11package v1
22
33import (
4- "context"
54 "testing"
65
76 "github.com/google/go-cmp/cmp"
8-
9- "github.com/trufflesecurity/trufflehog/v3/pkg/detectors"
10- "github.com/trufflesecurity/trufflehog/v3/pkg/engine/ahocorasick"
11- )
12-
13- var (
14- validPattern = `
15- azure credentials:
16- azureClientID: clientid9304d5df4-aac1-6117-552c-7f70c89a40d9
17- azureTenant: tenant_idid9304d5df4-aac1-6117-552c-7f70c89a40d9
18- azureClientSecret: clientsecretY_0w|[cGpan41k6ng.ol414sp4ccw2v_rkfmbs537i
19- `
20- invalidPattern = `
21- azure credentials:
22- azureClientID: 9304d5df4-aac1-6117-552c-7f70c89a
23- azureTenant: id9304d5df4-aac1-6117-55-7f70c89a40d9
24- azureClientSecret: Y_0w|[cGpan41k6ng.
25- `
267)
278
28- func TestAzure_Pattern (t * testing.T ) {
29- d := Scanner {}
30- ahoCorasickCore := ahocorasick .NewAhoCorasickCore ([]detectors.Detector {d })
31-
32- tests := []struct {
33- name string
34- input string
35- want []string
36- }{
37- {
38- name : "valid pattern" ,
39- input : validPattern ,
40- want : []string {"304d5df4-aac1-6117-552c-7f70c89a40d9cGpan41k6ng.ol414sp4ccw2v_rkfmbs53304d5df4-aac1-6117-552c-7f70c89a40d9" },
41- },
42- {
43- name : "invalid pattern" ,
44- input : invalidPattern ,
45- want : nil ,
46- },
47- }
48-
49- for _ , test := range tests {
50- t .Run (test .name , func (t * testing.T ) {
51- matchedDetectors := ahoCorasickCore .FindDetectorMatches ([]byte (test .input ))
52- if len (matchedDetectors ) == 0 {
53- t .Errorf ("keywords '%v' not matched by: %s" , d .Keywords (), test .input )
54- return
55- }
56-
57- results , err := d .FromData (context .Background (), false , []byte (test .input ))
58- if err != nil {
59- t .Errorf ("error = %v" , err )
60- return
61- }
62-
63- if len (results ) != len (test .want ) {
64- if len (results ) == 0 {
65- t .Errorf ("did not receive result" )
66- } else {
67- t .Errorf ("expected %d results, only received %d" , len (test .want ), len (results ))
68- }
69- return
70- }
71-
72- actual := make (map [string ]struct {}, len (results ))
73- for _ , r := range results {
74- if len (r .RawV2 ) > 0 {
75- actual [string (r .RawV2 )] = struct {}{}
76- } else {
77- actual [string (r .Raw )] = struct {}{}
78- }
79- }
80- expected := make (map [string ]struct {}, len (test .want ))
81- for _ , v := range test .want {
82- expected [v ] = struct {}{}
83- }
84-
85- if diff := cmp .Diff (expected , actual ); diff != "" {
86- t .Errorf ("%s diff: (-want +got)\n %s" , test .name , diff )
87- }
88- })
89- }
90- }
91-
929type testCase struct {
9310 Input string
9411 Expected map [string ]struct {}
@@ -155,10 +72,10 @@ configs = {"fs.azure.account.auth.type": "OAuth"`,
15572 Input : ` "AZUREAD-AKS-APPID-SECRET": "8w__IGsaY.6g6jUxb1.pPGK262._pgX.q-",` ,
15673 Expected : map [string ]struct {}{"8w__IGsaY.6g6jUxb1.pPGK262._pgX.q-" : {}},
15774 },
158- //"client_secret6": {
75+ // "client_secret6": {
15976 // Input: ``,
16077 // Expected: map[string]struct{}{"": {}},
161- //},
78+ // },
16279
16380 "password" : {
16481 Input : `# Login using Service Principal
@@ -175,12 +92,12 @@ $Credential = New-Object -TypeName System.Management.Automation.PSCredential -Ar
17592az login --service-principal --username {{http://azure-cli-service-principal}} --password {{secret}} --tenant {{someone.onmicrosoft.com}}` ,
17693 Expected : nil ,
17794 },
178- //"client_secret3": {
95+ // "client_secret3": {
17996 // Input: ``,
18097 // Expected: map[string]struct{}{
18198 // "": {},
18299 // },
183- //},
100+ // },
184101 }
185102
186103 for name , test := range cases {
0 commit comments