9eab1adb9d
for #2543 BREAKING CHANGE: semantic-release is now ESM-only. since it is used through its own executable, the impact on consuming projects should be minimal BREAKING CHANGE: references to plugin files in configs need to include the file extension because of executing in an ESM context
85 lines
3.2 KiB
JavaScript
85 lines
3.2 KiB
JavaScript
import test from 'ava';
|
|
import {repeat} from 'lodash-es';
|
|
import hideSensitive from '../lib/hide-sensitive.js';
|
|
import {SECRET_MIN_SIZE, SECRET_REPLACEMENT} from '../lib/definitions/constants.js';
|
|
|
|
test('Replace multiple sensitive environment variable values', (t) => {
|
|
const env = {SOME_PASSWORD: 'password', SOME_TOKEN: 'secret'};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_PASSWORD}@host.com?token=${env.SOME_TOKEN}`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test('Replace multiple occurences of sensitive environment variable values', (t) => {
|
|
const env = {secretKey: 'secret'};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.secretKey}@host.com?token=${env.secretKey}`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test('Replace sensitive environment variable matching specific regex for "private"', (t) => {
|
|
const env = {privateKey: 'secret', GOPRIVATE: 'host.com'};
|
|
t.is(hideSensitive(env)(`https://host.com?token=${env.privateKey}`), `https://host.com?token=${SECRET_REPLACEMENT}`);
|
|
});
|
|
|
|
test('Replace url-encoded environment variable', (t) => {
|
|
const env = {privateKey: 'secret '};
|
|
t.is(
|
|
hideSensitive(env)(`https://host.com?token=${encodeURI(env.privateKey)}`),
|
|
`https://host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|
|
|
|
test('Escape regexp special characters', (t) => {
|
|
const env = {SOME_CREDENTIALS: 'p$^{.+}\\w[a-z]o.*rd'};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_CREDENTIALS}@host.com`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com`
|
|
);
|
|
});
|
|
|
|
test('Escape regexp special characters in url-encoded environment variable', (t) => {
|
|
const env = {SOME_PASSWORD: 'secret password p$^{.+}\\w[a-z]o.*rd)('};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${encodeURI(env.SOME_PASSWORD)}@host.com`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com`
|
|
);
|
|
});
|
|
|
|
test('Accept "undefined" input', (t) => {
|
|
t.is(hideSensitive({})(), undefined);
|
|
});
|
|
|
|
test('Return same string if no environment variable has to be replaced', (t) => {
|
|
t.is(hideSensitive({})('test'), 'test');
|
|
});
|
|
|
|
test('Exclude empty environment variables from the regexp', (t) => {
|
|
const env = {SOME_PASSWORD: 'password', SOME_TOKEN: ''};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${env.SOME_PASSWORD}@host.com?token=`),
|
|
`https://user:${SECRET_REPLACEMENT}@host.com?token=`
|
|
);
|
|
});
|
|
|
|
test('Exclude empty environment variables from the regexp if there is only empty ones', (t) => {
|
|
t.is(hideSensitive({SOME_PASSWORD: '', SOME_TOKEN: ' \n '})(`https://host.com?token=`), 'https://host.com?token=');
|
|
});
|
|
|
|
test('Exclude nonsensitive GOPRIVATE environment variable for Golang projects from the regexp', (t) => {
|
|
const env = {GOPRIVATE: 'host.com'};
|
|
t.is(hideSensitive(env)(`https://host.com?token=`), 'https://host.com?token=');
|
|
});
|
|
|
|
test('Exclude environment variables with value shorter than SECRET_MIN_SIZE from the regexp', (t) => {
|
|
const SHORT_TOKEN = repeat('a', SECRET_MIN_SIZE - 1);
|
|
const LONG_TOKEN = repeat('b', SECRET_MIN_SIZE);
|
|
const env = {SHORT_TOKEN, LONG_TOKEN};
|
|
t.is(
|
|
hideSensitive(env)(`https://user:${SHORT_TOKEN}@host.com?token=${LONG_TOKEN}`),
|
|
`https://user:${SHORT_TOKEN}@host.com?token=${SECRET_REPLACEMENT}`
|
|
);
|
|
});
|