import { describe, it, before, beforeEach, afterEach } from "node:test"; import { DockerTestContainer } from "./DockerTestContainer.js"; import assert from "node:assert"; describe("E2E: bun coverage", () => { let container; before(async () => { DockerTestContainer.buildImage(); }); beforeEach(async () => { // Run a new Docker container for each test container = new DockerTestContainer(); await container.start(); const installationShell = await container.openShell("zsh"); await installationShell.runCommand("safe-chain setup"); }); afterEach(async () => { // Stop and clean up the container after each test if (container) { await container.stop(); container = null; } }); it(`safe-chain succesfully installs safe packages`, async () => { const shell = await container.openShell("bash"); const result = await shell.runCommand( "bun i axios@1.13.0 --safe-chain-logging=verbose" ); assert.ok( result.output.includes("no malware found."), `Output did not include expected text. Output was:\n${result.output}` ); }); it(`safe-chain blocks download of malicious packages already in package.json`, async () => { const shell = await container.openShell("bash"); await shell.runCommand( 'echo \'{"name":"test-project","version":"1.0.0","dependencies":{"safe-chain-test":"0.0.1-security"}}\' > package.json' ); var result = await shell.runCommand("bun install"); assert.ok( result.output.includes("blocked 1 malicious package downloads"), `Output did not include expected text. Output was:\n${result.output}` ); assert.ok( result.output.includes("- safe-chain-test"), `Output did not include expected text. Output was:\n${result.output}` ); assert.ok( result.output.includes("Exiting without installing malicious packages."), `Output did not include expected text. Output was:\n${result.output}` ); }); it("safe-chain blocks bunx from downloading malicious packages", async () => { const shell = await container.openShell("bash"); const result = await shell.runCommand("bunx safe-chain-test"); assert.ok( result.output.includes("blocked 1 malicious package downloads"), `Output did not include expected text. Output was:\n${result.output}` ); assert.ok( result.output.includes("- safe-chain-test"), `Output did not include expected text. Output was:\n${result.output}` ); assert.ok( result.output.includes("Exiting without installing malicious packages."), `Output did not include expected text. Output was:\n${result.output}` ); }); describe("with SAFE_CHAIN_DIR (custom install directory)", () => { const CUSTOM_DIR = "/usr/local/.safe-chain"; let customContainer; beforeEach(async () => { customContainer = new DockerTestContainer(); await customContainer.start(); const setupShell = await customContainer.openShell("bash"); await setupShell.runCommand(`export SAFE_CHAIN_DIR=${CUSTOM_DIR}`); await setupShell.runCommand("safe-chain setup"); }); afterEach(async () => { if (customContainer) { await customContainer.stop(); customContainer = null; } }); it("blocks malicious bun packages when scripts are in a custom directory", async () => { const shell = await customContainer.openShell("bash"); const result = await shell.runCommand("bunx safe-chain-test"); assert.ok( result.output.includes("blocked 1 malicious package downloads"), `Expected malicious package to be blocked. Output:\n${result.output}` ); assert.ok( result.output.includes("Exiting without installing malicious packages."), `Expected malicious package to be blocked. Output:\n${result.output}` ); }); }); });