        assert_dependency_present(
            &result.dependencies,
            "pkg:conda/requests@2.32.3",
            "conda-env.yaml",
        );
        assert_file_links_to_package(
            &files,
            "/conda-env.yaml",
            &package.package_uid,
            DatasourceId::CondaYaml,
        );
    }
}