mirror of
https://github.com/anchore/syft.git
synced 2026-11-05 00:46:38 +01:00
Rez MossandChristopher Phillips
c185657d71
--------- Signed-off-by: Rez Moss <hi@rezmoss.com> Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com> Co-authored-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
57 lines
2.1 KiB
Go
57 lines
2.1 KiB
Go
package integration
|
|
|
|
import (
|
|
"reflect"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/scylladb/go-set/strset"
|
|
|
|
"github.com/anchore/syft/syft/pkg"
|
|
)
|
|
|
|
func TestNpmPackageLockDirectory(t *testing.T) {
|
|
sbom, _ := catalogDirectory(t, "test-fixtures/npm-lock")
|
|
|
|
foundPackages := strset.New()
|
|
|
|
for actualPkg := range sbom.Artifacts.Packages.Enumerate(pkg.NpmPkg) {
|
|
for _, actualLocation := range actualPkg.Locations.ToSlice() {
|
|
if strings.Contains(actualLocation.RealPath, "node_modules") {
|
|
t.Errorf("found packages from package-lock.json in node_modules: %s", actualLocation)
|
|
}
|
|
}
|
|
foundPackages.Add(actualPkg.Name)
|
|
}
|
|
|
|
// ensure that integration test commonTestCases stay in sync with the available catalogers
|
|
const expectedPackageCount = 2
|
|
if foundPackages.Size() != expectedPackageCount {
|
|
t.Errorf("found the wrong set of npm package-lock.json packages (expected: %d, actual: %d)", expectedPackageCount, foundPackages.Size())
|
|
}
|
|
}
|
|
|
|
func TestYarnPackageLockDirectory(t *testing.T) {
|
|
sbom, _ := catalogDirectory(t, "test-fixtures/yarn-lock")
|
|
|
|
foundPackages := strset.New()
|
|
// merge-objects and should-type are devDependencies in package.json and are excluded by default
|
|
expectedPackages := strset.New("async@0.9.2", "async@3.2.3", "@4lolo/resize-observer-polyfill@1.5.2")
|
|
|
|
for actualPkg := range sbom.Artifacts.Packages.Enumerate(pkg.NpmPkg) {
|
|
for _, actualLocation := range actualPkg.Locations.ToSlice() {
|
|
if strings.Contains(actualLocation.RealPath, "node_modules") {
|
|
t.Errorf("found packages from yarn.lock in node_modules: %s", actualLocation)
|
|
}
|
|
}
|
|
foundPackages.Add(actualPkg.Name + "@" + actualPkg.Version)
|
|
}
|
|
|
|
// ensure that integration test commonTestCases stay in sync with the available catalogers
|
|
if foundPackages.Size() != expectedPackages.Size() {
|
|
t.Errorf("found the wrong set of yarn.lock packages (expected: %d, actual: %d)", expectedPackages.Size(), foundPackages.Size())
|
|
} else if !reflect.DeepEqual(foundPackages, expectedPackages) {
|
|
t.Errorf("found the wrong set of yarn.lock packages (expected: %+q, actual: %+q)", expectedPackages.List(), foundPackages.List())
|
|
}
|
|
}
|