def test_extract_package_versions_from_with_poetry_lock(
folder: str, filename: str, format_: Optional[str]) -> None:
with open(format_fixture_path_for(folder, filename)) as fh:
packages = list(extract_package_list_from(Configuration(), fh,
format_))
assert len(packages) > 0
def audit_(
config: Configuration,
report_only: bool,
report_format: str,
file_format: str,
sources: List[str],
file: TextIO,
) -> None:
"""
Checks a given dependency file against advisory databases.
\b
FILE is the path to the dependency file to audit.
"""
config.report_only = report_only
config.report_format = report_format
# Only override sources if at least once --source is passed.
if len(sources) > 0:
config.sources = list(set(sources))
if len(config.sources) == 0:
raise click.ClickException(
"Please specify or configure at least one advisory source."
)
packages = extract_package_list_from(config, file, file_format)
if config.verbose:
click.secho("Checking ", nl=False, err=True)
click.secho(f"{len(packages)}", fg="green", nl=False, err=True)
click.secho(" package(s).", err=True)
click.secho("Using ", nl=False, err=True)
click.secho(f"{config.sources}", fg="green", nl=False, err=True)
click.secho(" as source(s).", err=True)
results, vulnerable = audit(config, packages)
report(config, results)
if len(vulnerable) > 0 and config.verbose:
click.secho("", err=True)
click.secho(
f" Found {len(vulnerable)} vulnerable packages!",
fg="red",
blink=True,
err=True,
)
click.secho("", err=True)
elif config.verbose:
click.secho("", err=True)
click.secho(f" No vulnerable packages found!", fg="green", err=True)
# By default we want to exit with a non-zero exit-code when we encounter
# any findings.
if not config.report_only and len(vulnerable) > 0:
sys.exit(1)
def test_extract_dependencies_using_minimal_examples(folder: str,
filename: str) -> None:
with open(format_fixture_path_for(folder, filename)) as fh:
packages = list(extract_package_list_from(Configuration(), fh, None))
assert len(packages) > 0