5b07d38907
Some checks failed
CI / Check (pull_request) Failing after 9m4s
CI / Detect Changes (pull_request) Has been skipped
CI / Deploy Agent (pull_request) Has been skipped
CI / Deploy Dashboard (pull_request) Has been skipped
CI / Deploy Docs (pull_request) Has been skipped
CI / Deploy MCP (pull_request) Has been skipped
E2E Tests: - 17 integration tests covering: health, repos CRUD, findings lifecycle, cascade delete (SAST + DAST + pentest), DAST targets, stats overview - TestServer harness: spins up agent API on random port with isolated MongoDB database per test, auto-cleanup - Added lib.rs to expose agent internals for integration tests - Nightly CI workflow with MongoDB service container (3 AM UTC) Tests verify: - Repository add/list/delete + duplicate rejection + invalid ID handling - Finding creation, filtering by severity/repo, status updates, bulk updates - Cascade delete: repo deletion removes all DAST targets, pentest sessions, attack chain nodes, DAST findings, SAST findings, and SBOM entries - DAST target CRUD and empty finding list - Stats overview accuracy with zero and populated data Also: - Fix Dockerfile.dashboard: bump dioxus-cli 0.7.3 → 0.7.4 (compile fix) - Fix clippy: allow new_without_default for pattern scanners Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
112 lines
3.6 KiB
Rust
112 lines
3.6 KiB
Rust
use crate::common::TestServer;
|
|
use serde_json::json;
|
|
|
|
#[tokio::test]
|
|
async fn stats_overview_reflects_inserted_data() {
|
|
let server = TestServer::start().await;
|
|
|
|
// Add a repo
|
|
server
|
|
.post(
|
|
"/api/v1/repositories",
|
|
&json!({
|
|
"name": "stats-repo",
|
|
"git_url": "https://github.com/example/stats-repo.git",
|
|
}),
|
|
)
|
|
.await;
|
|
|
|
// Insert findings directly
|
|
let mongodb_uri = std::env::var("TEST_MONGODB_URI")
|
|
.unwrap_or_else(|_| "mongodb://root:example@localhost:27017/?authSource=admin".into());
|
|
let client = mongodb::Client::with_uri_str(&mongodb_uri).await.unwrap();
|
|
let db = client.database(&server.db_name());
|
|
let now = mongodb::bson::DateTime::now();
|
|
|
|
for (title, severity) in [
|
|
("Critical Bug", "critical"),
|
|
("High Bug", "high"),
|
|
("Medium Bug", "medium"),
|
|
("Low Bug", "low"),
|
|
] {
|
|
db.collection::<mongodb::bson::Document>("findings")
|
|
.insert_one(mongodb::bson::doc! {
|
|
"repo_id": "test-repo-id",
|
|
"fingerprint": format!("fp-{title}"),
|
|
"scanner": "test",
|
|
"scan_type": "sast",
|
|
"title": title,
|
|
"description": "desc",
|
|
"severity": severity,
|
|
"status": "open",
|
|
"created_at": now,
|
|
"updated_at": now,
|
|
})
|
|
.await
|
|
.unwrap();
|
|
}
|
|
|
|
let resp = server.get("/api/v1/stats/overview").await;
|
|
assert_eq!(resp.status(), 200);
|
|
|
|
let body: serde_json::Value = resp.json().await.unwrap();
|
|
let data = &body["data"];
|
|
assert_eq!(data["repositories"], 1);
|
|
assert_eq!(data["total_findings"], 4);
|
|
assert_eq!(data["critical"], 1);
|
|
assert_eq!(data["high"], 1);
|
|
|
|
server.cleanup().await;
|
|
}
|
|
|
|
#[tokio::test]
|
|
async fn stats_update_after_finding_status_change() {
|
|
let server = TestServer::start().await;
|
|
|
|
// Insert a finding
|
|
let mongodb_uri = std::env::var("TEST_MONGODB_URI")
|
|
.unwrap_or_else(|_| "mongodb://root:example@localhost:27017/?authSource=admin".into());
|
|
let client = mongodb::Client::with_uri_str(&mongodb_uri).await.unwrap();
|
|
let db = client.database(&server.db_name());
|
|
let now = mongodb::bson::DateTime::now();
|
|
|
|
let result = db
|
|
.collection::<mongodb::bson::Document>("findings")
|
|
.insert_one(mongodb::bson::doc! {
|
|
"repo_id": "repo-1",
|
|
"fingerprint": "fp-stats-test",
|
|
"scanner": "test",
|
|
"scan_type": "sast",
|
|
"title": "Stats Test Finding",
|
|
"description": "desc",
|
|
"severity": "high",
|
|
"status": "open",
|
|
"created_at": now,
|
|
"updated_at": now,
|
|
})
|
|
.await
|
|
.unwrap();
|
|
let finding_id = result.inserted_id.as_object_id().unwrap().to_hex();
|
|
|
|
// Stats should show 1 finding
|
|
let resp = server.get("/api/v1/stats/overview").await;
|
|
let body: serde_json::Value = resp.json().await.unwrap();
|
|
assert_eq!(body["data"]["total_findings"], 1);
|
|
|
|
// Mark it as resolved
|
|
server
|
|
.patch(
|
|
&format!("/api/v1/findings/{finding_id}/status"),
|
|
&json!({ "status": "resolved" }),
|
|
)
|
|
.await;
|
|
|
|
// The finding still exists (status changed, not deleted)
|
|
let resp = server.get("/api/v1/stats/overview").await;
|
|
let body: serde_json::Value = resp.json().await.unwrap();
|
|
// total_findings counts all findings regardless of status
|
|
assert_eq!(body["data"]["total_findings"], 1);
|
|
|
|
server.cleanup().await;
|
|
}
|