GovOPlaN/govoplan
1
0
Fork 0
Code Issues 11 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(assessment): constrain installed record reads

Browse Source
This commit is contained in:
Albrecht Degering
2026-07-22 18:36:12 +02:00
parent 65aa8e0b7c
commit ead697d049
2 changed files with 45 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
tests/test_capability_fit_evidence.py
View File

@@ -11,6 +11,7 @@ import sys
import tempfile
from types import SimpleNamespace
import unittest
from unittest import mock
from cryptography.hazmat.primitives import serialization
from cryptography.hazmat.primitives.asymmetric.ed25519 import Ed25519PrivateKey
@@ -217,11 +218,12 @@ class CapabilityFitEvidenceTests(unittest.TestCase):
root = Path(temp_dir)
distribution, payload_file = create_distribution(root)
evidence = collect_installed_composition(
assessment=self.assessment,
collected_at=datetime(2026, 7, 22, 12, tzinfo=UTC),
distributions=[distribution],
)
with mock.patch.object(sys, "path", [str(root), *sys.path]):
evidence = collect_installed_composition(
assessment=self.assessment,
collected_at=datetime(2026, 7, 22, 12, tzinfo=UTC),
distributions=[distribution],
)
self.assertEqual(
(), validate_payload(payload=evidence, schema=self.installed_schema)
@@ -234,11 +236,12 @@ class CapabilityFitEvidenceTests(unittest.TestCase):
self.assertNotIn("file://", encoded)
payload_file.write_text("tampered\n", encoding="utf-8")
tampered = collect_installed_composition(
assessment=self.assessment,
collected_at=datetime(2026, 7, 22, 12, tzinfo=UTC),
distributions=[distribution],
)
with mock.patch.object(sys, "path", [str(root), *sys.path]):
tampered = collect_installed_composition(
assessment=self.assessment,
collected_at=datetime(2026, 7, 22, 12, tzinfo=UTC),
distributions=[distribution],
)
self.assertEqual(
"mismatch", tampered["artifacts"][0]["record_integrity"]["status"]