Samuel Newman
51 lines
1.2 KiB
JavaScript
51 lines
1.2 KiB
JavaScript
import assert from 'node:assert/strict'
|
|
import test from 'node:test'
|
|
|
|
import {
|
|
expectedArtifactName,
|
|
parsePositiveInteger,
|
|
validateTrustedRun,
|
|
} from './find-native-receipt.mjs'
|
|
|
|
test('builds an attempt-scoped artifact name', () => {
|
|
assert.equal(
|
|
expectedArtifactName({
|
|
platform: 'ios',
|
|
buildNumber: '123',
|
|
runId: '45',
|
|
attempt: '2',
|
|
}),
|
|
'native-build-ios-production-123-45-2',
|
|
)
|
|
})
|
|
|
|
test('rejects invalid run identifiers', () => {
|
|
assert.throws(() => parsePositiveInteger('0', 'run-id'), /positive integer/)
|
|
assert.throws(
|
|
() => parsePositiveInteger('1; echo nope', 'run-id'),
|
|
/positive integer/,
|
|
)
|
|
})
|
|
|
|
test('accepts only the expected successful native workflow', () => {
|
|
const expected = {
|
|
repository: 'bluesky-social/social-app',
|
|
workflow: '.github/workflows/build-submit-android.yml',
|
|
}
|
|
const run = {
|
|
conclusion: 'success',
|
|
head_repository: {full_name: expected.repository},
|
|
path: expected.workflow,
|
|
head_sha: 'a'.repeat(40),
|
|
}
|
|
assert.equal(validateTrustedRun(run, expected), run.head_sha)
|
|
assert.throws(
|
|
() =>
|
|
validateTrustedRun(
|
|
{...run, path: '.github/workflows/evil.yml'},
|
|
expected,
|
|
),
|
|
/untrusted/,
|
|
)
|
|
})
|