Skip to content

Commit 0db4493

Browse files
authored
Merge pull request #1266 from lcarva/EC-921
Make cve test data readable
2 parents 133d30f + 8b626fb commit 0db4493

File tree

1 file changed

+58
-13
lines changed

1 file changed

+58
-13
lines changed

policy/release/cve/cve_test.rego

Lines changed: 58 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -834,26 +834,71 @@ test_leeway_rule_data_check if {
834834
with data.rule_data as d
835835
}
836836

837-
_fingerprints(a, b) := [v | some n in numbers.range(a, b); v := sprintf("%d", [n])]
838-
839-
_vulns(fingerprits, template) := {v |
840-
some fingerprint in fingerprits
841-
v := {fingerprint: template}
842-
}
843-
844837
_vuln(severity, fixed_in, issued) := {
845838
"fixed_in_version": fixed_in,
846839
"normalized_severity": severity,
847840
"issued": issued,
848841
}
849842

850-
# `opa fmt` is causing this
851-
# regal ignore:line-length
852-
vulnerabilities := object.union_n(lib.to_array(((((_vulns(_fingerprints(1, 1), _vuln("Critical", "1.0", "2022-03-26T00:00:00Z")) | _vulns(_fingerprints(2, 3), _vuln("High", "1.0", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(4, 6), _vuln("Medium", "1.0", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(7, 10), _vuln("Low", "1.0", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(11, 15), _vuln("Unknown", "1.0", "2022-03-26T00:00:00Z")))))
843+
vulnerabilities := d if {
844+
combined_vulns := [v |
845+
some category in [
846+
[v |
847+
some idx in numbers.range(1, 1)
848+
v := {sprintf("%d", [idx]): _vuln("Critical", "1.0", "2022-03-26T00:00:00Z")}
849+
],
850+
[v |
851+
some idx in numbers.range(2, 3)
852+
v := {sprintf("%d", [idx]): _vuln("High", "1.0", "2022-03-26T00:00:00Z")}
853+
],
854+
[v |
855+
some idx in numbers.range(4, 6)
856+
v := {sprintf("%d", [idx]): _vuln("Medium", "1.0", "2022-03-26T00:00:00Z")}
857+
],
858+
[v |
859+
some idx in numbers.range(7, 10)
860+
v := {sprintf("%d", [idx]): _vuln("Low", "1.0", "2022-03-26T00:00:00Z")}
861+
],
862+
[v |
863+
some idx in numbers.range(11, 15)
864+
v := {sprintf("%d", [idx]): _vuln("Unknown", "1.0", "2022-03-26T00:00:00Z")}
865+
],
866+
]
867+
some v in category
868+
]
853869

854-
# `opa fmt` is causing this
855-
# regal ignore:line-length
856-
unpatched_vulnerabilities := object.union_n(lib.to_array(((((_vulns(_fingerprints(16, 21), _vuln("Critical", "", "2022-03-26T00:00:00Z")) | _vulns(_fingerprints(22, 28), _vuln("High", "", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(29, 36), _vuln("Medium", "", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(37, 45), _vuln("Low", "", "2022-03-26T00:00:00Z"))) | _vulns(_fingerprints(46, 55), _vuln("Unknown", "", "2022-03-26T00:00:00Z")))))
870+
d := object.union_n(combined_vulns)
871+
}
872+
873+
unpatched_vulnerabilities := d if {
874+
combined_vulns := [v |
875+
some category in [
876+
[v |
877+
some idx in numbers.range(16, 21)
878+
v := {sprintf("%d", [idx]): _vuln("Critical", "", "2022-03-26T00:00:00Z")}
879+
],
880+
[v |
881+
some idx in numbers.range(22, 28)
882+
v := {sprintf("%d", [idx]): _vuln("High", "", "2022-03-26T00:00:00Z")}
883+
],
884+
[v |
885+
some idx in numbers.range(29, 36)
886+
v := {sprintf("%d", [idx]): _vuln("Medium", "", "2022-03-26T00:00:00Z")}
887+
],
888+
[v |
889+
some idx in numbers.range(37, 45)
890+
v := {sprintf("%d", [idx]): _vuln("Low", "", "2022-03-26T00:00:00Z")}
891+
],
892+
[v |
893+
some idx in numbers.range(46, 55)
894+
v := {sprintf("%d", [idx]): _vuln("Unknown", "", "2022-03-26T00:00:00Z")}
895+
],
896+
]
897+
some v in category
898+
]
899+
900+
d := object.union_n(combined_vulns)
901+
}
857902

858903
_clair_report := {"vulnerabilities": object.union(vulnerabilities, unpatched_vulnerabilities)}
859904

0 commit comments

Comments
 (0)