vet-mcp

package reporter

import (
	"os"
	"testing"

	"github.com/stretchr/testify/assert"

	"github.com/safedep/vet/gen/checks"
	"github.com/safedep/vet/gen/filtersuite"
	"github.com/safedep/vet/gen/insightapi"
	"github.com/safedep/vet/pkg/analyzer"
	"github.com/safedep/vet/pkg/models"
)

var licenses = []insightapi.License{
	"MIT",
	"GPL",
}

var (
	sampleVulnId      = "ghsa-123"
	sampleVulnSummary = "sample-vuln-summary"
)

var (
	sampleProjectName  = "project-name"
	sampleProjectType  = "GITHUB"
	sampleProjectStars = 100
)

var events []analyzer.AnalyzerEvent = []analyzer.AnalyzerEvent{
	{
		Type: analyzer.ET_FilterExpressionMatched,
		Filter: &filtersuite.Filter{
			Name:      "sample-filter1",
			Summary:   "sample-summary1",
			Value:     "sample-value1",
			CheckType: checks.CheckType_CheckTypeLicense,
		},
		Manifest: &models.PackageManifest{
			Source: models.PackageManifestSource{
				DisplayPath: "displayPath1",
			},
		},
		Package: &models.Package{
			PackageDetails: models.NewPackageDetail("ecosystem1", "name1", "version1"),
			Manifest: &models.PackageManifest{
				Source: models.PackageManifestSource{
					DisplayPath: "displayPath1",
				},
			},
			Insights: &insightapi.PackageVersionInsight{
				Licenses: &licenses,
			},
		},
	},
	{
		Type: analyzer.ET_FilterExpressionMatched,
		Filter: &filtersuite.Filter{
			Name:      "sample-filter2",
			Summary:   "sample-summary2",
			Value:     "sample-value2",
			CheckType: checks.CheckType_CheckTypeVulnerability,
		},
		Manifest: &models.PackageManifest{
			Source: models.PackageManifestSource{
				DisplayPath: "displayPath1",
			},
		},
		Package: &models.Package{
			PackageDetails: models.NewPackageDetail("ecosystem2", "name2", "version2"),
			Manifest: &models.PackageManifest{
				Source: models.PackageManifestSource{
					DisplayPath: "displayPath1",
				},
			},
			Insights: &insightapi.PackageVersionInsight{
				Vulnerabilities: &[]insightapi.PackageVulnerability{
					{
						Id:      &sampleVulnId,
						Summary: &sampleVulnSummary,
					},
				},
			},
		},
	},
	{
		Type: analyzer.ET_FilterExpressionMatched,
		Filter: &filtersuite.Filter{
			Name:      "sample-filter3",
			Summary:   "sample-summary3",
			Value:     "sample-value3",
			CheckType: checks.CheckType_CheckTypePopularity,
		},
		Manifest: &models.PackageManifest{
			Source: models.PackageManifestSource{
				DisplayPath: "displayPath2",
			},
		},
		Package: &models.Package{
			PackageDetails: models.NewPackageDetail("ecosystem3", "name3", "version3"),
			Manifest: &models.PackageManifest{
				Source: models.PackageManifestSource{
					DisplayPath: "displayPath3",
				},
			},
			Insights: &insightapi.PackageVersionInsight{
				Projects: &[]insightapi.PackageProjectInfo{
					{
						Name:  &sampleProjectName,
						Type:  &sampleProjectType,
						Stars: &sampleProjectStars,
					},
				},
			},
		},
	},
}

var toolMetadata = ToolMetadata{
	Name:           "vet",
	Version:        "latest",
	InformationURI: "https://github.com/safedep/vet",
	VendorName:     "SafeDep",
}

func TestSarifBuilderReport(t *testing.T) {
	tmpFile, err := os.CreateTemp("", "sarif-builder-test")
	assert.Nil(t, err)

	defer os.Remove(tmpFile.Name())

	builder, err := newSarifBuilder(
		sarifBuilderConfig{
			Tool: toolMetadata,
		})
	assert.Nil(t, err)

	for _, event := range events {
		builder.AddManifest(event.Manifest)
		builder.AddAnalyzerEvent(&event)
	}

	report, err := builder.GetSarifReport()
	assert.Nil(t, err)
	assert.NotNil(t, report)

	assert.Equal(t, 1, len(builder.report.Runs))
	assert.Equal(t, len(events), len(builder.report.Runs[0].Artifacts))
	assert.Equal(t, len(events), len(builder.report.Runs[0].Results))
}

func TestSarifReportBuilderMarkdown(t *testing.T) {
	tmpFile, err := os.CreateTemp("", "sarif-builder-test")
	assert.Nil(t, err)

	defer os.Remove(tmpFile.Name())

	builder, err := newSarifBuilder(
		sarifBuilderConfig{
			Tool: toolMetadata,
		})
	assert.Nil(t, err)

	for _, event := range events {
		builder.AddManifest(event.Manifest)
		builder.AddAnalyzerEvent(&event)
	}

	report, err := builder.GetSarifReport()
	assert.Nil(t, err)
	assert.NotNil(t, report)

	assert.Contains(t, *builder.report.Runs[0].Results[0].Message.Markdown, "Licenses")
	assert.Contains(t, *builder.report.Runs[0].Results[0].Message.Text, licenses[0])
	assert.Contains(t, *builder.report.Runs[0].Results[1].Message.Markdown, sampleVulnSummary)
	assert.Contains(t, *builder.report.Runs[0].Results[1].Message.Text, sampleVulnSummary)
	assert.Contains(t, *builder.report.Runs[0].Results[2].Message.Markdown, "GitHub Project")
	assert.Contains(t, *builder.report.Runs[0].Results[2].Message.Text, sampleProjectName)
}