mirror of
https://github.com/home-assistant/supervisor.git
synced 2026-09-29 19:23:29 +01:00
Copilotandagners
f753e2c83c
* Initial plan * Fix security rating for apps without web UI Co-authored-by: agners <34061+agners@users.noreply.github.com> * Rate apps by network exposure Co-authored-by: agners <34061+agners@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: agners <34061+agners@users.noreply.github.com>
47 lines
1.4 KiB
Python
47 lines
1.4 KiB
Python
"""Test app utility functions."""
|
|
|
|
from unittest.mock import MagicMock
|
|
|
|
import pytest
|
|
|
|
from supervisor.apps.model import AppModel
|
|
from supervisor.apps.utils import rating_security
|
|
from supervisor.const import ATTR_PORTS, ROLE_DEFAULT, SECURITY_DEFAULT
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
("ports", "host_network", "with_ingress", "access_auth_api", "expected"),
|
|
[
|
|
(None, False, False, False, 7),
|
|
({"80/tcp": None}, False, False, False, 7),
|
|
({"80/tcp": 80}, False, False, False, 5),
|
|
({"80/tcp": 80}, False, False, True, 6),
|
|
({"80/tcp": 80}, False, True, False, 7),
|
|
(None, True, False, False, 4),
|
|
],
|
|
)
|
|
def test_rating_security_network_exposure(
|
|
ports: dict[str, int | None] | None,
|
|
host_network: bool,
|
|
with_ingress: bool,
|
|
access_auth_api: bool,
|
|
expected: int,
|
|
) -> None:
|
|
"""Test network exposure security rating."""
|
|
app = MagicMock(spec=AppModel)
|
|
app.apparmor = SECURITY_DEFAULT
|
|
app.data = {ATTR_PORTS: ports}
|
|
app.with_ingress = with_ingress
|
|
app.access_auth_api = access_auth_api
|
|
app.signed = False
|
|
app.privileged = []
|
|
app.with_kernel_modules = False
|
|
app.hassio_role = ROLE_DEFAULT
|
|
app.host_network = host_network
|
|
app.host_pid = False
|
|
app.host_uts = False
|
|
app.access_docker_api = False
|
|
app.with_full_access = False
|
|
|
|
assert rating_security(app) == expected
|