Merge pull request #671 from chef/dr/formatter-redesign

JSON formatter redesign
This commit is contained in:
Christoph Hartmann 2016-05-06 13:33:05 +02:00
commit 84ee58d89f
18 changed files with 407 additions and 379 deletions

View file

@ -15,8 +15,6 @@ class Inspec::InspecCLI < Inspec::BaseCLI # rubocop:disable Metrics/ClassLength
desc: 'Show diagnostics (versions, configurations)' desc: 'Show diagnostics (versions, configurations)'
desc 'json PATH', 'read all tests in PATH and generate a JSON summary' desc 'json PATH', 'read all tests in PATH and generate a JSON summary'
option :id, type: :string,
desc: 'Attach a profile ID to all test results'
option :output, aliases: :o, type: :string, option :output, aliases: :o, type: :string,
desc: 'Save the created profile to a path' desc: 'Save the created profile to a path'
option :controls, type: :array, option :controls, type: :array,

View file

@ -31,37 +31,6 @@ module Inspec::DSL
end end
end end
# Register a given rule with RSpec and
# let it run. This happens after everything
# else is merged in.
def self.execute_rule(r, profile_id)
checks = ::Inspec::Rule.prepare_checks(r)
fid = InspecBaseRule.full_id(r, profile_id)
checks.each do |m, a, b|
# check if the resource is skippable and skipped
cres = rule_from_check(m, a, b)
set_rspec_ids(cres, fid) if m == 'describe'
end
end
# merge two rules completely; all defined
# fields from src will be overwritten in dst
def self.merge_rules(dst, src)
InspecBaseRule.merge dst, src
end
# Attach an ID attribute to the
# metadata of all examples
# TODO: remove this once IDs are in rspec-core
def self.set_rspec_ids(obj, id)
obj.examples.each {|ex|
ex.metadata[:id] = id
}
obj.children.each {|c|
set_rspec_ids(c, id)
}
end
def self.load_spec_files_for_profile(bind_context, opts, &block) def self.load_spec_files_for_profile(bind_context, opts, &block)
# get all spec files # get all spec files
target = get_reference_profile(opts[:profile_id], opts[:conf]) target = get_reference_profile(opts[:profile_id], opts[:conf])
@ -121,24 +90,3 @@ module Inspec::DSL
ctx ctx
end end
end end
module Inspec::GlobalDSL
def __register_rule(r)
# make sure the profile id is attached to the rule
::Inspec::DSL.execute_rule(r, __profile_id)
end
def __unregister_rule(_id)
end
end
module Inspec::DSLHelper
def self.bind_dsl(scope)
(class << scope; self; end).class_exec do
include Inspec::DSL
include Inspec::GlobalDSL
end
end
end
::Inspec::DSLHelper.bind_dsl(self)

