test: tighten audit summary assertion

This commit is contained in:
Shakker
2026-05-08 21:05:47 +01:00
parent e63ca03bc9
commit 2e28459a0e

View File

@@ -2,6 +2,19 @@ import { describe, expect, it } from "vitest";
import type { OpenClawConfig } from "../config/config.js";
import { collectAttackSurfaceSummaryFindings } from "./audit-extra.summary.js";
function requireAttackSurfaceSummary(
findings: ReturnType<typeof collectAttackSurfaceSummaryFindings>,
) {
const summary = findings.find((f) => f.checkId === "summary.attack_surface");
expect(summary).toEqual(
expect.objectContaining({ checkId: "summary.attack_surface", severity: "info" }),
);
if (!summary) {
throw new Error("Expected attack surface summary finding");
}
return summary;
}
describe("security audit attack surface summary", () => {
it("includes an attack surface summary (info)", () => {
const cfg: OpenClawConfig = {
@@ -12,13 +25,8 @@ describe("security audit attack surface summary", () => {
};
const findings = collectAttackSurfaceSummaryFindings(cfg);
const summary = findings.find((f) => f.checkId === "summary.attack_surface");
const summary = requireAttackSurfaceSummary(findings);
expect(findings).toEqual(
expect.arrayContaining([
expect.objectContaining({ checkId: "summary.attack_surface", severity: "info" }),
]),
);
expect(summary?.detail).toContain("trust model: personal assistant");
expect(summary.detail).toContain("trust model: personal assistant");
});
});