mirror of
https://github.com/trufflesecurity/trufflehog.git
synced 2024-11-10 15:14:38 +00:00
118 lines
2.8 KiB
Go
118 lines
2.8 KiB
Go
|
package fibery
|
||
|
|
||
|
import (
|
||
|
"context"
|
||
|
"fmt"
|
||
|
"testing"
|
||
|
"time"
|
||
|
|
||
|
"github.com/kylelemons/godebug/pretty"
|
||
|
"github.com/trufflesecurity/trufflehog/v3/pkg/detectors"
|
||
|
|
||
|
"github.com/trufflesecurity/trufflehog/v3/pkg/common"
|
||
|
"github.com/trufflesecurity/trufflehog/v3/pkg/pb/detectorspb"
|
||
|
)
|
||
|
|
||
|
func TestFibery_FromChunk(t *testing.T) {
|
||
|
ctx, cancel := context.WithTimeout(context.Background(), time.Second*5)
|
||
|
defer cancel()
|
||
|
testSecrets, err := common.GetSecret(ctx, "trufflehog-testing", "detectors3")
|
||
|
if err != nil {
|
||
|
t.Fatalf("could not get test secrets from GCP: %s", err)
|
||
|
}
|
||
|
secret := testSecrets.MustGetField("FIBERY")
|
||
|
domain := testSecrets.MustGetField("FIBERY_DOMAIN")
|
||
|
inactiveSecret := testSecrets.MustGetField("FIBERY_INACTIVE")
|
||
|
|
||
|
type args struct {
|
||
|
ctx context.Context
|
||
|
data []byte
|
||
|
verify bool
|
||
|
}
|
||
|
tests := []struct {
|
||
|
name string
|
||
|
s Scanner
|
||
|
args args
|
||
|
want []detectors.Result
|
||
|
wantErr bool
|
||
|
}{
|
||
|
{
|
||
|
name: "found, verified",
|
||
|
s: Scanner{},
|
||
|
args: args{
|
||
|
ctx: context.Background(),
|
||
|
data: []byte(fmt.Sprintf("You can find a fibery secret %s within fibery domain %s ", secret, domain)),
|
||
|
verify: true,
|
||
|
},
|
||
|
want: []detectors.Result{
|
||
|
{
|
||
|
DetectorType: detectorspb.DetectorType_Fibery,
|
||
|
Verified: true,
|
||
|
},
|
||
|
},
|
||
|
wantErr: false,
|
||
|
},
|
||
|
{
|
||
|
name: "found, unverified",
|
||
|
s: Scanner{},
|
||
|
args: args{
|
||
|
ctx: context.Background(),
|
||
|
data: []byte(fmt.Sprintf("You can find a fibery secret %s within fibery domain %s but not valid", inactiveSecret, domain)), // the secret would satisfy the regex but not pass validation
|
||
|
verify: true,
|
||
|
},
|
||
|
want: []detectors.Result{
|
||
|
{
|
||
|
DetectorType: detectorspb.DetectorType_Fibery,
|
||
|
Verified: false,
|
||
|
},
|
||
|
},
|
||
|
wantErr: false,
|
||
|
},
|
||
|
{
|
||
|
name: "not found",
|
||
|
s: Scanner{},
|
||
|
args: args{
|
||
|
ctx: context.Background(),
|
||
|
data: []byte("You cannot find the secret within"),
|
||
|
verify: true,
|
||
|
},
|
||
|
want: nil,
|
||
|
wantErr: false,
|
||
|
},
|
||
|
}
|
||
|
for _, tt := range tests {
|
||
|
t.Run(tt.name, func(t *testing.T) {
|
||
|
s := Scanner{}
|
||
|
got, err := s.FromData(tt.args.ctx, tt.args.verify, tt.args.data)
|
||
|
if (err != nil) != tt.wantErr {
|
||
|
t.Errorf("Fibery.FromData() error = %v, wantErr %v", err, tt.wantErr)
|
||
|
return
|
||
|
}
|
||
|
for i := range got {
|
||
|
if len(got[i].Raw) == 0 {
|
||
|
t.Fatalf("no raw secret present: \n %+v", got[i])
|
||
|
}
|
||
|
got[i].Raw = nil
|
||
|
}
|
||
|
if diff := pretty.Compare(got, tt.want); diff != "" {
|
||
|
t.Errorf("Fibery.FromData() %s diff: (-got +want)\n%s", tt.name, diff)
|
||
|
}
|
||
|
})
|
||
|
}
|
||
|
}
|
||
|
|
||
|
func BenchmarkFromData(benchmark *testing.B) {
|
||
|
ctx := context.Background()
|
||
|
s := Scanner{}
|
||
|
for name, data := range detectors.MustGetBenchmarkData() {
|
||
|
benchmark.Run(name, func(b *testing.B) {
|
||
|
for n := 0; n < b.N; n++ {
|
||
|
_, err := s.FromData(ctx, false, data)
|
||
|
if err != nil {
|
||
|
b.Fatal(err)
|
||
|
}
|
||
|
}
|
||
|
})
|
||
|
}
|
||
|
}
|