View file

@ -11,7 +11,6 @@ require 'inspec/metadata'
module Inspec module Inspec
class Profile # rubocop:disable Metrics/ClassLength class Profile # rubocop:disable Metrics/ClassLength
extend Forwardable extend Forwardable
attr_reader :path
def self.resolve_target(target, opts) def self.resolve_target(target, opts)
# Fetchers retrieve file contents # Fetchers retrieve file contents
@ -35,6 +34,7 @@ module Inspec
end end
attr_reader :source_reader attr_reader :source_reader
attr_accessor :runner_context
def_delegator :@source_reader, :tests def_delegator :@source_reader, :tests
def_delegator :@source_reader, :libraries def_delegator :@source_reader, :libraries
def_delegator :@source_reader, :metadata def_delegator :@source_reader, :metadata
@ -46,6 +46,7 @@ module Inspec
@logger = @options[:logger] || Logger.new(nil) @logger = @options[:logger] || Logger.new(nil)
@source_reader = source_reader @source_reader = source_reader
@profile_id = @options[:id] @profile_id = @options[:id]
@runner_context = nil
Metadata.finalize(@source_reader.metadata, @profile_id) Metadata.finalize(@source_reader.metadata, @profile_id)
end end
@ -55,24 +56,16 @@ module Inspec
def info def info
res = params.dup res = params.dup
rules = {} controls = res[:controls].map do |id, rule|
res[:rules].each do |gid, group|
next if gid.to_s.empty?
rules[gid] = { title: gid, rules: {} }
group.each do |id, rule|
next if id.to_s.empty? next if id.to_s.empty?
data = rule.dup data = rule.dup
data.delete(:checks) data.delete(:checks)
data[:impact] ||= 0.5 data[:impact] ||= 0.5
data[:impact] = 1.0 if data[:impact] > 1.0 data[:impact] = 1.0 if data[:impact] > 1.0
data[:impact] = 0.0 if data[:impact] < 0.0 data[:impact] = 0.0 if data[:impact] < 0.0
rules[gid][:rules][id] = data [id, data]
# TODO: temporarily flatten the group down; replace this with
# proper hierarchy later on
rules[gid][:title] = data[:group_title]
end end
end res[:controls] = Hash[controls.compact]
res[:rules] = rules
res res
end end
@ -137,7 +130,7 @@ module Inspec
warn.call(@target, 0, 0, nil, 'Profile uses deprecated `test` directory, rename it to `controls`.') warn.call(@target, 0, 0, nil, 'Profile uses deprecated `test` directory, rename it to `controls`.')
end end
count = rules_count count = controls_count
result[:summary][:controls] = count result[:summary][:controls] = count
if count == 0 if count == 0
warn.call(nil, nil, nil, nil, 'No controls or tests were defined.') warn.call(nil, nil, nil, nil, 'No controls or tests were defined.')
@ -146,9 +139,7 @@ module Inspec
end end
# iterate over hash of groups # iterate over hash of groups
params[:rules].each { |group, controls| params[:controls].each { |id, control|
@logger.info "Verify all controls in #{group}"
controls.each { |id, control|
sfile, sline = control[:source_location] sfile, sline = control[:source_location]
error.call(sfile, sline, nil, id, 'Avoid controls with empty IDs') if id.nil? or id.empty? error.call(sfile, sline, nil, id, 'Avoid controls with empty IDs') if id.nil? or id.empty?
next if id.start_with? '(generated ' next if id.start_with? '(generated '
@ -158,7 +149,6 @@ module Inspec
warn.call(sfile, sline, nil, id, "Control #{id} has impact < 0.0") if control[:impact].to_f < 0.0 warn.call(sfile, sline, nil, id, "Control #{id} has impact < 0.0") if control[:impact].to_f < 0.0
warn.call(sfile, sline, nil, id, "Control #{id} has no tests defined") if control[:checks].nil? or control[:checks].empty? warn.call(sfile, sline, nil, id, "Control #{id} has no tests defined") if control[:checks].nil? or control[:checks].empty?
} }
}
# profile is valid if we could not find any error # profile is valid if we could not find any error
result[:summary][:valid] = result[:errors].empty? result[:summary][:valid] = result[:errors].empty?
@ -167,8 +157,8 @@ module Inspec
result result
end end
def rules_count def controls_count
params[:rules].values.map { |hm| hm.values.length }.inject(:+) || 0 params[:controls].values.length
end end
# generates a archive of a folder profile # generates a archive of a folder profile
@ -233,9 +223,17 @@ module Inspec
def load_params def load_params
params = @source_reader.metadata.params params = @source_reader.metadata.params
params[:name] = @profile_id unless @profile_id.nil? params[:name] = @profile_id unless @profile_id.nil?
params[:rules] = rules = {} load_checks_params(params)
@profile_id ||= params[:name]
params
end
def load_checks_params(params)
params[:controls] = controls = {}
params[:groups] = groups = {}
prefix = @source_reader.target.prefix || '' prefix = @source_reader.target.prefix || ''
if @runner_context.nil?
# we're checking a profile, we don't care if it runs on the host machine # we're checking a profile, we don't care if it runs on the host machine
opts = @options.dup opts = @options.dup
opts[:ignore_supports] = true opts[:ignore_supports] = true
@ -245,12 +243,28 @@ module Inspec
test_collector: opts.delete(:test_collector), test_collector: opts.delete(:test_collector),
) )
runner.add_profile(self, opts) runner.add_profile(self, opts)
runner.rules.values.each do |rule|
f = load_rule_filepath(prefix, rule)
load_rule(rule, f, controls, groups)
end
else
# load from context
@runner_context.rules.values.each do |rule|
f = load_rule_filepath(prefix, rule)
load_rule(rule, f, controls, groups)
end
end
end
runner.rules.each do |id, rule| def load_rule_filepath(prefix, rule)
file = rule.instance_variable_get(:@__file) file = rule.instance_variable_get(:@__file)
file = file[prefix.length..-1] if file.start_with?(prefix) file = file[prefix.length..-1] if file.start_with?(prefix)
rules[file] ||= {} file
rules[file][id] = { end
def load_rule(rule, file, controls, groups)
id = Inspec::Rule.rule_id(rule)
controls[id] = {
title: rule.title, title: rule.title,
desc: rule.desc, desc: rule.desc,
impact: rule.impact, impact: rule.impact,
@ -259,12 +273,13 @@ module Inspec
checks: Inspec::Rule.checks(rule), checks: Inspec::Rule.checks(rule),
code: rule.instance_variable_get(:@__code), code: rule.instance_variable_get(:@__code),
source_location: rule.instance_variable_get(:@__source_location), source_location: rule.instance_variable_get(:@__source_location),
group_title: rule.instance_variable_get(:@__group_title),
} }
end
@profile_id ||= params[:name] groups[file] ||= {
params title: rule.instance_variable_get(:@__group_title),
controls: [],
}
groups[file][:controls].push(id)
end end
end end
end end

View file

@ -41,24 +41,19 @@ module Inspec
end end
def unregister_rule(id) def unregister_rule(id)
full_id = Inspec::Rule.full_id(@profile_id, id) @rules.delete(full_id(@profile_id, id))
@rules[full_id] = nil
end end
def register_rule(r) def register_rule(r)
# get the full ID # get the full ID
r.instance_variable_set(:@__file, @current_load[:file]) r.instance_variable_set(:@__file, @current_load[:file])
r.instance_variable_set(:@__group_title, @current_load[:title]) r.instance_variable_set(:@__group_title, @current_load[:title])
full_id = Inspec::Rule.full_id(@profile_id, r)
if full_id.nil?
# TODO: error
return
end
# add the rule to the registry # add the rule to the registry
existing = @rules[full_id] fid = full_id(Inspec::Rule.profile_id(r), Inspec::Rule.rule_id(r))
existing = @rules[fid]
if existing.nil? if existing.nil?
@rules[full_id] = r @rules[fid] = r
else else
Inspec::Rule.merge(existing, r) Inspec::Rule.merge(existing, r)
end end
@ -70,6 +65,11 @@ module Inspec
private private
def full_id(pid, rid)
return rid.to_s if pid.to_s.empty?
pid.to_s + '/' + rid.to_s
end
# Create the context for controls. This includes all components of the DSL, # Create the context for controls. This includes all components of the DSL,
# including matchers and resources. # including matchers and resources.
# #
@ -93,6 +93,7 @@ module Inspec
# @return [ProfileContextClass] # @return [ProfileContextClass]
def create_context(resources_dsl, rule_class) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength def create_context(resources_dsl, rule_class) # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
profile_context_owner = self profile_context_owner = self
profile_id = @profile_id
# rubocop:disable Lint/NestedMethodDefinition # rubocop:disable Lint/NestedMethodDefinition
Class.new do Class.new do
@ -116,7 +117,7 @@ module Inspec
define_method :control do |*args, &block| define_method :control do |*args, &block|
id = args[0] id = args[0]
opts = args[1] || {} opts = args[1] || {}
register_control(rule_class.new(id, opts, &block)) register_control(rule_class.new(id, profile_id, opts, &block))
end end
define_method :describe do |*args, &block| define_method :describe do |*args, &block|
@ -124,7 +125,7 @@ module Inspec
id = "(generated from #{loc} #{SecureRandom.hex})" id = "(generated from #{loc} #{SecureRandom.hex})"
res = nil res = nil
rule = rule_class.new(id, {}) do rule = rule_class.new(id, profile_id, {}) do
res = describe(*args, &block) res = describe(*args, &block)
end end
register_control(rule, &block) register_control(rule, &block)

