// Copyright 2021 OpenSSF Scorecard Authors // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. package e2e import ( "context" "os" "github.com/go-git/go-git/v5" . "github.com/onsi/ginkgo/v2" . "github.com/onsi/gomega" "github.com/ossf/scorecard/v4/checker" "github.com/ossf/scorecard/v4/checks" "github.com/ossf/scorecard/v4/clients" "github.com/ossf/scorecard/v4/clients/githubrepo" "github.com/ossf/scorecard/v4/clients/localdir" scut "github.com/ossf/scorecard/v4/utests" ) var _ = Describe("E2E TEST:"+checks.CheckTokenPermissions, func() { Context("E2E TEST:Validating token permission check", func() { It("Should return token permission works", func() { dl := scut.TestDetailLogger{} repo, err := githubrepo.MakeGithubRepo("ossf-tests/scorecard-check-token-permissions-e2e") Expect(err).Should(BeNil()) repoClient := githubrepo.CreateGithubRepoClient(context.Background(), logger) err = repoClient.InitRepo(repo, clients.HeadSHA, 0) Expect(err).Should(BeNil()) req := checker.CheckRequest{ Ctx: context.Background(), RepoClient: repoClient, Repo: repo, Dlogger: &dl, } expected := scut.TestReturn{ Error: nil, Score: checker.MinResultScore, NumberOfWarn: 1, NumberOfInfo: 3, NumberOfDebug: 5, } result := checks.TokenPermissions(&req) // New version. Expect(scut.ValidateTestReturn(nil, "token permissions", &expected, &result, &dl)).Should(BeTrue()) Expect(repoClient.Close()).Should(BeNil()) }) It("Should return token permission at commit", func() { dl := scut.TestDetailLogger{} repo, err := githubrepo.MakeGithubRepo("ossf-tests/scorecard-check-token-permissions-e2e") Expect(err).Should(BeNil()) repoClient := githubrepo.CreateGithubRepoClient(context.Background(), logger) err = repoClient.InitRepo(repo, "35a3425d1e682c32946b7d36adcfd772cf772e63", 0) Expect(err).Should(BeNil()) req := checker.CheckRequest{ Ctx: context.Background(), RepoClient: repoClient, Repo: repo, Dlogger: &dl, } expected := scut.TestReturn{ Error: nil, Score: checker.MinResultScore, NumberOfWarn: 1, NumberOfInfo: 3, NumberOfDebug: 5, } result := checks.TokenPermissions(&req) // New version. Expect(scut.ValidateTestReturn(nil, "token permissions", &expected, &result, &dl)).Should(BeTrue()) Expect(repoClient.Close()).Should(BeNil()) }) It("Should return token permission for a local repo client", func() { dl := scut.TestDetailLogger{} tmpDir, err := os.MkdirTemp("", "") Expect(err).Should(BeNil()) defer os.RemoveAll(tmpDir) _, e := git.PlainClone(tmpDir, false, &git.CloneOptions{ URL: "http://github.com/ossf-tests/scorecard-check-token-permissions-e2e", }) Expect(e).Should(BeNil()) repo, err := localdir.MakeLocalDirRepo(tmpDir) Expect(err).Should(BeNil()) x := localdir.CreateLocalDirClient(context.Background(), logger) err = x.InitRepo(repo, clients.HeadSHA, 0) Expect(err).Should(BeNil()) req := checker.CheckRequest{ Ctx: context.Background(), RepoClient: x, Repo: repo, Dlogger: &dl, } expected := scut.TestReturn{ Error: nil, Score: checker.MinResultScore, NumberOfWarn: 1, NumberOfInfo: 3, NumberOfDebug: 5, } result := checks.TokenPermissions(&req) // New version. Expect(scut.ValidateTestReturn(nil, "token permissions", &expected, &result, &dl)).Should(BeTrue()) Expect(x.Close()).Should(BeNil()) }) }) })