test(secrets): add test for open secret scanning alerts within limits

tests/open-secret-scanning-alerts-within-limits.t

@@ -0,0 +1,95 @@
+#!/usr/bin/env perl
+
+use strict;
+use warnings;
+use Test::More;
+use Test::Exception;
+use Test::MockObject;
+use Test::Output;
+use Capture::Tiny qw(capture_stdout);
+
+BEGIN {
+    use lib '../lib';
+    use_ok('SecurityGate::Engine::Secrets') || print "Bail out!\n";
+}
+
+{
+    package MockMojoUserAgent;
+    use Test::MockObject;
+
+    my $mock_response;
+    my $locations_response;
+
+    sub new {
+        my $class = shift;
+        return Test::MockObject -> new -> mock('get', sub {
+            my ($self, $url, $headers) = @_;
+            return Test::MockObject -> new -> mock('result', sub {
+                if ($url =~ m{locations$}xsm) {
+                    return $locations_response;
+                }
+                return $mock_response;
+            });
+        });
+    }
+
+    sub setup_mock_response {
+        my ($code, $json) = @_;
+        $mock_response = Test::MockObject -> new;
+        $mock_response -> set_always('code', $code);
+        $mock_response -> set_always('json', $json);
+        return;
+    }
+
+    sub setup_locations_response {
+        my ($code, $json) = @_;
+        $locations_response = Test::MockObject -> new;
+        $locations_response -> set_always('code', $code);
+        $locations_response -> set_always('json', $json);
+        return;
+    }
+}
+
+*Mojo::UserAgent::new = \&MockMojoUserAgent::new;
+
+subtest 'Open secret scanning alerts within limits' => sub {
+    plan tests => 2;
+
+    MockMojoUserAgent::setup_mock_response(200, [
+        { state => 'open', number => 1 },
+    ]);
+
+    MockMojoUserAgent::setup_locations_response(200, [
+        { path => 'file1.txt', start_line => 10 },
+    ]);
+
+    my %severity_limits = (
+        critical => 0,
+        high     => 1,
+        medium   => 0,
+        low      => 0
+    );
+
+    my $result;
+    my $expected_output_part1 = qr/\[!\]\ Total\ of\ open\ secret\ scanning\ alerts:\ 1/xsm;
+    my $expected_output_part2 = qr/\[-\]\ Alert\ 1\ found\ in\ the\ following\ locations:/xsm;
+    my $expected_output_part3 = qr/File:\ file1\.txt,\ Start\ line:\ 10/xsm;
+    my $expected_output_part4_part1 = qr/\[-\]\ Number\ of\ secret\ scanning\ alerts\ \(/xsm;
+    my $expected_output_part4_part2 = qr/1\)\ is\ within\ the\ acceptable\ limit\ \(/xsm;
+    my $expected_output_part4_part3 = qr/1\)\./xsm;
+    my $expected_output_part4 = qr/$expected_output_part4_part1$expected_output_part4_part2$expected_output_part4_part3/xsm;
+
+    my $expected_output = qr/$expected_output_part1.*$expected_output_part2.*$expected_output_part3.*$expected_output_part4/xsm;
+
+    stdout_like(
+        sub { $result = SecurityGate::Engine::Secrets -> new('test_token', 'test_repo', \%severity_limits) },
+        $expected_output,
+        'Correct output for open alerts within limit'
+    );
+
+    is($result, 0, 'Returns 0 when open alerts are within limit');
+};
+
+done_testing();
+
+1;