admin/brew
1
0
Fork 0
Code Issues Packages Projects Releases 6 Wiki Activity

add multi subject test

Browse Source 
Signed-off-by: William Woodruff <william@yossarian.net>
This commit is contained in:
William Woodruff 2024-12-05 14:26:30 -05:00
parent 9e82563a3a
commit 057a6c5f9b
No known key found for this signature in database
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
Library/Homebrew/test/attestation_spec.rb
View File

@ -34,6 +34,15 @@ RSpec.describe Homebrew::Attestation do
} }, } },
])) ]))
end end
let(:fake_result_json_resp_multi_subject) do
instance_double(SystemCommand::Result,
stdout: JSON.dump([
{ verificationResult: {
verifiedTimestamps: [{ timestamp: "2024-03-13T00:00:00Z" }],
statement: { subject: [{ name: "nonsense" }, { name: fake_bottle_filename.to_s }] },
} },
]))
end
let(:fake_result_json_resp_backfill) do let(:fake_result_json_resp_backfill) do
digest = Digest::SHA256.hexdigest(fake_bottle_url) digest = Digest::SHA256.hexdigest(fake_bottle_url)
instance_double(SystemCommand::Result, instance_double(SystemCommand::Result,
@ -234,6 +243,17 @@ RSpec.describe Homebrew::Attestation do
described_class.check_core_attestation fake_bottle described_class.check_core_attestation fake_bottle
end end
it "calls gh with args for homebrew-core and handles a multi-subject attestation" do
expect(described_class).to receive(:system_command!)
.with(fake_gh, args: ["attestation", "verify", cached_download, "--repo",
described_class::HOMEBREW_CORE_REPO, "--format", "json"],
env: { "GH_TOKEN" => fake_gh_creds, "GH_HOST" => "github.com" }, secrets: [fake_gh_creds],
print_stderr: false, chdir: HOMEBREW_TEMP)
.and_return(fake_result_json_resp_multi_subject)
described_class.check_core_attestation fake_bottle
end
it "calls gh with args for backfill when homebrew-core attestation is missing" do it "calls gh with args for backfill when homebrew-core attestation is missing" do
expect(described_class).to receive(:system_command!) expect(described_class).to receive(:system_command!)
.with(fake_gh, args: ["attestation", "verify", cached_download, "--repo", .with(fake_gh, args: ["attestation", "verify", cached_download, "--repo",