158 lines
3.8 KiB
TypeScript
158 lines
3.8 KiB
TypeScript
import * as child_process from 'child_process'
|
|
import * as fs from 'fs'
|
|
import * as path from 'path'
|
|
import { Audit } from '../src/audit'
|
|
import { fileURLToPath } from 'url'
|
|
import { dirname } from 'path'
|
|
|
|
const __filename = fileURLToPath(import.meta.url)
|
|
const __dirname = dirname(__filename)
|
|
|
|
vi.mock('child_process')
|
|
|
|
const audit = new Audit()
|
|
|
|
describe('run', () => {
|
|
beforeEach(() => {
|
|
vi.mocked(child_process).spawnSync.mockClear()
|
|
})
|
|
|
|
test('finds vulnerabilities with default values', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
const stdout = fs.readFileSync(
|
|
path.join(__dirname, 'testdata/audit/error.txt')
|
|
)
|
|
|
|
return {
|
|
pid: 100,
|
|
output: [stdout],
|
|
stdout,
|
|
stderr: '',
|
|
status: 1,
|
|
signal: null,
|
|
error: null
|
|
}
|
|
})
|
|
|
|
audit.run('low', 'false', 'false')
|
|
expect(audit.foundVulnerability()).toBeTruthy()
|
|
})
|
|
|
|
test('finds vulnerabilities with production flag enabled', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
const stdout = fs.readFileSync(
|
|
path.join(__dirname, 'testdata/audit/error.txt')
|
|
)
|
|
|
|
return {
|
|
pid: 100,
|
|
output: [stdout],
|
|
stdout,
|
|
stderr: '',
|
|
status: 1,
|
|
signal: null,
|
|
error: null
|
|
}
|
|
})
|
|
|
|
audit.run('low', 'true', 'false')
|
|
expect(audit.foundVulnerability()).toBeTruthy()
|
|
})
|
|
|
|
test('finds vulnerabilities with json flag enabled', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
const stdout = fs.readFileSync(
|
|
path.join(__dirname, 'testdata/audit/error.json')
|
|
)
|
|
|
|
return {
|
|
pid: 100,
|
|
output: [stdout],
|
|
stdout,
|
|
stderr: '',
|
|
status: 1,
|
|
signal: null,
|
|
error: null
|
|
}
|
|
})
|
|
|
|
audit.run('low', 'false', 'true')
|
|
expect(audit.foundVulnerability()).toBeTruthy()
|
|
})
|
|
|
|
test('does not find vulnerabilities', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
const stdout = fs.readFileSync(
|
|
path.join(__dirname, 'testdata/audit/success.txt')
|
|
)
|
|
|
|
return {
|
|
pid: 100,
|
|
output: [stdout],
|
|
stdout,
|
|
stderr: '',
|
|
status: 0,
|
|
signal: null,
|
|
error: null
|
|
}
|
|
})
|
|
|
|
audit.run('low', 'false', 'false')
|
|
expect(audit.foundVulnerability()).toBeFalsy()
|
|
})
|
|
|
|
test('throws an error if error is not null', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
return {
|
|
pid: 100,
|
|
output: '',
|
|
stdout: '',
|
|
stderr: '',
|
|
status: 0,
|
|
signal: null,
|
|
error: new Error('Something is wrong')
|
|
}
|
|
})
|
|
|
|
expect.assertions(1)
|
|
const e = new Error('Something is wrong')
|
|
expect(() => audit.run('low', 'false', 'false')).toThrowError(e)
|
|
})
|
|
|
|
test('throws an error if status is null', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
return {
|
|
pid: 100,
|
|
output: '',
|
|
stdout: '',
|
|
stderr: '',
|
|
status: null,
|
|
signal: 'SIGTERM',
|
|
error: null
|
|
}
|
|
})
|
|
|
|
expect.assertions(1)
|
|
const e = new Error('the subprocess terminated due to a signal.')
|
|
expect(() => audit.run('low', 'false', 'false')).toThrowError(e)
|
|
})
|
|
|
|
test('throws an error if stderr is null', () => {
|
|
vi.mocked(child_process).spawnSync.mockImplementation((): any => {
|
|
return {
|
|
pid: 100,
|
|
output: '',
|
|
stdout: '',
|
|
stderr: 'Something is wrong',
|
|
status: 1,
|
|
signal: null,
|
|
error: null
|
|
}
|
|
})
|
|
|
|
expect.assertions(1)
|
|
const e = new Error('Something is wrong')
|
|
expect(() => audit.run('low', 'false', 'false')).toThrowError(e)
|
|
})
|
|
})
|