def test_get_results_pass(conformity_report):
    """
    GIVEN `get_results` is called
    WHEN no offending entries are found
    THEN return empty list (no security issues found)
    """

    c = CcValidator()
    report = c.get_results(conformity_report)
    assert not report
def test_get_results_fail(monkeypatch, conformity_report):
    """
    GIVEN `get_results` is called
    WHEN offending entries are found
    THEN return a `list` of failed entries
    """

    monkeypatch.setenv("CC_RISK_LEVEL", "LOW")

    c = CcValidator()
    report = c.get_results(conformity_report)
    assert report