deploy

tests/test_analysis.py

@@ -0,0 +1,67 @@
+from agent import RepoFile, _analyze_repository, _redact_secrets
+from a2a_pack.context import LLMCreds
+
+
+def test_analysis_detects_security_dependency_tests_docs_and_scores():
+    files = [
+        RepoFile(
+            path="app.py",
+            size=80,
+            sha="a",
+            category="source",
+            text="DEBUG = True\nAPI_KEY='abcdef1234567890'\n# TODO fix auth\n",
+            lines=["DEBUG = True", "API_KEY='abcdef1234567890'", "# TODO fix auth", ""],
+        ),
+        RepoFile(
+            path="requirements.txt",
+            size=30,
+            sha="b",
+            category="package/dependency",
+            text="fastapi\nuvicorn==0.30.0\n",
+            lines=["fastapi", "uvicorn==0.30.0", ""],
+        ),
+        RepoFile(
+            path="Dockerfile",
+            size=30,
+            sha="c",
+            category="Docker/container",
+            text="FROM python\n",
+            lines=["FROM python", ""],
+        ),
+    ]
+    tree_entries = [
+        {"path": "app.py", "type": "blob"},
+        {"path": "requirements.txt", "type": "blob"},
+        {"path": "Dockerfile", "type": "blob"},
+    ]
+    classified = {
+        "counts_by_category": {"source": 1, "package/dependency": 1, "Docker/container": 1, "tests": 0, "docs": 0, "CI/CD": 0},
+        "tree": [],
+        "categories": {},
+        "total_entries": 3,
+        "total_files": 3,
+    }
+    report = _analyze_repository(
+        repo_meta={"owner": {"login": "octo"}, "name": "demo", "full_name": "octo/demo", "default_branch": "main"},
+        ref="main",
+        branches=[],
+        tree_entries=tree_entries,
+        classified=classified,
+        files=files,
+        skipped=[],
+        limits={"max_files": 100, "max_bytes": 1000, "max_file_bytes": 1000},
+        llm_creds=LLMCreds(base_url="", api_key="", model="", source="platform"),
+    )
+    categories = {f["category"] for f in report["findings"]}
+    assert "security/config" in categories
+    assert "dependency" in categories
+    assert "tests" in categories
+    assert "docs" in categories
+    assert report["scorecard"]["total"] < 90
+    assert any(c["path"] == "app.py" and "REDACTED" in c["snippet"] for f in report["findings"] for c in f["citations"])
+
+
+def test_redacts_secret_like_values():
+    text = "API_KEY=sk_test_1234567890abcdef"
+    assert "sk_test_1234567890abcdef" not in _redact_secrets(text)
+    assert "<REDACTED>" in _redact_secrets(text)