View file

@ -5,43 +5,46 @@
require 'rspec/core' require 'rspec/core'
require 'rspec/core/formatters/json_formatter' require 'rspec/core/formatters/json_formatter'
# Extend the basic RSpec JSON Formatter # Vanilla RSpec JSON formatter with a slight extension to show example IDs.
# to give us an ID in its output # TODO: Remove these lines when RSpec includes the ID natively
# TODO: remove once RSpec has IDs in stable (probably v3.3/v4.0) class InspecRspecVanilla < RSpec::Core::Formatters::JsonFormatter
module RSpec::Core::Formatters RSpec::Core::Formatters.register self, :message, :dump_summary, :dump_profile, :stop, :close
class JsonFormatter
private private
def format_example(example) def format_example(example)
{ res = super(example)
description: example.description, res[:id] = example.metadata[:id]
full_description: example.full_description, res
status: example.execution_result.status.to_s,
file_path: example.metadata['file_path'],
line_number: example.metadata['line_number'],
run_time: example.execution_result.run_time,
pending_message: example.execution_result.pending_message,
id: example.metadata[:id],
impact: example.metadata[:impact],
}
end
end end
end end
class InspecRspecFormatter < RSpec::Core::Formatters::JsonFormatter # Minimal JSON formatter for inspec. Only contains limited information about
# examples without any extras.
class InspecRspecMiniJson < RSpec::Core::Formatters::JsonFormatter
RSpec::Core::Formatters.register self, :message, :dump_summary, :dump_profile, :stop, :close RSpec::Core::Formatters.register self, :message, :dump_summary, :dump_profile, :stop, :close
def add_profile(profile) def dump_summary(summary)
@profiles ||= [] @output_hash[:version] = Inspec::VERSION
@profiles.push(profile) @output_hash[:summary] = {
duration: summary.duration,
example_count: summary.example_count,
failure_count: summary.failure_count,
skip_count: summary.pending_count,
}
end end
def dump_summary(summary) def stop(notification)
super(summary) @output_hash[:controls] = notification.examples.map do |example|
@output_hash[:profiles] = Array(@profiles).map do |profile| format_example(example).tap do |hash|
r = profile.params.dup e = example.exception
r.delete(:rules) next unless e
r hash[:message] = e.message
next if e.is_a? RSpec::Expectations::ExpectationNotMetError
hash[:exception] = e.class.name
hash[:backtrace] = e.backtrace
end
end end
end end
@ -50,21 +53,71 @@ class InspecRspecFormatter < RSpec::Core::Formatters::JsonFormatter
def format_example(example) def format_example(example)
res = { res = {
id: example.metadata[:id], id: example.metadata[:id],
title: example.metadata[:title],
desc: example.metadata[:desc],
code: example.metadata[:code],
impact: example.metadata[:impact],
status: example.execution_result.status.to_s, status: example.execution_result.status.to_s,
code_desc: example.full_description, code_desc: example.full_description,
ref: example.metadata['file_path'],
ref_line: example.metadata['line_number'],
run_time: example.execution_result.run_time,
start_time: example.execution_result.started_at.to_s,
} }
# pending messages are embedded in the resources description unless (pid = example.metadata[:profile_id]).nil?
res[:pending] = example.metadata[:description] if res[:status] == 'pending' res[:profile_id] = pid
end
if res[:status] == 'pending'
res[:status] = 'skipped'
res[:skip_message] = example.metadata[:description]
res[:resource] = example.metadata[:described_class].to_s
end
res res
end end
end end
class InspecRspecJson < InspecRspecMiniJson
RSpec::Core::Formatters.register self, :message, :dump_summary, :dump_profile, :stop, :close
def add_profile(profile)
@profiles ||= []
@profiles.push(profile)
end
def dump_one_example(example, profiles, missing)
profile = profiles[example[:profile_id]]
return missing.push(example) if profile.nil? || profile[:controls].nil?
control = profile[:controls][example[:id]]
return missing.push(example) if control.nil?
control[:results] ||= []
example.delete(:id)
example.delete(:profile_id)
control[:results].push(example)
end
def profile_info(profile)
info = profile.info.dup
[info[:name], info]
end
def dump_summary(summary)
super(summary)
@profiles ||= []
examples = @output_hash.delete(:controls)
profiles = Hash[@profiles.map { |x| profile_info(x) }]
missing = []
examples.each do |example|
dump_one_example(example, profiles, missing)
end
@output_hash[:profiles] = profiles
@output_hash[:other_checks] = missing
end
private
def format_example(example)
super(example).tap do |res|
res[:run_time] = example.execution_result.run_time
res[:start_time] = example.execution_result.started_at.to_s
end
end
end

