69 lines
1.5 KiB
Go
69 lines
1.5 KiB
Go
|
package report
|
||
|
|
|
||
|
|
import (
|
||
|
|
"encoding/json"
|
||
|
|
"testing"
|
||
|
|
)
|
||
|
|
|
||
|
|
func TestExtractJSONField(t *testing.T) {
|
||
|
|
semgrepRaw := []byte(`{
|
||
|
|
"check_id": "crypto-bad-mac",
|
||
|
|
"extra": {
|
||
|
|
"severity": "WARNING",
|
||
|
|
"message": "Use of weak MAC"
|
||
|
|
}
|
||
|
|
}`)
|
||
|
|
var semgrep map[string]any
|
||
|
|
json.Unmarshal(semgrepRaw, &semgrep)
|
||
|
|
|
||
|
|
trivyRaw := []byte(`{
|
||
|
|
"VulnerabilityID": "CVE-2021-44228",
|
||
|
|
"PkgName": "log4j-core",
|
||
|
|
"Severity": "CRITICAL"
|
||
|
|
}`)
|
||
|
|
var trivy map[string]any
|
||
|
|
json.Unmarshal(trivyRaw, &trivy)
|
||
|
|
|
||
|
|
openvasRaw := []byte(`{
|
||
|
|
"name": "Cleartext Transmission",
|
||
|
|
"host": {
|
||
|
|
"details": [
|
||
|
|
{"ip": "192.168.1.50"},
|
||
|
|
{"ip": "10.0.0.5"}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"threat": "High"
|
||
|
|
}`)
|
||
|
|
var openvas map[string]any
|
||
|
|
json.Unmarshal(openvasRaw, &openvas)
|
||
|
|
|
||
|
|
tests := []struct {
|
||
|
|
name string
|
||
|
|
finding any
|
||
|
|
path string
|
||
|
|
expected string
|
||
|
|
}{
|
||
|
|
{"Semgrep Flat", semgrep, "check_id", "crypto-bad-mac"},
|
||
|
|
{"Semgrep Nested", semgrep, "extra.severity", "WARNING"},
|
||
|
|
{"Semgrep Deep Nested", semgrep, "extra.message", "Use of weak MAC"},
|
||
|
|
|
||
|
|
{"Trivy Flat 1", trivy, "VulnerabilityID", "CVE-2021-44228"},
|
||
|
|
{"Trivy Flat 2", trivy, "Severity", "CRITICAL"},
|
||
|
|
|
||
|
|
{"OpenVAS Flat", openvas, "threat", "High"},
|
||
|
|
{"OpenVAS Array Index", openvas, "host.details.0.ip", "192.168.1.50"},
|
||
|
|
|
||
|
|
{"Missing Field", trivy, "does.not.exist", ""},
|
||
|
|
{"Empty Path", trivy, "", ""},
|
||
|
|
}
|
||
|
|
|
||
|
|
for _, tc := range tests {
|
||
|
|
t.Run(tc.name, func(t *testing.T) {
|
||
|
|
result := ExtractJSONField(tc.finding, tc.path)
|
||
|
|
if result != tc.expected {
|
||
|
|
t.Errorf("Path '%s': expected '%s', got '%s'", tc.path, tc.expected, result)
|
||
|
|
}
|
||
|
|
})
|
||
|
|
}
|
||
|
|
}
|