safeshell 0.1.3

SafeShell: A security tool for shell history management, designed to detect, stash, and clear sensitive commands, ensuring safer terminal sessions.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

use insta::assert_debug_snapshot;
use serde_derive::Deserialize;
use safeshell::{data::Detection, engine::SENSITIVE_COMMANDS};

#[derive(Debug, Deserialize, Clone)]
struct TestSensitivePatterns {
    pub name: String,
    pub test: String,
    pub expected: String,
}

#[allow(dead_code)]
#[derive(Debug)]
struct TestPatternResult {
    name: String,
    test: String,
    detect: String,
    expected: String,
}

#[test]
fn can_detect_regex_sensitive_patterns() {
    let patterns: Vec<Detection> = serde_yaml::from_str(SENSITIVE_COMMANDS).unwrap();

    for pattern in &patterns {
        let pattern_id = pattern.id.to_lowercase().replace(" ", "_");
        let pattern_file = format!("tests/suites_sensitive_patterns/{}.yaml", pattern_id);
        let f = match std::fs::File::open(pattern_file) {
            Ok(f) => f,
            Err(_e) => {
                println!("not found tests for {}", pattern.id);
                return assert!(false);
            }
        };
        let tests: Vec<TestSensitivePatterns> = serde_yaml::from_reader(f).unwrap();
        let mut results = Vec::new();
        for test in tests {
            let caps = pattern.test.captures(&test.test).unwrap();
            results.push(TestPatternResult {
                name: test.name,
                test: test.test.clone(),
                detect: caps
                    .get(pattern.secret_group as usize)
                    .map_or("", |m| m.as_str())
                    .to_string(),
                expected: test.expected,
            })
        }
        assert_debug_snapshot!(pattern_id, results);
    }
}