View file

@ -12,8 +12,7 @@ module Inspec
class Rule # rubocop:disable Metrics/ClassLength class Rule # rubocop:disable Metrics/ClassLength
include ::RSpec::Matchers include ::RSpec::Matchers
def initialize(id, _opts, &block) def initialize(id, profile_id, _opts, &block)
@id = id
@impact = nil @impact = nil
@title = nil @title = nil
@desc = nil @desc = nil
@ -24,7 +23,8 @@ module Inspec
@__block = block @__block = block
@__code = __get_block_source(&block) @__code = __get_block_source(&block)
@__source_location = __get_block_source_location(&block) @__source_location = __get_block_source_location(&block)
@__rule_id = nil @__rule_id = id
@__profile_id = profile_id
@__checks = [] @__checks = []
@__skip_rule = nil @__skip_rule = nil
@ -119,6 +119,10 @@ module Inspec
rule.instance_variable_set(:@__rule_id, value) rule.instance_variable_set(:@__rule_id, value)
end end
def self.profile_id(rule)
rule.instance_variable_get(:@__profile_id)
end
def self.checks(rule) def self.checks(rule)
rule.instance_variable_get(:@__checks) rule.instance_variable_get(:@__checks)
end end
@ -167,32 +171,6 @@ module Inspec
set_skip_rule(dst, sr) unless sr.nil? set_skip_rule(dst, sr) unless sr.nil?
end end
# Get the full id consisting of profile id + rule id
# for the rule. If the rule's profile id is empty,
# the given profile_id will be used instead and also
# set for the rule.
def self.full_id(profile_id, rule)
if rule.is_a?(String) or rule.nil?
rid = rule
else
# As the profile context is exclusively pulled with a
# profile ID, attach it to the rule if necessary.
rid = rule.instance_variable_get(:@id)
if rid.nil?
# TODO: Message about skipping this rule
# due to missing ID
return nil
end
end
pid = rule_id(rule)
pid = set_rule_id(rule, profile_id) if pid.nil?
# if we don't have a profile id, just return the rule's ID
return rid if pid.nil? or pid.empty?
# otherwise combine them
"#{pid}/#{rid}"
end
private private
def __add_check(describe_or_expect, values, block) def __add_check(describe_or_expect, values, block)

View file

@ -18,7 +18,6 @@ module Inspec
attr_reader :backend, :rules attr_reader :backend, :rules
def initialize(conf = {}) def initialize(conf = {})
@rules = {} @rules = {}
@profile_id = conf[:id]
@conf = conf.dup @conf = conf.dup
@conf[:logger] ||= Logger.new(nil) @conf[:logger] ||= Logger.new(nil)
@ -74,6 +73,7 @@ module Inspec
@test_collector.add_profile(profile) @test_collector.add_profile(profile)
options[:metadata] = profile.metadata options[:metadata] = profile.metadata
options[:profile] = profile
libs = profile.libraries.map do |k, v| libs = profile.libraries.map do |k, v|
{ ref: k, content: v } { ref: k, content: v }
@ -88,7 +88,10 @@ module Inspec
end end
def create_context(options = {}) def create_context(options = {})
Inspec::ProfileContext.new(@profile_id, @backend, @conf.merge(options)) meta = options['metadata']
profile_id = nil
profile_id = meta.params[:name] unless meta.nil?
Inspec::ProfileContext.new(profile_id, @backend, @conf.merge(options))
end end
def add_content(tests, libs, options = {}) def add_content(tests, libs, options = {})
@ -101,6 +104,11 @@ module Inspec
ctx.reload_dsl ctx.reload_dsl
end end
# hand the context to the profile for further evaluation
unless (profile = options['profile']).nil?
profile.runner_context = ctx
end
# evaluate the test content # evaluate the test content
tests = [tests] unless tests.is_a? Array tests = [tests] unless tests.is_a? Array
tests.each { |t| add_test_to_context(t, ctx) } tests.each { |t| add_test_to_context(t, ctx) }
@ -124,7 +132,10 @@ module Inspec
def filter_controls(controls_map, include_list) def filter_controls(controls_map, include_list)
return controls_map if include_list.nil? || include_list.empty? return controls_map if include_list.nil? || include_list.empty?
controls_map.select { |k, _| include_list.include?(k) } controls_map.select do |_, c|
id = ::Inspec::Rule.rule_id(c)
include_list.include?(id)
end
end end
def block_source_info(block) def block_source_info(block)
@ -186,7 +197,7 @@ module Inspec
# scope. # scope.
dsl = Inspec::Resource.create_dsl(backend) dsl = Inspec::Resource.create_dsl(backend)
example.send(:include, dsl) example.send(:include, dsl)
@test_collector.add_test(example, rule_id, rule) @test_collector.add_test(example, rule)
end end
end end
end end

View file

@ -14,7 +14,7 @@ module Inspec
@profiles.push(profile) @profiles.push(profile)
end end
def add_test(example, _rule_id, _rule) def add_test(example, _rule)
@tests.push(example) @tests.push(example)
end end

