mirror of
https://github.com/inspec/inspec
synced 2024-11-26 22:50:36 +00:00
58 lines
2.1 KiB
Ruby
58 lines
2.1 KiB
Ruby
require "helper"
|
|
require "inspec/resource"
|
|
require "inspec/resources/command"
|
|
require "inspec/resources/os"
|
|
|
|
describe Inspec::Resources::Cmd do
|
|
let(:x) { rand.to_s }
|
|
def resource(command, options = {} )
|
|
load_resource("command", command, options)
|
|
end
|
|
|
|
it "prints as a bash command" do
|
|
_(resource(x).to_s).must_equal "Command: `#{x}`"
|
|
end
|
|
|
|
it "runs a valid mocked command" do
|
|
resource = load_resource("command", "env")
|
|
_(resource.resource_id).must_equal "Command: `env`"
|
|
_(resource.result).wont_be_nil
|
|
_(resource.stdout).must_include "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\n"
|
|
_(resource.stderr).must_equal ""
|
|
_(resource.exit_status).must_equal 0
|
|
end
|
|
|
|
it "exist? returns false on nil os name" do
|
|
Inspec::Resources::OSResource.any_instance.stubs(:name).returns(nil)
|
|
_(resource("test").exist?).must_equal false
|
|
end
|
|
|
|
it "exist? returns false on mock os name" do
|
|
Inspec::Resources::OSResource.any_instance.stubs(:name).returns("mock")
|
|
_(resource("test").exist?).must_equal false
|
|
end
|
|
|
|
it "raises when called with nil as a command" do
|
|
_(proc { resource(nil).result }).must_raise StandardError
|
|
end
|
|
|
|
it "fails the resource if `redact_regex` is not a regular expression" do
|
|
result = resource("env", redact_regex: "string")
|
|
_(result.resource_failed?).must_equal true
|
|
_(result.resource_exception_message).must_match(/must be a regular expression/)
|
|
end
|
|
|
|
it "redacts output if `redact_regex` is passed with capture groups" do
|
|
cmd = "command_with_password -p supersecret -d no_redact"
|
|
resource = load_resource("command", cmd, redact_regex: /(-p ).*( -d)/)
|
|
expected_to_s = "Command: `command_with_password -p REDACTED -d no_redact`"
|
|
_(resource.resource_id).must_equal(expected_to_s)
|
|
_(resource.to_s).must_equal(expected_to_s)
|
|
end
|
|
|
|
it "redacts output if `redact_regex` is passed without a capture group" do
|
|
cmd = "command_with_password -p supersecret -d no_redact"
|
|
expected_to_s = "Command: `command_with_password REDACTED no_redact`"
|
|
_(resource(cmd, redact_regex: /-p .* -d/).to_s).must_equal(expected_to_s)
|
|
end
|
|
end
|