trivy/pkg/compliance/spec/mapper_test.go

package spec_test

import (
	"testing"

	"github.com/stretchr/testify/assert"

	"github.com/aquasecurity/trivy/pkg/compliance/spec"
	ftypes "github.com/aquasecurity/trivy/pkg/fanal/types"
	"github.com/aquasecurity/trivy/pkg/types"
)

func TestMapSpecCheckIDToFilteredResults(t *testing.T) {
	checkIDs := map[types.SecurityCheck][]string{
		types.SecurityCheckConfig: {
			"AVD-KSV012",
			"AVD-1.2.31",
			"AVD-1.2.32",
		},
		types.SecurityCheckVulnerability: {
			"CVE-9999-9999",
		},
	}
	tests := []struct {
		name     string
		checkIDs map[types.SecurityCheck][]string
		result   types.Result
		want     map[string]types.Results
	}{
		{
			name:     "misconfiguration",
			checkIDs: checkIDs,
			result: types.Result{
				Target: "target",
				Class:  types.ClassConfig,
				Type:   ftypes.Kubernetes,
				Misconfigurations: []types.DetectedMisconfiguration{
					{AVDID: "AVD-KSV012", Status: types.StatusFailure},
					{AVDID: "AVD-KSV013", Status: types.StatusFailure},
					{AVDID: "AVD-1.2.31", Status: types.StatusFailure},
				},
			},
			want: map[string]types.Results{
				"AVD-KSV012": {
					{
						Target:         "target",
						Class:          types.ClassConfig,
						Type:           ftypes.Kubernetes,
						MisconfSummary: &types.MisconfSummary{Successes: 0, Failures: 1, Exceptions: 0},
						Misconfigurations: []types.DetectedMisconfiguration{
							{AVDID: "AVD-KSV012", Status: types.StatusFailure},
						},
					},
				},
				"AVD-1.2.31": {
					{
						Target:         "target",
						Class:          types.ClassConfig,
						Type:           ftypes.Kubernetes,
						MisconfSummary: &types.MisconfSummary{Successes: 0, Failures: 1, Exceptions: 0},
						Misconfigurations: []types.DetectedMisconfiguration{
							{AVDID: "AVD-1.2.31", Status: types.StatusFailure},
						},
					},
				},
			},
		},
		{
			name:     "vulnerability",
			checkIDs: checkIDs,
			result: types.Result{
				Target: "target",
				Class:  types.ClassLangPkg,
				Type:   ftypes.GoModule,
				Vulnerabilities: []types.DetectedVulnerability{
					{VulnerabilityID: "CVE-9999-0001"},
					{VulnerabilityID: "CVE-9999-9999"},
				},
			},
			want: map[string]types.Results{
				"CVE-9999-9999": {
					{
						Target: "target",
						Class:  types.ClassLangPkg,
						Type:   ftypes.GoModule,
						Vulnerabilities: []types.DetectedVulnerability{
							{VulnerabilityID: "CVE-9999-9999"},
						},
					},
				},
			},
		},
	}
	for _, tt := range tests {
		t.Run(tt.name, func(t *testing.T) {
			got := spec.MapSpecCheckIDToFilteredResults(tt.result, tt.checkIDs)
			assert.Equalf(t, tt.want, got, "CheckIDs()")
		})
	}
}