repopilot 0.11.0

Local-first CLI for repository audit, architecture risk detection, baseline tracking, and CI-friendly code review.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

use repopilot::findings::types::{Evidence, Finding, FindingCategory, Severity};
use repopilot::output::{OutputFormat, render_scan_summary};
use repopilot::scan::types::ScanSummary;
use std::path::PathBuf;

fn make_finding(pkg: Option<&str>, severity: Severity) -> Finding {
    Finding {
        id: String::new(),
        rule_id: "security.secret-candidate".to_owned(),
        recommendation: Finding::recommendation_for_rule_id("security.secret-candidate"),
        title: "Test".to_owned(),
        description: "desc".to_owned(),
        category: FindingCategory::Security,
        severity,
        confidence: Default::default(),
        evidence: vec![Evidence {
            path: PathBuf::from("src/main.rs"),
            line_start: 1,
            line_end: None,
            snippet: String::new(),
        }],
        workspace_package: pkg.map(str::to_owned),
        docs_url: None,
        risk: Default::default(),
    }
}

#[test]
fn workspace_risk_not_rendered_when_no_workspace_package() {
    let summary = ScanSummary {
        root_path: PathBuf::from("."),
        findings: vec![
            make_finding(None, Severity::High),
            make_finding(None, Severity::Medium),
        ],
        ..ScanSummary::default()
    };

    let console = render_scan_summary(&summary, OutputFormat::Console).unwrap();
    assert!(
        !console.contains("Workspace Risk"),
        "workspace risk table must not appear when no finding has a workspace_package"
    );

    let markdown = render_scan_summary(&summary, OutputFormat::Markdown).unwrap();
    assert!(
        !markdown.contains("Workspace Risk"),
        "workspace risk section must not appear in markdown when no workspace_package is set"
    );
}

#[test]
fn workspace_risk_table_aggregates_correctly() {
    let summary = ScanSummary {
        root_path: PathBuf::from("."),
        findings: vec![
            make_finding(Some("web"), Severity::Critical),
            make_finding(Some("web"), Severity::High),
            make_finding(Some("api"), Severity::Medium),
        ],
        ..ScanSummary::default()
    };

    let console = render_scan_summary(&summary, OutputFormat::Console).unwrap();
    assert!(console.contains("Workspace Risk"), "risk table must appear");
    // web has 2 findings, api has 1
    assert!(console.contains("web"), "web package must appear");
    assert!(console.contains("api"), "api package must appear");
}

#[test]
fn workspace_risk_markdown_contains_table_header() {
    let summary = ScanSummary {
        root_path: PathBuf::from("."),
        findings: vec![make_finding(Some("core"), Severity::High)],
        ..ScanSummary::default()
    };

    let markdown = render_scan_summary(&summary, OutputFormat::Markdown).unwrap();
    assert!(
        markdown.contains("## Workspace Risk Summary"),
        "markdown must include the Workspace Risk Summary heading"
    );
    assert!(
        markdown.contains("| Package |"),
        "markdown table must include Package column header"
    );
    assert!(
        markdown.contains("core"),
        "package name must appear in the table"
    );
}