fix: recompute local promotion evidence
This commit is contained in:
@@ -675,11 +675,14 @@ describe("supply-chain policy", () => {
|
||||
});
|
||||
|
||||
it("uses one fail-closed repository inventory for provenance and secret scanning", async () => {
|
||||
const [provenanceSource, securitySource] = await Promise.all([
|
||||
readFile("scripts/generate-supply-chain.ts", "utf8"),
|
||||
readFile("scripts/security-scan.ts", "utf8"),
|
||||
]);
|
||||
for (const source of [provenanceSource, securitySource]) {
|
||||
const [provenanceSource, securityCliSource, securityEvaluatorSource] =
|
||||
await Promise.all([
|
||||
readFile("scripts/generate-supply-chain.ts", "utf8"),
|
||||
readFile("scripts/security-scan.ts", "utf8"),
|
||||
readFile("scripts/lib/secret-scan-evaluator.ts", "utf8"),
|
||||
]);
|
||||
expect(securityCliSource).toContain("evaluateRepositorySecretScan");
|
||||
for (const source of [provenanceSource, securityEvaluatorSource]) {
|
||||
expect(source).toContain("buildRepositoryFileInventory");
|
||||
expect(source).not.toContain("async function filesWithin");
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user