tests: tests for the code

Signed-off-by: Michael Schlenker <[email protected]>

Author: Michael Schlenker

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/.gitattributes

@@ -0,0 +1,2 @@
+UTF16License.txt binary
+License.rtf binary

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/GoodLicense.txt

@@ -0,0 +1,2 @@
+A simple license.
+Do what you want.

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/License.rtf

@@ -0,0 +1,66 @@
+# This file is part of CycloneDX Python
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) OWASP Foundation. All Rights Reserved.
+
+"""
+initialize this testbed.
+"""
+
+from os import name as os_name
+from os.path import dirname, join
+from subprocess import CompletedProcess, run  # nosec:B404
+from sys import executable
+from venv import EnvBuilder
+
+__all__ = ['main']
+
+this_dir = dirname(__file__)
+env_dir = join(this_dir, '.venv')
+
+
+def pip_run(*args: str) -> CompletedProcess:
+    # pip is not API, but a CLI -- call it like that!
+    call = (
+        executable, '-m', 'pip',
+        '--python', env_dir,
+        *args
+    )
+    print('+ ', *call)
+    res = run(call, cwd=this_dir, shell=False)  # nosec:B603
+    if res.returncode != 0:
+        raise RuntimeError('process failed')
+    return res
+
+
+def pip_install(*args: str) -> None:
+    pip_run(
+        'install', '--require-virtualenv', '--no-input', '--progress-bar=off', '--no-color',
+        *args
+    )
+
+
+def main() -> None:
+    EnvBuilder(
+        system_site_packages=False,
+        symlinks=os_name != 'nt',
+        with_pip=False,
+    ).create(env_dir)
+
+    pip_install(dirname(__file__))
+
+
+if __name__ == '__main__':
+    main()

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/UTF16License.txt

@@ -0,0 +1,11 @@
+[build-system]
+# Known broken version
+requires = ["setuptools == 78.1.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "badlicdepends"
+version = "0.1"
+# UTF-16 is simply bad encoding
+# RTF is technically 7-bit ASCII, but has application/rtf mimetype.
+license-files = ["GoodLicense.txt", "License.rtf", "UTF16License.txt"]

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/init.py

@@ -0,0 +1,66 @@
+# This file is part of CycloneDX Python
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# SPDX-License-Identifier: Apache-2.0
+# Copyright (c) OWASP Foundation. All Rights Reserved.
+
+"""
+initialize this testbed.
+"""
+
+from os import name as os_name
+from os.path import dirname, join
+from subprocess import CompletedProcess, run  # nosec:B404
+from sys import executable
+from venv import EnvBuilder
+
+__all__ = ['main']
+
+this_dir = dirname(__file__)
+env_dir = join(this_dir, '.venv')
+
+
+def pip_run(*args: str) -> CompletedProcess:
+    # pip is not API, but a CLI -- call it like that!
+    call = (
+        executable, '-m', 'pip',
+        '--python', env_dir,
+        *args
+    )
+    print('+ ', *call)
+    res = run(call, cwd=this_dir, shell=False)  # nosec:B603
+    if res.returncode != 0:
+        raise RuntimeError('process failed')
+    return res
+
+
+def pip_install(*args: str) -> None:
+    pip_run(
+        'install', '--require-virtualenv', '--no-input', '--progress-bar=off', '--no-color',
+        *args
+    )
+
+
+def main() -> None:
+    EnvBuilder(
+        system_site_packages=False,
+        symlinks=os_name != 'nt',
+        with_pip=False,
+    ).create(env_dir)
+    pip_install(join(dirname(__file__), 'badlicdepends'))
+    pip_install(dirname(__file__))
+
+
+if __name__ == '__main__':
+    main()

tests/_data/infiles/environment/with-license-bad-file-recoverable/badlicdepends/pyproject.toml

@@ -0,0 +1,9 @@
+[build-system]
+# Known broken version
+requires = ["setuptools == 78.1.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "badlic"
+version = "0.1"
+dependencies = ["badlicdepends"]