a6b07302ea
* Make 'manageForeignResources.php make-cdx' write the CycloneDX file to resources/lib/foreign-resources.cdx.json. * Commit resources/lib/foreign-resources.cdx.json * Add a structure test to ensure it is up to date. Bug: T363589 Change-Id: I1e9d53590d4e7f0577d21cd51d777daf62d1f589
60 lines
2 KiB
PHP
60 lines
2 KiB
PHP
<?php
|
|
|
|
use MediaWiki\ResourceLoader\ForeignResourceManager;
|
|
use MediaWiki\ResourceLoader\ForeignResourceNetworkException;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
/**
|
|
* Verify MediaWiki core's foreign-resources.yaml.
|
|
*
|
|
* This test is under integration/ instead of structure/ because the latter
|
|
* also runs in CI for skin and extension repos (T203694).
|
|
*
|
|
* @coversNothing
|
|
*/
|
|
class ForeignResourceStructureTest extends TestCase {
|
|
|
|
public function testVerifyIntegrity() {
|
|
global $IP;
|
|
$out = '';
|
|
$frm = new ForeignResourceManager(
|
|
"{$IP}/resources/lib/foreign-resources.yaml",
|
|
"{$IP}/resources/lib",
|
|
static function ( $text ) use ( &$out ) {
|
|
$out .= $text;
|
|
}
|
|
);
|
|
|
|
// The "verify" action verifies two things:
|
|
// 1. Mismatching SRI hashes.
|
|
// These throw an exception with the actual/expect values
|
|
// to place in foreign-resources.yaml.
|
|
// 2. Mismatching file contents.
|
|
// These print messages about each mismatching file,
|
|
// and then we add our help text afterward for how to
|
|
// automatically update the file resources.
|
|
|
|
$helpUpdate = '
|
|
To update a foreign resource, run:
|
|
$ php maintenance/manageForeignResources.php update <moduleName>
|
|
';
|
|
|
|
try {
|
|
$this->assertTrue( $frm->run( 'verify', 'all' ), "$out\n$helpUpdate" );
|
|
} catch ( ForeignResourceNetworkException $e ) {
|
|
$this->markTestSkipped( 'Network error: ' . $e->getMessage() );
|
|
}
|
|
|
|
// Verify that the CycloneDX SBOM file is up to date. CDX serials are random, so we need
|
|
// to hack in the correct serial.
|
|
$cdxFile = $frm->getCdxFileLocation();
|
|
$this->assertFileExists( $cdxFile );
|
|
$cdxJsonString = file_get_contents( $cdxFile );
|
|
$serial = preg_match( '/"urn:uuid:[\\da-f\\-]+"/', $cdxJsonString, $matches );
|
|
$this->assertSame( 1, $serial );
|
|
$expectedCdx = preg_replace( '/"urn:uuid:[\\da-f\\-]+"/', $matches[0], $frm->generateCdx() );
|
|
$this->assertJsonStringEqualsJsonFile( $cdxFile, $expectedCdx,
|
|
"foreign-resources.cdx.json does not match foreign-resources.yaml, "
|
|
. "run `manageForeignResources.php make-cdx`" );
|
|
}
|
|
}
|