break
ff44305d0e
All checks were successful
构建并部署到测试环境（无 SSH） / build-and-deploy (push) Successful in 10m19s
47 lines
1.8 KiB
Go
47 lines
1.8 KiB
Go
package auditcoverage_test
|
|
|
|
import (
|
|
"path/filepath"
|
|
"reflect"
|
|
"runtime"
|
|
"testing"
|
|
|
|
"github.com/break/junhong_cmp_fiber/internal/governance/auditcoverage"
|
|
)
|
|
|
|
func TestReviewedAuditCoverageManifestMatchesAllRegisteredEntrypoints(t *testing.T) {
|
|
_, currentFile, _, ok := runtime.Caller(0)
|
|
if !ok {
|
|
t.Fatal("无法定位覆盖门禁测试文件")
|
|
}
|
|
root := filepath.Clean(filepath.Join(filepath.Dir(currentFile), "../../../"))
|
|
actual, err := auditcoverage.Scan(root)
|
|
if err != nil {
|
|
t.Fatalf("扫描全系统入口失败：%v", err)
|
|
}
|
|
expected, err := auditcoverage.LoadManifest(filepath.Join(root, ".scratch/tech-global-audit/审计覆盖清单.json"))
|
|
if err != nil {
|
|
t.Fatalf("读取经评审审计覆盖清单失败：%v", err)
|
|
}
|
|
if len(actual) == 0 {
|
|
t.Fatal("入口扫描结果为空，覆盖门禁不可用")
|
|
}
|
|
if !reflect.DeepEqual(expected, actual) {
|
|
t.Fatalf("源码入口与审计覆盖清单不一致：清单 %d 项，源码 %d 项；请重新分类并完成评审后更新清单", len(expected), len(actual))
|
|
}
|
|
for _, entry := range expected {
|
|
if entry.AuditEvent == "" || entry.DomainLedger == "" || entry.IntegrationLog == "" || entry.Outbox == "" ||
|
|
entry.Transaction == "" || entry.FailureStrategy == "" || entry.SensitivePolicy == "" ||
|
|
entry.BeforeAfterPolicy == "" || entry.TestSeam == "" {
|
|
t.Fatalf("入口 %s 存在未分类字段", entry.Key)
|
|
}
|
|
if entry.AuditEvent == "N/A" && entry.NAReason == "" {
|
|
t.Fatalf("入口 %s 的 Audit Event 为 N/A 但缺少理由", entry.Key)
|
|
}
|
|
if entry.AuditEvent != "N/A" && (entry.ActionCode == "" || entry.ActionName == "" || entry.Category == "" ||
|
|
entry.Risk == "" || entry.PrimaryResource == "") {
|
|
t.Fatalf("入口 %s 缺少动作、风险或主要资源", entry.Key)
|
|
}
|
|
}
|
|
}
|