Merge pull request #139 from AikidoSec/feature/fix-e2e-tests

[PYPI e2e testing] Add extra flag to install commands
This commit is contained in:
bitterpanda 2025-11-05 17:10:50 +01:00 committed by GitHub
commit 96d7c460fa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -28,7 +28,7 @@ describe("E2E: pip coverage", () => {
it(`successfully installs known safe packages with pip3`, async () => {
const shell = await container.openShell("zsh");
const result = await shell.runCommand("pip3 install requests");
const result = await shell.runCommand("pip3 install --break-system-packages requests");
assert.ok(
result.output.includes("no malicious packages found."),
@ -58,7 +58,7 @@ describe("E2E: pip coverage", () => {
it(`pip3 install --dry-run is respected by scanner`, async () => {
const shell = await container.openShell("zsh");
const result = await shell.runCommand("pip3 install --dry-run requests");
const result = await shell.runCommand("pip3 install --dry-run --break-system-packages requests");
assert.ok(
result.output.includes("no malicious packages found."),
@ -68,7 +68,7 @@ describe("E2E: pip coverage", () => {
it(`pip3 install with extras such as requests[socks]`, async () => {
const shell = await container.openShell("zsh");
const result = await shell.runCommand('pip3 install "requests[socks]==2.32.3"');
const result = await shell.runCommand('pip3 install --break-system-packages "requests[socks]==2.32.3"');
assert.ok(
result.output.includes("no malicious packages found."),
@ -78,7 +78,7 @@ describe("E2E: pip coverage", () => {
it(`pip3 install with range version specifier`, async () => {
const shell = await container.openShell("zsh");
const result = await shell.runCommand('pip3 install "Jinja2>=3.1,<3.2"');
const result = await shell.runCommand('pip3 install --break-system-packages "Jinja2>=3.1,<3.2"');
assert.ok(
result.output.includes("no malicious packages found."),
@ -88,7 +88,7 @@ describe("E2E: pip coverage", () => {
it(`python3 -m pip install routes through safe-chain`, async () => {
const shell = await container.openShell("zsh");
const result = await shell.runCommand('python3 -m pip install requests');
const result = await shell.runCommand('python3 -m pip install --break-system-packages requests');
assert.ok(
result.output.includes("no malicious packages found."),