mirror of
https://github.com/openclaw/openclaw.git
synced 2026-06-08 13:12:53 +00:00
test(node-host): prove suppression edits bypass auto-review
Co-authored-by: Vincent Koc <25068+vincentkoc@users.noreply.github.com> Co-authored-by: jesse-merhi <79823012+jesse-merhi@users.noreply.github.com>
This commit is contained in:
@@ -682,6 +682,7 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
|
||||
|
||||
it("does not auto-review direct system.run security audit suppression edits", async () => {
|
||||
const tmp = createFixtureDir("openclaw-system-run-auto-review-suppression-");
|
||||
const executablePath = createTempExecutable({ dir: tmp, name: "openclaw" });
|
||||
setRuntimeConfigSnapshot({
|
||||
tools: {
|
||||
exec: {
|
||||
@@ -697,7 +698,7 @@ describe("handleSystemRunInvoke mac app exec host routing", () => {
|
||||
}));
|
||||
const runCommand = vi.fn(async () => createLocalRunResult("should-not-run"));
|
||||
const prepared = buildSystemRunApprovalPlan({
|
||||
command: ["openclaw", "config", "set", "security.audit.suppressions", "[]"],
|
||||
command: [executablePath, "config", "set", "security.audit.suppressions", "[]"],
|
||||
cwd: tmp,
|
||||
});
|
||||
expect(prepared.ok).toBe(true);
|
||||
|
||||
Reference in New Issue
Block a user