trivy/integration/k8s_test.go

//go:build k8s_integration

package integration

import (
	"encoding/json"
	"os"
	"path/filepath"
	"testing"

	"github.com/samber/lo"
	"github.com/stretchr/testify/assert"
	"github.com/stretchr/testify/require"

	"github.com/aquasecurity/trivy/pkg/k8s/report"
	"github.com/aquasecurity/trivy/pkg/types"
)

// Note: the test required k8s (kind) cluster installed.
// "mage test:k8s" will run this test.

func TestK8s(t *testing.T) {
	// Set up the output file
	outputFile := filepath.Join(t.TempDir(), "output.json")

	osArgs := []string{
		"k8s",
		"cluster",
		"--report",
		"summary",
		"-q",
		"--timeout",
		"5m0s",
		"--format",
		"json",
		"--components",
		"workload",
		"--context",
		"kind-kind-test",
		"--output",
		outputFile,
	}

	// Run Trivy
	err := execute(osArgs)
	require.NoError(t, err)

	var got report.ConsolidatedReport
	f, err := os.Open(outputFile)
	require.NoError(t, err)
	defer f.Close()

	err = json.NewDecoder(f).Decode(&got)
	require.NoError(t, err)

	// Flatten findings
	results := lo.FlatMap(got.Findings, func(resource report.Resource, _ int) []types.Result {
		return resource.Results
	})

	// Has vulnerabilities
	assert.True(t, lo.SomeBy(results, func(r types.Result) bool {
		return len(r.Vulnerabilities) > 0
	}))

	// Has misconfigurations
	assert.True(t, lo.SomeBy(results, func(r types.Result) bool {
		return len(r.Misconfigurations) > 0
	}))
}