openclaw/src/security/audit-extra.sync.test.ts

35 lines
1.4 KiB
TypeScript

import { describe, expect, it } from "vitest";
import type { OpenClawConfig } from "../config/config.js";
import { collectAttackSurfaceSummaryFindings } from "./audit-extra.sync.js";
describe("collectAttackSurfaceSummaryFindings", () => {
it("distinguishes external webhooks from internal hooks when only internal hooks are enabled", () => {
const cfg: OpenClawConfig = {
hooks: { internal: { enabled: true } },
};
const [finding] = collectAttackSurfaceSummaryFindings(cfg);
expect(finding.checkId).toBe("summary.attack_surface");
expect(finding.detail).toContain("hooks.webhooks: disabled");
expect(finding.detail).toContain("hooks.internal: enabled");
});
it("reports both hook systems as enabled when both are configured", () => {
const cfg: OpenClawConfig = {
hooks: { enabled: true, internal: { enabled: true } },
};
const [finding] = collectAttackSurfaceSummaryFindings(cfg);
expect(finding.detail).toContain("hooks.webhooks: enabled");
expect(finding.detail).toContain("hooks.internal: enabled");
});
it("reports both hook systems as disabled when neither is configured", () => {
const cfg: OpenClawConfig = {};
const [finding] = collectAttackSurfaceSummaryFindings(cfg);
expect(finding.detail).toContain("hooks.webhooks: disabled");
expect(finding.detail).toContain("hooks.internal: disabled");
});
});