View file

@ -7,10 +7,8 @@ require 'rspec/its'
require 'inspec/rspec_json_formatter' require 'inspec/rspec_json_formatter'
# There be dragons!! Or borgs, or something... # There be dragons!! Or borgs, or something...
# This file and all its contents cannot yet be tested. Once it is included # This file and all its contents cannot be unit-tested. both test-suits
# in our unit test suite, it deactivates all other checks completely. # collide and disable all unit tests that have been added.
# To circumvent this, we need functional tests which tackle the RSpec runner
# or a separate suite of unit tests to which get along with this.
module Inspec module Inspec
class RunnerRspec class RunnerRspec
@ -35,7 +33,7 @@ module Inspec
# @return [nil] # @return [nil]
def add_profile(profile) def add_profile(profile)
RSpec.configuration.formatters RSpec.configuration.formatters
.find_all { |c| c.is_a? InspecRspecFormatter } .find_all { |c| c.is_a? InspecRspecJson }
.each do |fmt| .each do |fmt|
fmt.add_profile(profile) fmt.add_profile(profile)
end end
@ -46,8 +44,8 @@ module Inspec
# @param [RSpecExampleGroup] example test # @param [RSpecExampleGroup] example test
# @param [String] rule_id the ID associated with this check # @param [String] rule_id the ID associated with this check
# @return [nil] # @return [nil]
def add_test(example, rule_id, rule) def add_test(example, rule)
set_rspec_ids(example, rule_id, rule) set_rspec_ids(example, rule)
@tests.example_groups.push(example) @tests.example_groups.push(example)
end end
@ -83,6 +81,12 @@ module Inspec
RSpec.configuration.reset RSpec.configuration.reset
end end
FORMATTERS = {
'json-min' => 'InspecRspecMiniJson',
'json' => 'InspecRspecJson',
'json-rspec' => 'InspecRspecVanilla',
}.freeze
# Configure the output formatter and stream to be used with RSpec. # Configure the output formatter and stream to be used with RSpec.
# #
# @return [nil] # @return [nil]
@ -93,8 +97,7 @@ module Inspec
RSpec.configuration.output_stream = @conf['output'] RSpec.configuration.output_stream = @conf['output']
end end
format = @conf['format'] || 'progress' format = FORMATTERS[@conf['format']] || @conf['format'] || 'progress'
format = 'InspecRspecFormatter' if format == 'fulljson'
RSpec.configuration.add_formatter(format) RSpec.configuration.add_formatter(format)
RSpec.configuration.color = @conf['color'] RSpec.configuration.color = @conf['color']
@ -111,27 +114,26 @@ module Inspec
# by the InSpec adjusted json formatter (rspec_json_formatter). # by the InSpec adjusted json formatter (rspec_json_formatter).
# #
# @param [RSpecExampleGroup] example object which contains a check # @param [RSpecExampleGroup] example object which contains a check
# @param [Type] id describe id
# @return [Type] description of returned object # @return [Type] description of returned object
def set_rspec_ids(example, id, rule) def set_rspec_ids(example, rule)
example.metadata[:id] = id assign_rspec_ids(example.metadata, rule)
example.metadata[:impact] = rule.impact
example.metadata[:title] = rule.title
example.metadata[:desc] = rule.desc
example.metadata[:code] = rule.instance_variable_get(:@__code)
example.metadata[:source_location] = rule.instance_variable_get(:@__source_location)
example.filtered_examples.each do |e| example.filtered_examples.each do |e|
e.metadata[:id] = id assign_rspec_ids(e.metadata, rule)
e.metadata[:impact] = rule.impact
e.metadata[:title] = rule.title
e.metadata[:desc] = rule.desc
e.metadata[:code] = rule.instance_variable_get(:@__code)
e.metadata[:source_location] = rule.instance_variable_get(:@__source_location)
end end
example.children.each do |child| example.children.each do |child|
set_rspec_ids(child, id, rule) set_rspec_ids(child, rule)
end end
end end
def assign_rspec_ids(metadata, rule)
metadata[:id] = ::Inspec::Rule.rule_id(rule)
metadata[:profile_id] = ::Inspec::Rule.profile_id(rule)
metadata[:impact] = rule.impact
metadata[:title] = rule.title
metadata[:desc] = rule.desc
metadata[:code] = rule.instance_variable_get(:@__code)
metadata[:source_location] = rule.instance_variable_get(:@__source_location)
end
end end
class RSpecReporter < RSpec::Core::Formatters::JsonFormatter class RSpecReporter < RSpec::Core::Formatters::JsonFormatter

View file

@ -45,8 +45,6 @@ module Inspec
end end
def self.exec_options def self.exec_options
option :id, type: :string,
desc: 'Attach a profile ID to all test results'
target_options target_options
profile_options profile_options
option :controls, type: :array, option :controls, type: :array,

View file

@ -20,6 +20,7 @@ module FunctionalHelper
let(:examples_path) { File.join(repo_path, 'examples') } let(:examples_path) { File.join(repo_path, 'examples') }
let(:example_profile) { File.join(examples_path, 'profile') } let(:example_profile) { File.join(examples_path, 'profile') }
let(:example_control) { File.join(example_profile, 'controls', 'example.rb') }
let(:inheritance_profile) { File.join(examples_path, 'profile') } let(:inheritance_profile) { File.join(examples_path, 'profile') }
let(:dst) { let(:dst) {

View file

@ -44,6 +44,6 @@ describe 'example inheritance profile' do
s = out.stdout s = out.stdout
hm = JSON.load(s) hm = JSON.load(s)
hm['name'].must_equal 'inheritance' hm['name'].must_equal 'inheritance'
hm['rules'].length.must_equal 1 # TODO: flatten out or search deeper! hm['controls'].length.must_equal 3
end end
end end

