Feat: test for apiv2 and views

Signed-off-by: RISHI GARG <134256793+Rishi-source@users.noreply.github.com>

Author: Rishi-source

vulnerabilities/tests/test_api_v2.py

@@ -92,6 +92,23 @@ def test_retrieve_vulnerability_detail(self):
         self.assertEqual(len(response.data["weaknesses"]), 1)
         self.assertEqual(len(response.data["references"]), 1)
 
+    def test_filter_packages_by_vulnerability_status(self):
+        vulnerability = Vulnerability.objects.create(
+            vulnerability_id="VCID-FILTER", summary="Test vulnerability for is_vulnerable filter"
+        )
+        self.package1.affected_by_vulnerabilities.add(vulnerability)
+        url = reverse("package-v2-list")
+        with self.assertNumQueries(20):
+            response = self.client.get(url, {"is_vulnerable": "true"}, format="json")
+        self.assertEqual(response.status_code, status.HTTP_200_OK)
+        self.assertEqual(len(response.data["results"]["packages"]), 1)
+        self.assertEqual(response.data["results"]["packages"][0]["purl"], "pkg:pypi/django@3.2")
+        with self.assertNumQueries(20):
+            response = self.client.get(url, {"is_vulnerable": "false"}, format="json")
+        self.assertEqual(response.status_code, status.HTTP_200_OK)
+        self.assertEqual(len(response.data["results"]["packages"]), 1)
+        self.assertEqual(response.data["results"]["packages"][0]["purl"], "pkg:npm/lodash@4.17.20")
+
     def test_filter_vulnerability_by_vulnerability_id(self):
         """
         Test filtering vulnerabilities by vulnerability_id.

vulnerabilities/tests/test_view.py

@@ -77,6 +77,29 @@ def test_package_detail_view(self):
         package = PackageDetails(kwargs={"purl": "pkg:nginx/nginx@1.0.15"}).get_object()
         assert package.purl == "pkg:nginx/nginx@1.0.15"
 
+    def test_package_vulnerability_filter(self):
+        vulnerability = Vulnerability.objects.create(
+            vulnerability_id="VCID-TEST", summary="Test Vulnerability for filtering"
+        )
+        vulnerable_package = Package.objects.get(package_url="pkg:nginx/nginx@1.20.0")
+        AffectedByPackageRelatedVulnerability.objects.create(
+            vulnerability=vulnerability, package=vulnerable_package, created_by="test"
+        )
+        response = self.client.get("/packages/search?search=nginx&vulnerable_only=true")
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(vulnerable_package.purl, str(response.content))
+        self.assertNotIn("pkg:nginx/nginx@1.21.0", str(response.content))
+
+        response = self.client.get("/packages/search?search=nginx&vulnerable_only=false")
+        self.assertEqual(response.status_code, 200)
+        self.assertNotIn(vulnerable_package.purl, str(response.content))
+        self.assertIn("pkg:nginx/nginx@1.21.0", str(response.content))
+
+        response = self.client.get("/packages/search?search=nginx")
+        self.assertEqual(response.status_code, 200)
+        self.assertIn(vulnerable_package.purl, str(response.content))
+        self.assertIn("pkg:nginx/nginx@1.21.0", str(response.content))
+
     def test_package_view_with_purl_fragment(self):
         qs = PackageSearch().get_queryset(query="nginx@1.0.15")
         pkgs = list(qs)