732642856
32 lines
1.1 KiB
Python
32 lines
1.1 KiB
Python
from __future__ import annotations
|
|
|
|
import json
|
|
import subprocess
|
|
import sys
|
|
from pathlib import Path
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
|
|
|
|
def test_commercial_privacy_scan_reuses_public_release_scanner() -> None:
|
|
source = (ROOT / "scripts/commercial_privacy_artifact_scan.py").read_text()
|
|
assert "from public_release_privacy_scan import build_report" in source
|
|
assert "no_real_user_birth_data_private_cases_or_secret_values_in_public_artifacts" in source
|
|
assert "hip_main.dat" in source
|
|
|
|
|
|
def test_commercial_privacy_scan_json_contract_passes_current_tree() -> None:
|
|
completed = subprocess.run(
|
|
[sys.executable, "scripts/commercial_privacy_artifact_scan.py", "--json"],
|
|
cwd=ROOT,
|
|
text=True,
|
|
capture_output=True,
|
|
check=True,
|
|
)
|
|
report = json.loads(completed.stdout)
|
|
assert report["scope"] == "commercial_privacy_artifact_scan"
|
|
assert report["scanner_reuse"] == "scripts/public_release_privacy_scan.py"
|
|
assert report["status"] == "pass"
|
|
assert report["finding_count"] == 0
|
|
assert "hip_main.dat" in report["local_runtime_assets_not_committed"]
|