View file

@ -0,0 +1,122 @@
# encoding: utf-8
# author: Dominik Richter
# author: Christoph Hartmann
require 'functional/helper'
describe 'inspec exec with json formatter' do
include FunctionalHelper
it 'can execute a simple file with the json formatter' do
out = inspec('exec ' + example_control + ' --format json')
out.stderr.must_equal ''
out.exit_status.must_equal 0
JSON.load(out.stdout).must_be_kind_of Hash
end
it 'can execute the profile with the json formatter' do
out = inspec('exec ' + example_profile + ' --format json')
out.stderr.must_equal ''
out.exit_status.must_equal 0
JSON.load(out.stdout).must_be_kind_of Hash
end
describe 'execute a profile with json formatting' do
let(:json) { JSON.load(inspec('exec ' + example_profile + ' --format json').stdout) }
let(:profile) { json['profiles']['profile'] }
let(:controls) { profile['controls'] }
let(:ex1) { controls['tmp-1.0'] }
let(:ex2) {
k = controls.keys.find { |x| x =~ /generated/ }
controls[k]
}
let(:ex3) { profile['controls']['gordon-1.0'] }
let(:check_result) {
ex3['results'].find { |x| x['resource'] == 'gordon_config' }
}
it 'has all the metadata' do
actual = profile.dup
key = actual.delete('controls').keys
.find { |x| x =~ /generated from example.rb/ }
actual.must_equal({
"name" => "profile",
"title" => "InSpec Example Profile",
"maintainer" => "Chef Software, Inc.",
"copyright" => "Chef Software, Inc.",
"copyright_email" => "support@chef.io",
"license" => "Apache 2 license",
"summary" => "Demonstrates the use of InSpec Compliance Profile",
"version" => "1.0.0",
"supports" => [{"os-family" => "unix"}],
"groups" => {
"controls/meta.rb" => {"title"=>"SSH Server Configuration", "controls"=>["ssh-1"]},
"controls/example.rb" => {"title"=>"/tmp profile", "controls"=>["tmp-1.0", key]},
"controls/gordon.rb" => {"title"=>"Gordon Config Checks", "controls"=>["gordon-1.0"]},
},
})
end
it 'must have 4 controls' do
controls.length.must_equal 4
end
it 'has an id for every control' do
controls.keys.find(&:nil?).must_be :nil?
end
it 'has no missing checks' do
json['other_checks'].must_equal([])
end
it 'has results for every control' do
ex1['results'].length.must_equal 1
ex2['results'].length.must_equal 1
ex3['results'].length.must_equal 2
end
it 'has the right result for tmp-1.0' do
actual = ex1.dup
src = actual.delete('source_location')
src[0].must_match %r{examples/profile/controls/example.rb$}
src[1].must_equal 8
result = actual.delete('results')[0]
result.wont_be :nil?
result['status'].must_equal 'passed'
result['code_desc'].must_equal 'File /tmp should be directory'
result['run_time'].wont_be :nil?
result['start_time'].wont_be :nil?
actual.must_equal({
"title" => "Create /tmp directory",
"desc" => "An optional description...",
"impact" => 0.7,
"refs" => [
{
"url" => "http://...",
"ref" => "Document A-12"
}
],
"tags" => {
"data" => "temp data",
"security" => nil
},
"code" => "control \"tmp-1.0\" do # A unique ID for this control\n impact 0.7 # The criticality, if this control fails.\n title \"Create /tmp directory\" # A human-readable title\n desc \"An optional description...\" # Describe why this is needed\n tag data: \"temp data\" # A tag allows you to associate key information\n tag \"security\" # to the test\n ref \"Document A-12\", url: 'http://...' # Additional references\n\n describe file('/tmp') do # The actual test\n it { should be_directory }\n end\nend\n",
})
end
end
describe 'with a profile that is not supported on this OS/platform' do
let(:out) { inspec('exec ' + File.join(profile_path, 'skippy-profile-os') + ' --format json') }
let(:json) { JSON.load(out.stdout) }
# TODO: failure handling in json formatters...
it 'never runs the actual resource' do
File.exist?('/tmp/inspec_test_DONT_CREATE').must_equal false
end
end
end

View file

@ -22,15 +22,13 @@ describe 'inspec exec' do
out.stdout.must_include '1 example, 0 failures' out.stdout.must_include '1 example, 0 failures'
end end
it 'can execute the profile with the json formatter' do it 'can execute the profile with the mini json formatter' do
out = inspec('exec ' + example_profile + ' --format json') out = inspec('exec ' + example_profile + ' --format json-min')
out.stderr.must_equal '' out.stderr.must_equal ''
out.exit_status.must_equal 0 out.exit_status.must_equal 0
JSON.load(out.stdout).must_be_kind_of Hash JSON.load(out.stdout).must_be_kind_of Hash
end end
let(:example_control) { File.join(example_profile, 'controls', 'example.rb') }
it 'can execute a simple file with the default formatter' do it 'can execute a simple file with the default formatter' do
out = inspec('exec ' + example_control) out = inspec('exec ' + example_control)
out.stderr.must_equal '' out.stderr.must_equal ''
@ -38,126 +36,45 @@ describe 'inspec exec' do
out.stdout.must_include '2 examples, 0 failures' out.stdout.must_include '2 examples, 0 failures'
end end
it 'can execute a simple file with the json formatter' do it 'can execute a simple file with the mini json formatter' do
out = inspec('exec ' + example_control + ' --format json') out = inspec('exec ' + example_control + ' --format json-min')
out.stderr.must_equal '' out.stderr.must_equal ''
out.exit_status.must_equal 0 out.exit_status.must_equal 0
JSON.load(out.stdout).must_be_kind_of Hash JSON.load(out.stdout).must_be_kind_of Hash
end end
it 'can execute a simple file with the fulljson formatter' do describe 'execute a profile with mini json formatting' do
out = inspec('exec ' + example_control + ' --format fulljson') let(:json) { JSON.load(inspec('exec ' + example_profile + ' --format json-min').stdout) }
out.stderr.must_equal '' let(:controls) { json['controls'] }
out.exit_status.must_equal 0 let(:ex1) { controls.find{|x| x['id'] == 'tmp-1.0'} }
JSON.load(out.stdout).must_be_kind_of Hash let(:ex2) { controls.find{|x| x['id'] =~ /generated/} }
end let(:ex3) { controls.find{|x| x['id'] == 'gordon-1.0'} }
describe 'execute a profile with json formatting' do
let(:json) { JSON.load(inspec('exec ' + example_profile + ' --format json').stdout) }
let(:examples) { json['examples'] }
let(:ex1) { examples.find{|x| x['id'] == 'tmp-1.0'} }
let(:ex2) { examples.find{|x| x['id'] =~ /generated/} }
let(:ex3) { examples.find{|x| x['id'] == 'gordon-1.0'} }
it 'must have 5 examples' do it 'must have 5 examples' do
json['examples'].length.must_equal 5 json['controls'].length.must_equal 5
end end
it 'id in json' do it 'has an id' do
examples.find { |ex| !ex.key? 'id' }.must_be :nil? controls.find { |ex| !ex.key? 'id' }.must_be :nil?
end end
it 'impact in json' do it 'has a profile_id' do
ex1['impact'].must_equal 0.7 controls.find { |ex| !ex.key? 'profile_id' }.must_be :nil?
ex2['impact'].must_be :nil?
end end
it 'status in json' do it 'has a code_desc' do
ex1['code_desc'].must_equal 'File /tmp should be directory'
controls.find { |ex| !ex.key? 'code_desc' }.must_be :nil?
end
it 'has a status' do
ex1['status'].must_equal 'passed' ex1['status'].must_equal 'passed'
ex3['status'].must_equal 'pending' ex3['status'].must_equal 'skipped'
end end
it 'pending message in json' do it 'has a skip_message' do
ex1['pending_message'].must_be :nil? ex1['skip_message'].must_be :nil?
ex3['pending_message'].must_equal 'Not yet implemented' ex3['skip_message'].must_equal "Can't find file \"/tmp/gordon/config.yaml\""
end
end
describe 'execute a profile with fulljson formatting' do
let(:json) { JSON.load(inspec('exec ' + example_profile + ' --format fulljson').stdout) }
let(:examples) { json['examples'] }
let(:metadata) { json['profiles'][0] }
let(:ex1) { examples.find{|x| x['id'] == 'tmp-1.0'} }
let(:ex2) { examples.find{|x| x['id'] =~ /generated/} }
let(:ex3) { examples.find{|x| x['id'] == 'gordon-1.0'} }
it 'has all the metadata' do
metadata.must_equal({
"name" => "profile",
"title" => "InSpec Example Profile",
"maintainer" => "Chef Software, Inc.",
"copyright" => "Chef Software, Inc.",
"copyright_email" => "support@chef.io",
"license" => "Apache 2 license",
"summary" => "Demonstrates the use of InSpec Compliance Profile",
"version" => "1.0.0",
"supports" => [{"os-family" => "unix"}]
})
end
it 'must have 5 examples' do
json['examples'].length.must_equal 5
end
it 'id in json' do
examples.find { |ex| !ex.key? 'id' }.must_be :nil?
end
it 'title in json' do
ex3['title'].must_equal 'Verify the version number of Gordon'
end
it 'desc in json' do
ex3['desc'].must_equal 'An optional description...'
end
it 'code in json' do
ex3['code'].wont_be :nil?
end
it 'code_desc in json' do
ex3['code_desc'].wont_be :nil?
end
it 'impact in json' do
ex1['impact'].must_equal 0.7
ex2['impact'].must_be :nil?
end
it 'status in json' do
ex1['status'].must_equal 'passed'
ex3['status'].must_equal 'pending'
end
it 'ref in json' do
ex1['ref'].must_match %r{examples/profile/controls/example.rb$}
end
it 'ref_line in json' do
ex1['ref_line'].must_equal 16
end
it 'run_time in json' do
ex1['run_time'].wont_be :nil?
end
it 'start_time in json' do
ex1['start_time'].wont_be :nil?
end
it 'pending message in json' do
ex1['pending'].must_be :nil?
ex3['pending'].must_equal "Can't find file \"/tmp/gordon/config.yaml\""
end end
end end
@ -171,17 +88,6 @@ describe 'inspec exec' do
end end
end end
describe 'with a profile that is not supported on this OS/platform' do
let(:out) { inspec('exec ' + File.join(profile_path, 'skippy-profile-os') + ' --format fulljson') }
let(:json) { JSON.load(out.stdout) }
# TODO: failure handling in json formatters...
it 'never runs the actual resource' do
File.exist?('/tmp/inspec_test_DONT_CREATE').must_equal false
end
end
describe 'with a profile that is supported on this version of inspec' do describe 'with a profile that is supported on this version of inspec' do
let(:out) { inspec('exec ' + File.join(profile_path, 'supported_inspec')) } let(:out) { inspec('exec ' + File.join(profile_path, 'supported_inspec')) }

