trivy/internal/cryptotest/asset_test.go at fea60fea765eede5c73cda310541f2e1d44bd016 · aquasecurity/trivy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
package cryptotest_test

import (
	"testing"

	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/aquasecurity/trivy/internal/cryptotest"
	"github.com/aquasecurity/trivy/pkg/crypto"
)

func TestAssets(t *testing.T) {
	t.Parallel()

	tests := []struct {
		name   string
		asset  func(...cryptotest.Option) crypto.Asset
		mutate func(*crypto.Asset)
	}{
		{
			name:  "certificate",
			asset: cryptotest.CertificateAsset,
			mutate: func(asset *crypto.Asset) {
				asset.Certificate.Subject = "changed"
			},
		},
		{
			name:  "public key",
			asset: cryptotest.PublicKeyAsset,
			mutate: func(asset *crypto.Asset) {
				asset.Key.Size = 4096
			},
		},
		{
			name:  "private key",
			asset: cryptotest.PrivateKeyAsset,
			mutate: func(asset *crypto.Asset) {
				asset.Key.Size = 4096
			},
		},
		{
			name:  "encrypted private key",
			asset: cryptotest.EncryptedPrivateKeyAsset,
			mutate: func(asset *crypto.Asset) {
				asset.Key.Size = 4096
			},
		},
		{
			name:  "algorithm",
			asset: cryptotest.AlgorithmAsset,
			mutate: func(asset *crypto.Asset) {
				asset.Algorithm.Family = "changed"
			},
		},
	}

	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			t.Parallel()

			first := tt.asset()
			second := tt.asset()
			require.NoError(t, first.Validate())
			require.NoError(t, second.Validate())
			assert.NotEmpty(t, first.FilePath)
			assert.Equal(t, first, second)

			mutated := tt.asset(cryptotest.WithMutate(tt.mutate))
			assert.NotEqual(t, first, mutated)

			tt.mutate(&first)
			assert.NotEqual(t, first, second)
		})
	}
}