patrickandClaude Sonnet 5
0fef62b2a3
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
CI / Web (dms-browser) (pull_request) Canceled after 0s
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
CI / Web (shl) (pull_request) Canceled after 0s
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Connect-seitige Webhook-Abonnements ueber Core API-07 (zentrale Webhook-Registry): connect/internal/webhookclient als schlanker HTTP-Client gegen die Registry (Subscribe/Unsubscribe), connect/internal/ webhooksub mit lokaler, verschluesselter Abonnementverwaltung und HTTP-Zustellempfaenger inkl. HMAC-Signaturpruefung. Core API-07 exponiert bislang keinen HTTP-Wrapper fuer physisch getrennte Module (anders als z.B. AUD-08) -- Tests laufen deshalb gegen einen den dokumentierten Core-Vertrag nachbildenden Stub, echte Postgres-Testdatenbank, echte HTTP-Verbindungen. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
67 lines
1.8 KiB
Bash
Executable File
67 lines
1.8 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Merge-Gate QA-01 Akzeptanzkriterium 4 (analog dms/scripts/check-security-
|
|
# test-coverage.sh, FDN-07/dms-QA-01): sicherheitsrelevante Pakete (Tenant-
|
|
# Scoping, Verschluesselung, Auth-nahe Zugriffspruefung gegen Core) muessen
|
|
# mindestens eine Testdatei mit mindestens einer func Test... besitzen.
|
|
# Liste per grep -rl "TenantSlug\|TenantID" internal --include=*.go sowie
|
|
# manueller Pruefung auf Krypto-/Autorisierungs-Naehe ermittelt.
|
|
set -euo pipefail
|
|
|
|
SECURITY_PACKAGES=(
|
|
"internal/crypto"
|
|
"internal/credential"
|
|
"internal/auditclient"
|
|
"internal/audittrail"
|
|
"internal/policyclient"
|
|
"internal/archiveclient"
|
|
"internal/datevexport"
|
|
"internal/datevtransfer"
|
|
"internal/datevapi"
|
|
"internal/dms2import"
|
|
"internal/dms2importapi"
|
|
"internal/fieldmapping"
|
|
"internal/masterdatasync"
|
|
"internal/m365docsync"
|
|
"internal/m365calsync"
|
|
"internal/syncjob"
|
|
"internal/statusapi"
|
|
"internal/webhookclient"
|
|
"internal/webhooksub"
|
|
)
|
|
|
|
cd "$(dirname "$0")/.."
|
|
|
|
fail=0
|
|
for pkg in "${SECURITY_PACKAGES[@]}"; do
|
|
if [ ! -d "$pkg" ]; then
|
|
echo "FEHLER: sicherheitsrelevantes Paket fehlt: $pkg" >&2
|
|
fail=1
|
|
continue
|
|
fi
|
|
|
|
test_files=$(find "$pkg" -maxdepth 1 -name '*_test.go')
|
|
if [ -z "$test_files" ]; then
|
|
echo "FEHLER: kein Test in sicherheitsrelevantem Paket: $pkg" >&2
|
|
fail=1
|
|
continue
|
|
fi
|
|
|
|
has_test_func=0
|
|
for f in $test_files; do
|
|
if grep -q '^func Test' "$f"; then
|
|
has_test_func=1
|
|
fi
|
|
done
|
|
if [ "$has_test_func" -eq 0 ]; then
|
|
echo "FEHLER: Testdatei(en) in $pkg enthalten keine func Test...: $test_files" >&2
|
|
fail=1
|
|
fi
|
|
done
|
|
|
|
if [ "$fail" -ne 0 ]; then
|
|
echo "Merge-Gate FEHLGESCHLAGEN: sicherheitsrelevanter Code ohne Pflichttest." >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "Merge-Gate bestanden: alle sicherheitsrelevanten Pakete haben Tests."
|