fix: add test

netlify · Nov 15, 2023 · 5bdda09 · 5bdda09
1 parent 7895539
commit 5bdda09
Show file tree

Hide file tree

Showing 4 changed files with 17 additions and 0 deletions.
diff --git a/packages/build/tests/secrets_scanning/fixtures/src_scanning_omit_cache_path/netlify.toml b/packages/build/tests/secrets_scanning/fixtures/src_scanning_omit_cache_path/netlify.toml
@@ -0,0 +1,8 @@
+[build]
+  command = 'cp -r ./src/static-files ./dist'
+  publish = "./dist"
+
+[build.environment]
+  ENV_VAR_1 = "val1-val1-val1"
+  ENV_VAR_2 = "val2-val2-val2"
+  SECRETS_SCAN_OMIT_PATHS = "netlify.toml"
diff --git a/...ages/build/tests/secrets_scanning/fixtures/src_scanning_omit_cache_path/src/some-file.txt b/...ages/build/tests/secrets_scanning/fixtures/src_scanning_omit_cache_path/src/some-file.txt
@@ -0,0 +1 @@
+safe-val
diff --git a/...ests/secrets_scanning/fixtures/src_scanning_omit_cache_path/src/static-files/static-a.txt b/...ests/secrets_scanning/fixtures/src_scanning_omit_cache_path/src/static-files/static-a.txt
@@ -0,0 +1 @@
+not secret val
diff --git a/packages/build/tests/secrets_scanning/tests.js b/packages/build/tests/secrets_scanning/tests.js
@@ -77,3 +77,10 @@ test('secrets scanning, should not fail if the secrets values are not detected i
     .runWithBuild()
   t.true(output.includes(`No secrets detected in build output or repo code!`))
 })
+
+test.only('secrets scanning should not scan .cache/ directory', async (t) => {
+  const output = await new Fixture('./fixtures/src_scanning_omit_cache_path')
+    .withFlags({ debug: false, explicitSecretKeys: 'ENV_VAR_1,ENV_VAR_2' })
+    .runWithBuild()
+  t.true(output.includes(`No secrets detected in build output or repo code!`))
+})