mirror of
https://github.com/inspec/inspec
synced 2024-09-21 23:11:54 +00:00
706493f2f3
* command resource: Allow redacting `#to_s` * Respond to feedback Signed-off-by: Jerry Aldrich <jerryaldrichiii@gmail.com>
56 lines
1.9 KiB
Ruby
56 lines
1.9 KiB
Ruby
# encoding: utf-8
|
|
# author: Christoph Hartmann
|
|
# author: Dominik Richter
|
|
|
|
require 'helper'
|
|
require 'inspec/resource'
|
|
|
|
describe Inspec::Resources::Cmd do
|
|
let(:x) { rand.to_s }
|
|
def resource(command, options = {} )
|
|
load_resource('command', command, options)
|
|
end
|
|
|
|
it 'prints as a bash command' do
|
|
resource(x).to_s.must_equal "Command: `#{x}`"
|
|
end
|
|
|
|
it 'runs a valid mocked command' do
|
|
resource('env').result.wont_be_nil
|
|
resource('env').stdout.must_equal "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\n"
|
|
resource('env').stderr.must_equal ''
|
|
resource('env').exit_status.must_equal 0
|
|
end
|
|
|
|
it 'exist? returns false on nil os name' do
|
|
Inspec::Resources::OSResource.any_instance.stubs(:name).returns(nil)
|
|
resource('test').exist?.must_equal false
|
|
end
|
|
|
|
it 'exist? returns false on mock os name' do
|
|
Inspec::Resources::OSResource.any_instance.stubs(:name).returns('mock')
|
|
resource('test').exist?.must_equal false
|
|
end
|
|
|
|
it 'raises when called with nil as a command' do
|
|
proc { resource(nil).result }.must_raise StandardError
|
|
end
|
|
|
|
it 'fails the resource if `redact_regex` is not a regular expression' do
|
|
result = resource('env', redact_regex: 'string')
|
|
result.resource_failed?.must_equal true
|
|
result.resource_exception_message.must_match /must be a regular expression/
|
|
end
|
|
|
|
it 'redacts output if `redact_regex` is passed with caputure groups' do
|
|
cmd = 'command_with_password -p supersecret -d no_redact'
|
|
expected_to_s = 'Command: `command_with_password -p REDACTED -d no_redact`'
|
|
resource(cmd, redact_regex: /(-p ).*( -d)/).to_s.must_equal(expected_to_s)
|
|
end
|
|
|
|
it 'redacts output if `redact_regex` is passed without a caputure group' do
|
|
cmd = 'command_with_password -p supersecret -d no_redact'
|
|
expected_to_s = 'Command: `command_with_password REDACTED no_redact`'
|
|
resource(cmd, redact_regex: /-p .* -d/).to_s.must_equal(expected_to_s)
|
|
end
|
|
end
|