View file

@ -42,36 +42,36 @@ describe 'inspec json' do
json['copyright'].must_equal 'Chef Software, Inc.' json['copyright'].must_equal 'Chef Software, Inc.'
end end
it 'has rules' do it 'has controls' do
json['rules'].length.must_equal 3 # TODO: flatten out or search deeper! json['controls'].length.must_equal 4
end end
describe 'a rule' do describe 'a control' do
let(:rule) { json['rules']['controls/example.rb']['rules']['tmp-1.0'] } let(:control) { json['controls']['tmp-1.0'] }
it 'has a title' do it 'has a title' do
rule['title'].must_equal 'Create /tmp directory' control['title'].must_equal 'Create /tmp directory'
end end
it 'has a description' do it 'has a description' do
rule['desc'].must_equal 'An optional description...' control['desc'].must_equal 'An optional description...'
end end
it 'has an impact' do it 'has an impact' do
rule['impact'].must_equal 0.7 control['impact'].must_equal 0.7
end end
it 'has a ref' do it 'has a ref' do
rule['refs'].must_equal([{'ref' => 'Document A-12', 'url' => 'http://...'}]) control['refs'].must_equal([{'ref' => 'Document A-12', 'url' => 'http://...'}])
end end
it 'has a source location' do it 'has a source location' do
loc = File.join(example_profile, '/controls/example.rb') loc = File.join(example_profile, '/controls/example.rb')
rule['source_location'].must_equal [loc, 8] control['source_location'].must_equal [loc, 8]
end end
it 'has a the source code' do it 'has a the source code' do
rule['code'].must_match /\Acontrol \"tmp-1.0\" do.*end\n\Z/m control['code'].must_match /\Acontrol \"tmp-1.0\" do.*end\n\Z/m
end end
end end
end end
@ -86,10 +86,8 @@ describe 'inspec json' do
it 'only has one control included' do it 'only has one control included' do
json = JSON.load(out.stdout) json = JSON.load(out.stdout)
grps = json['rules'] json['controls'].keys.must_equal %w{tmp-1.0}
grps.keys.must_equal ['controls/example.rb'] json['groups'].keys.must_equal %w{controls/example.rb}
rules = grps.values[0]['rules']
rules.keys.must_equal ['tmp-1.0']
end end
end end
@ -99,6 +97,6 @@ describe 'inspec json' do
out.exit_status.must_equal 0 out.exit_status.must_equal 0
hm = JSON.load(File.read(dst.path)) hm = JSON.load(File.read(dst.path))
hm['name'].must_equal 'profile' hm['name'].must_equal 'profile'
hm['rules'].length.must_equal 3 # TODO: flatten out or search deeper! hm['controls'].length.must_equal 4
end end
end end

