forked from trufflesecurity/trufflehog
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[Analyzer] Test and generated permissions for HuggingFace, Square & S…
…tripe (trufflesecurity#3294) * stripe analyzer unit test * add huggingface analyzer unit test * add permissions.yaml for huggingface and fix in analyzer * square permissions generated * permissions generated for stripe * change permissions to lowercase * skip unknown permissions for square and stripe --------- Co-authored-by: Abdul Basit <[email protected]>
- Loading branch information
1 parent
2f3a410
commit 3e46b3f
Showing
12 changed files
with
1,302 additions
and
19 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| package huggingface | ||
|
|
||
| import ( | ||
| "encoding/json" | ||
| "testing" | ||
| "time" | ||
|
|
||
| "github.com/trufflesecurity/trufflehog/v3/pkg/analyzer/analyzers" | ||
| "github.com/trufflesecurity/trufflehog/v3/pkg/analyzer/config" | ||
| "github.com/trufflesecurity/trufflehog/v3/pkg/common" | ||
| "github.com/trufflesecurity/trufflehog/v3/pkg/context" | ||
| ) | ||
|
|
||
| func TestAnalyzer_Analyze(t *testing.T) { | ||
| ctx, cancel := context.WithTimeout(context.Background(), time.Second*5) | ||
| defer cancel() | ||
| testSecrets, err := common.GetSecret(ctx, "trufflehog-testing", "detectors5") | ||
| if err != nil { | ||
| t.Fatalf("could not get test secrets from GCP: %s", err) | ||
| } | ||
|
|
||
| tests := []struct { | ||
| name string | ||
| key string | ||
| want string // JSON string | ||
| wantErr bool | ||
| }{ | ||
| { | ||
| name: "valid Huggingface key", | ||
| key: testSecrets.MustGetField("HUGGINGFACE"), | ||
| want: `{ | ||
| "AnalyzerType":6, | ||
| "Bindings":[ | ||
| { | ||
| "Resource":{ | ||
| "Name":"zubairkhan/test", | ||
| "FullyQualifiedName": "huggingface.com/model/64d8220c0d879296892ab835", | ||
| "Type":"model", | ||
| "Metadata":{ | ||
| "private":false | ||
| }, | ||
| "Parent":null | ||
| }, | ||
| "Permission":{ | ||
| "Value":"Read", | ||
| "Parent":null | ||
| } | ||
| }, | ||
| { | ||
| "Resource":{ | ||
| "Name":"zubairkhan/first_repo", | ||
| "FullyQualifiedName": "huggingface.com/model/64d82349a787c9bc7bbb2ab4", | ||
| "Type":"model", | ||
| "Metadata":{ | ||
| "private":true | ||
| }, | ||
| "Parent":null | ||
| }, | ||
| "Permission":{ | ||
| "Value":"Read", | ||
| "Parent":null | ||
| } | ||
| } | ||
| ], | ||
| "UnboundedResources":null, | ||
| "Metadata":{ | ||
| "name":"Zubair Khan", | ||
| "token_name":"another_one", | ||
| "token_type":"read", | ||
| "username":"zubairkhan" | ||
| } | ||
| }`, | ||
| wantErr: false, | ||
| }, | ||
| } | ||
|
|
||
| for _, tt := range tests { | ||
| t.Run(tt.name, func(t *testing.T) { | ||
| a := Analyzer{Cfg: &config.Config{}} | ||
| got, err := a.Analyze(ctx, map[string]string{"key": tt.key}) | ||
| if (err != nil) != tt.wantErr { | ||
| t.Errorf("Analyzer.Analyze() error = %v, wantErr %v", err, tt.wantErr) | ||
| return | ||
| } | ||
|
|
||
| // Marshal the actual result to JSON | ||
| gotJSON, err := json.Marshal(got) | ||
| if err != nil { | ||
| t.Fatalf("could not marshal got to JSON: %s", err) | ||
| } | ||
|
|
||
| // Parse the expected JSON string | ||
| var wantObj analyzers.AnalyzerResult | ||
| if err := json.Unmarshal([]byte(tt.want), &wantObj); err != nil { | ||
| t.Fatalf("could not unmarshal want JSON string: %s", err) | ||
| } | ||
|
|
||
| // Marshal the expected result to JSON (to normalize) | ||
| wantJSON, err := json.Marshal(wantObj) | ||
| if err != nil { | ||
| t.Fatalf("could not marshal want to JSON: %s", err) | ||
| } | ||
|
|
||
| // Compare the JSON strings | ||
| if string(gotJSON) != string(wantJSON) { | ||
| // Pretty-print both JSON strings for easier comparison | ||
| var gotIndented, wantIndented []byte | ||
| gotIndented, err = json.MarshalIndent(got, "", " ") | ||
| if err != nil { | ||
| t.Fatalf("could not marshal got to indented JSON: %s", err) | ||
| } | ||
| wantIndented, err = json.MarshalIndent(wantObj, "", " ") | ||
| if err != nil { | ||
| t.Fatalf("could not marshal want to indented JSON: %s", err) | ||
| } | ||
| t.Errorf("Analyzer.Analyze() = %s, want %s", gotIndented, wantIndented) | ||
| } | ||
| }) | ||
| } | ||
| } |
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,3 @@ | ||
| permissions: | ||
| - read | ||
| - write |
Oops, something went wrong.