code-secure-gitleaks/analyzer_test.go at main · califio/code-secure-gitleaks · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
package main

import (
	"fmt"
	"github.com/califio/code-secure-analyzer"
	"gitleaks/gitleaks"
	"os"
	"sync"
	"testing"
)

var wg = sync.WaitGroup{}

func initEnv() {
	os.Setenv("GITLAB_CI", "true")
	os.Setenv("GITLAB_TOKEN", "change_me")
	os.Setenv("CI_SERVER_URL", "https://gitlab.com")
	//os.Setenv("CI_MERGE_REQUEST_IID", "18")
	os.Setenv("CI_PROJECT_ID", "50471841")
	os.Setenv("CI_PROJECT_URL", "https://gitlab.com/0xduo/vulnado2")
	os.Setenv("CI_PROJECT_NAME", "vulnado2")
	os.Setenv("CI_PROJECT_NAMESPACE", "0xduo")
	os.Setenv("CI_COMMIT_TITLE", "Commit Test2")
	os.Setenv("CI_COMMIT_BRANCH", "main")
	os.Setenv("CI_DEFAULT_BRANCH", "main")
	os.Setenv("CI_JOB_URL", "https://gitlab.com/0xduo/vulnado/-/jobs/8241092355")
	os.Setenv("CI_COMMIT_SHA", "891832b2fdecb72c444af1a6676eba6eb40435ab")
	os.Setenv("CODE_SECURE_TOKEN", "9af180b4f79c496791a7ed0130efbdf8122f2b7546c54f01946a3ef28beebcc0")
	os.Setenv("CODE_SECURE_URL", "http://localhost:5272")
}

func TestParseResult(t *testing.T) {
	reader, err := os.Open("testdata/gitleaks.json")
	if err != nil {
		t.Fatal(err)
	}
	secrets, err := gitleaks.FromJson(reader)
	if err != nil {
		t.Fatal(err)
	}
	for _, secret := range secrets {
		fmt.Println(secret.File)
		fmt.Println(secret.Secret)
		fmt.Println("---")
	}
}

func TestScanAnalyzer(t *testing.T) {
	initEnv()
	newAnalyzer := analyzer.NewSastAnalyzer(analyzer.SastAnalyzerOption{
		ProjectPath: "/Users/duo/Downloads/vulnado",
		Scanner: &gitleaks.Scanner{
			Output:      "gitleaks.json",
			ProjectPath: "/Users/duo/Downloads/vulnado",
		},
	})
	// run
	newAnalyzer.Run()
	wg.Done()
}

func TestConcurrentScanAnalyzer(t *testing.T) {
	for i := 0; i < 3; i++ {
		wg.Add(1)
		go TestScanAnalyzer(t)
	}
	wg.Wait()
}