|
15 | 15 | }.to raise_error(Scanner::InvalidGemfileLock,/is not a valid Gemfile\.lock/) |
16 | 16 | end |
17 | 17 | end |
| 18 | + |
| 19 | + context "when given no arguments" do |
| 20 | + subject { described_class } |
| 21 | + |
| 22 | + context "when a Gemfile.lock exists in Dir.pwd" do |
| 23 | + it "must default root to Dir.pwd" do |
| 24 | + Dir.chdir(directory) do |
| 25 | + scanner = subject.new |
| 26 | + expect(scanner.root).to eq(File.expand_path(Dir.pwd)) |
| 27 | + end |
| 28 | + end |
| 29 | + end |
| 30 | + end |
| 31 | + |
| 32 | + context "when given a root directory" do |
| 33 | + let(:root) { directory } |
| 34 | + |
| 35 | + subject { described_class.new(root) } |
| 36 | + |
| 37 | + it "must set #root to the expanded directory path" do |
| 38 | + expect(subject.root).to eq(File.expand_path(root)) |
| 39 | + end |
| 40 | + |
| 41 | + it "must set #database" do |
| 42 | + expect(subject.database).to be_kind_of(Database) |
| 43 | + end |
| 44 | + |
| 45 | + it "must set #lockfile by parsing the Gemfile.lock" do |
| 46 | + expect(subject.lockfile).to be_kind_of(Bundler::LockfileParser) |
| 47 | + end |
| 48 | + |
| 49 | + it "must set #config to a default Configuration when no config file exists" do |
| 50 | + expect(subject.config).to be_kind_of(Configuration) |
| 51 | + expect(subject.config.ignore).to be_empty |
| 52 | + end |
| 53 | + end |
| 54 | + |
| 55 | + context "when the Gemfile.lock does not exist in the root directory" do |
| 56 | + let(:bad_dir) { File.join('spec','bundle','nonexistent') } |
| 57 | + |
| 58 | + it "must raise Bundler::GemfileLockNotFound" do |
| 59 | + expect { |
| 60 | + described_class.new(bad_dir) |
| 61 | + }.to raise_error(Bundler::GemfileLockNotFound) |
| 62 | + end |
| 63 | + |
| 64 | + it "must include the lock file name and root in the error message" do |
| 65 | + expect { |
| 66 | + described_class.new(bad_dir) |
| 67 | + }.to raise_error(Bundler::GemfileLockNotFound, /Gemfile\.lock/) |
| 68 | + end |
| 69 | + end |
| 70 | + |
| 71 | + context "when given a custom gemfile_lock name" do |
| 72 | + it "must raise Bundler::GemfileLockNotFound if the custom lock file does not exist" do |
| 73 | + expect { |
| 74 | + described_class.new(directory, 'NoSuchLockFile.lock') |
| 75 | + }.to raise_error(Bundler::GemfileLockNotFound) |
| 76 | + end |
| 77 | + |
| 78 | + it "must use the custom gemfile_lock name" do |
| 79 | + scanner = described_class.new(directory, 'Gemfile.lock') |
| 80 | + expect(scanner.lockfile).to be_kind_of(Bundler::LockfileParser) |
| 81 | + end |
| 82 | + end |
| 83 | + |
| 84 | + context "when given a custom database" do |
| 85 | + let(:custom_db) { Database.new } |
| 86 | + |
| 87 | + subject { described_class.new(directory, 'Gemfile.lock', custom_db) } |
| 88 | + |
| 89 | + it "must set #database to the custom database" do |
| 90 | + expect(subject.database).to be(custom_db) |
| 91 | + end |
| 92 | + end |
| 93 | + |
| 94 | + context "when a .bundler-audit.yml config file exists" do |
| 95 | + let(:bundle) { 'unpatched_gems_with_dot_configuration' } |
| 96 | + |
| 97 | + subject { described_class.new(directory) } |
| 98 | + |
| 99 | + it "must load the configuration from the config file" do |
| 100 | + expect(subject.config).to be_kind_of(Configuration) |
| 101 | + expect(subject.config.ignore).to include('OSVDB-89025') |
| 102 | + end |
| 103 | + end |
| 104 | + |
| 105 | + context "when given a custom config_dot_file" do |
| 106 | + let(:config_path) { File.join('spec','bundle','unpatched_gems_with_dot_configuration','.bundler-audit.yml') } |
| 107 | + |
| 108 | + context "when the config_dot_file is an absolute path" do |
| 109 | + let(:absolute_config_path) { File.absolute_path(config_path) } |
| 110 | + |
| 111 | + subject { described_class.new(directory, 'Gemfile.lock', Database.new, absolute_config_path) } |
| 112 | + |
| 113 | + it "must load the configuration from the absolute path" do |
| 114 | + expect(subject.config).to be_kind_of(Configuration) |
| 115 | + expect(subject.config.ignore).to include('OSVDB-89025') |
| 116 | + end |
| 117 | + end |
| 118 | + |
| 119 | + context "when the config_dot_file is a relative path" do |
| 120 | + let(:relative_config_path) { File.join('..','unpatched_gems_with_dot_configuration','.bundler-audit.yml') } |
| 121 | + |
| 122 | + subject { described_class.new(directory, 'Gemfile.lock', Database.new, relative_config_path) } |
| 123 | + |
| 124 | + it "must load the configuration from the relative path" do |
| 125 | + expect(subject.config).to be_kind_of(Configuration) |
| 126 | + expect(subject.config.ignore).to include('OSVDB-89025') |
| 127 | + end |
| 128 | + end |
| 129 | + end |
| 130 | + |
| 131 | + context "when no .bundler-audit.yml config file exists" do |
| 132 | + let(:bundle) { 'secure' } |
| 133 | + |
| 134 | + subject { described_class.new(directory) } |
| 135 | + |
| 136 | + it "must set #config to a default empty Configuration" do |
| 137 | + expect(subject.config).to be_kind_of(Configuration) |
| 138 | + expect(subject.config.ignore).to be_empty |
| 139 | + end |
| 140 | + end |
18 | 141 | end |
19 | 142 |
|
20 | 143 | describe "#scan" do |
|
0 commit comments