Files
theHarvester/tests/test_workflow_contract.py
T

38 lines
1.3 KiB
Python

from __future__ import annotations
from pathlib import Path
from typing import Any
import yaml
WORKFLOW_DIR = Path(__file__).parents[1] / '.github' / 'workflows'
CI_WORKFLOW_PATH = WORKFLOW_DIR / 'theHarvester.yml'
SMOKE_WORKFLOW_PATH = WORKFLOW_DIR / 'provider-smoke.yml'
def _workflow(path: Path) -> dict[str, Any]:
return yaml.load(path.read_text(encoding='utf-8'), Loader=yaml.BaseLoader)
def test_routine_ci_is_read_only_and_offline() -> None:
workflow = _workflow(CI_WORKFLOW_PATH)
assert workflow['permissions'] == {'contents': 'read'}
assert set(workflow['on']) == {'push', 'pull_request'}
routine_job = workflow['jobs']['Python']
commands = '\n'.join(step.get('run', '') for step in routine_job['steps'])
assert 'git push' not in commands
assert 'theHarvester -d' not in commands
assert '\npytest\n' in f'\n{commands.strip()}\n'
def test_live_provider_smoke_requires_manual_dispatch() -> None:
workflow = _workflow(SMOKE_WORKFLOW_PATH)
smoke_job = workflow['jobs']['Passive-provider-smoke']
commands = '\n'.join(step.get('run', '') for step in smoke_job['steps'])
assert set(workflow['on']) == {'workflow_dispatch'}
assert workflow['permissions'] == {'contents': 'read'}
assert smoke_job['env']['SMOKE_TEST_DOMAIN'] == 'mozilla.org'
assert 'pytest --run-live-network -m live_network' in commands