View file

@ -12,7 +12,7 @@ describe 'controls' do
} }
opts = { test_collector: Inspec::RunnerMock.new } opts = { test_collector: Inspec::RunnerMock.new }
Inspec::Profile.for_target(data, opts) Inspec::Profile.for_target(data, opts)
.params[:rules].values[0]['1'] .params[:controls]['1']
end end
it 'works with empty refs' do it 'works with empty refs' do

View file

@ -177,13 +177,13 @@ describe Inspec::ProfileContext do
it 'provides the control keyword in the global DSL' do it 'provides the control keyword in the global DSL' do
profile.load('control 1') profile.load('control 1')
profile.rules.keys.must_equal [1] profile.rules.keys.must_equal ['1']
profile.rules.values[0].must_be_kind_of Inspec::Rule profile.rules.values[0].must_be_kind_of Inspec::Rule
end end
it 'provides the rule keyword in the global DSL (legacy mode)' do it 'provides the rule keyword in the global DSL (legacy mode)' do
profile.load('rule 1') profile.load('rule 1')
profile.rules.keys.must_equal [1] profile.rules.keys.must_equal ['1']
profile.rules.values[0].must_be_kind_of Inspec::Rule profile.rules.values[0].must_be_kind_of Inspec::Rule
end end
end end

View file

@ -16,8 +16,8 @@ describe Inspec::Profile do
profile.params[:name].must_be_nil profile.params[:name].must_be_nil
end end
it 'has no rules' do it 'has no controls' do
profile.params[:rules].must_equal({}) profile.params[:controls].must_equal({})
end end
end end
@ -28,8 +28,8 @@ describe Inspec::Profile do
profile.params[:name].must_be_nil profile.params[:name].must_be_nil
end end
it 'has no rules' do it 'has no controls' do
profile.params[:rules].must_equal({}) profile.params[:controls].must_equal({})
end end
end end
@ -41,8 +41,8 @@ describe Inspec::Profile do
profile.params[:name].must_equal 'yumyum profile' profile.params[:name].must_equal 'yumyum profile'
end end
it 'has no rules' do it 'has no controls' do
profile.params[:rules].must_equal({}) profile.params[:controls].must_equal({})
end end
it 'can overwrite the profile ID' do it 'can overwrite the profile ID' do
@ -59,8 +59,8 @@ describe Inspec::Profile do
profile.params[:name].must_equal 'metadata profile' profile.params[:name].must_equal 'metadata profile'
end end
it 'has no rules' do it 'has no controls' do
profile.params[:rules].must_equal({}) profile.params[:controls].must_equal({})
end end
end end
@ -179,11 +179,10 @@ describe Inspec::Profile do
describe 'a complete metadata profile with controls' do describe 'a complete metadata profile with controls' do
let(:profile_id) { 'complete-profile' } let(:profile_id) { 'complete-profile' }
it 'prints ok messages and counts the rules' do it 'prints ok messages and counts the controls' do
logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"] logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"]
logger.expect :info, nil, ['Metadata OK.'] logger.expect :info, nil, ['Metadata OK.']
logger.expect :info, nil, ['Found 1 controls.'] logger.expect :info, nil, ['Found 1 controls.']
logger.expect :info, nil, ["Verify all controls in controls/filesystem_spec.rb"]
logger.expect :info, nil, ['Control definitions OK.'] logger.expect :info, nil, ['Control definitions OK.']
result = MockLoader.load_profile(profile_id, {logger: logger}).check result = MockLoader.load_profile(profile_id, {logger: logger}).check
@ -205,11 +204,10 @@ describe Inspec::Profile do
let(:profile_path) { MockLoader.profile_tgz(profile_id) } let(:profile_path) { MockLoader.profile_tgz(profile_id) }
let(:profile) { MockLoader.load_profile(profile_path, {logger: logger}) } let(:profile) { MockLoader.load_profile(profile_path, {logger: logger}) }
it 'prints ok messages and counts the rules' do it 'prints ok messages and counts the controls' do
logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"] logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"]
logger.expect :info, nil, ['Metadata OK.'] logger.expect :info, nil, ['Metadata OK.']
logger.expect :info, nil, ['Found 1 controls.'] logger.expect :info, nil, ['Found 1 controls.']
logger.expect :info, nil, ["Verify all controls in controls/filesystem_spec.rb"]
logger.expect :info, nil, ['Control definitions OK.'] logger.expect :info, nil, ['Control definitions OK.']
result = MockLoader.load_profile(profile_id, {logger: logger}).check result = MockLoader.load_profile(profile_id, {logger: logger}).check
@ -231,11 +229,10 @@ describe Inspec::Profile do
let(:profile_path) { MockLoader.profile_zip(profile_id) } let(:profile_path) { MockLoader.profile_zip(profile_id) }
let(:profile) { MockLoader.load_profile(profile_path, {logger: logger}) } let(:profile) { MockLoader.load_profile(profile_path, {logger: logger}) }
it 'prints ok messages and counts the rules' do it 'prints ok messages and counts the controls' do
logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"] logger.expect :info, nil, ["Checking profile in #{home}/mock/profiles/#{profile_id}"]
logger.expect :info, nil, ['Metadata OK.'] logger.expect :info, nil, ['Metadata OK.']
logger.expect :info, nil, ['Found 1 controls.'] logger.expect :info, nil, ['Found 1 controls.']
logger.expect :info, nil, ["Verify all controls in controls/filesystem_spec.rb"]
logger.expect :info, nil, ['Control definitions OK.'] logger.expect :info, nil, ['Control definitions OK.']
result = MockLoader.load_profile(profile_id, {logger: logger}).check result = MockLoader.load_profile(profile_id, {logger: logger}).check