020eb3f9df361575e3e5328f117ee1eb91280955

Message

Clean up tests

Diff

This diff is truncated to protect this page.

  1diff --git a/test/core/deterministic.test.ts b/test/core/deterministic.test.ts
  2index a90397951cfe75a542c223369e25e657f94180bb..0487ad96653a989b171d0563573d9832c1e87757 100644
  3--- a/test/core/deterministic.test.ts
  4+++ b/test/core/deterministic.test.ts
  5@@ -8,18 +8,7 @@ import { parseBash } from "../../src/core/bash";
  6 let cwd: string;
  7 beforeAll(() => {
  8   cwd = mkdtempSync(join(tmpdir(), "policy-bash-"));
  9-  for (const directory of [
 10-    "safe/Sources",
 11-    "mixed",
 12-    "options",
 13-    "project/.ssh",
 14-    "empty",
 15-    "many",
 16-    "escaped",
 17-    "credentials/nested",
 18-    "dangling",
 19-    "injected",
 20-  ])
 21+  for (const directory of ["safe/Sources", "mixed", "options", "credentials/nested", "dangling", "injected", "many"])
 22     mkdirSync(join(cwd, directory), { recursive: true });
 23   for (const path of [
 24     "README.md",
 25@@ -32,10 +21,6 @@ beforeAll(() => {
 26     "mixed/credentials.swift",
 27     "options/-f.env",
 28     "options/.env",
 29-    "project/.ssh/config",
 30-    "escaped/a*b.swift",
 31-    "escaped/a\\b.swift",
 32-    "escaped/.env",
 33   ])
 34     writeFileSync(join(cwd, path), "");
 35   for (let index = 0; index < 260; index += 1) writeFileSync(join(cwd, "many", `${index}.txt`), "");
 36@@ -49,124 +34,22 @@ beforeAll(() => {
 37 afterAll(() => rmSync(cwd, { recursive: true, force: true }));
 38 
 39 const allowed = [
 40-  "sh -n script.sh",
 41-  "sh -n ./script.sh",
 42-  "bash -n /tmp/script.sh",
 43-  "bash -n ../script.sh",
 44-  "bash -n",
 45+  "bash -n script.sh",
 46   "command -v bun node",
 47-  "cd ~/.ssh",
 48-  'grep -rn "namespace\\|Namespace" ~/go/pkg/mod/github.com/jessevdk/go-flags@v1.6.1/option.go',
 49-  'grep -iE "golangci|\\.go$"',
 50-  'grep -E "foo$|bar" README.md',
 51-  "echo 'a|b'",
 52+  'grep -rn "namespace\\|Namespace" README.md',
 53   "echo .env",
 54-  "echo mixed/*.swift",
 55-  "grep credentials README.md",
 56-  "printf '%s' .env",
 57-  "echo '$HOME'",
 58-  "echo '$TARGET'",
 59-  'echo "\\$TARGET"',
 60-  "git add src/core/rules.ts",
 61-  "git checkout main",
 62-  "git diff main~1 --stat",
 63-  'git "reset$" "--hard"',
 64-  'cat ".e$"nv',
 65-  "git commit -m 'Allow deterministic Git changes'",
 66   "git commit -m 'sudo rm -rf /'",
 67-  "git commit -m .env",
 68   "cp README.md README.copy",
 69-  "mv README.copy README.old",
 70-  "rm README.old",
 71-  "mkdir -p build/output",
 72-  "touch build/output/result.txt",
 73-  "chmod u+x build/output/result.txt",
 74-  "tee build/output/summary.txt",
 75   "bun test",
 76-  "bunx eslint src",
 77-  "npx tsc --noEmit",
 78-  "./gradlew test",
 79-  "cargo test",
 80-  "nl -ba src/core/rules.ts",
 81   "sed -n '10,20p' src/core/rules.ts",
 82-  "sed -n '/^llama/,/^$/p' Makefile",
 83-  "pacman -Ql bash",
 84-  "rpm -qa",
 85-  "dpkg-query -W bash",
 86-  "npm ls --depth=0",
 87-  "npm view bun version --json",
 88-  "head -c 512 README.md",
 89-  "tail -n +10 README.md",
 90-  "id -u",
 91-  "date +%Y-%m-%d",
 92-  "file README.md",
 93-  "readlink -f README.md",
 94-  "dirname src/core/rules.ts",
 95-  "strings package.json",
 96-  "jar tf app.jar",
 97-  "getent group",
 98-  "systemctl --user is-active pi.service",
 99-  "base64 --decode",
100-  "tr -d '\\n'",
101-  "cut -d: -f1,3",
102-  "golangci-lint run --fix",
103-  "rg --hidden --glob '*.ts' policy src",
104-  'rg -l "stt|transcri" --type go -i',