admin/Moltbot
1
0
Fork 0
Code Issues Pull Requests Actions 6 Packages Projects Releases Wiki Activity

perf(test): lazy-load weak-random fallback scanner

Browse Source
This commit is contained in:
Peter Steinberger
2026-02-22 17:43:49 +00:00
parent 90a8ddc3c6
commit 03285465ff
1 changed files with 23 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
src/security/weak-random-patterns.test.ts
View File

@@ -1,8 +1,5 @@
import { spawnSync } from "node:child_process";
import fs from "node:fs/promises";
import path from "node:path";
import { describe, expect, it } from "vitest";
import { listRuntimeSourceFiles, shouldSkipRuntimeSourcePath } from "../test-utils/repo-scan.js";
const SCAN_ROOTS = ["src", "extensions"] as const;
const RUNTIME_TS_GLOBS = [
@@ -18,6 +15,21 @@ const RUNTIME_TS_GLOBS = [
"!**/*test-utils*.ts",
] as const;
const SKIP_RUNTIME_SOURCE_PATH_PATTERNS = [
/\.test\.tsx?$/,
/\.test-helpers\.tsx?$/,
/\.test-utils\.tsx?$/,
/\.e2e\.tsx?$/,
/\.d\.ts$/,
/[\\/](?:__tests__|tests)[\\/]/,
/[\\/][^\\/]*test-helpers(?:\.[^\\/]+)?\.ts$/,
/[\\/][^\\/]*test-utils(?:\.[^\\/]+)?\.ts$/,
];
function shouldSkipRuntimeSourcePath(relativePath: string): boolean {
return SKIP_RUNTIME_SOURCE_PATH_PATTERNS.some((pattern) => pattern.test(relativePath));
}
async function findWeakRandomPatternMatches(repoRoot: string): Promise<string[]> {
const rgResult = spawnSync(
"rg",
@@ -56,6 +68,12 @@ async function findWeakRandomPatternMatches(repoRoot: string): Promise<string[]>
return matches;
}
const [{ default: fs }, pathModule, { listRuntimeSourceFiles }] = await Promise.all([
import("node:fs/promises"),
import("node:path"),
import("../test-utils/repo-scan.js"),
]);
const matches: string[] = [];
const files = await listRuntimeSourceFiles(repoRoot, {
roots: SCAN_ROOTS,
@@ -68,7 +86,7 @@ async function findWeakRandomPatternMatches(repoRoot: string): Promise<string[]>
if (!line.includes("Date.now") || !line.includes("Math.random")) {
continue;
}
matches.push(`${path.relative(repoRoot, filePath)}:${idx + 1}`);
matches.push(`${pathModule.relative(repoRoot, filePath)}:${idx + 1}`);
}
}
return matches;
@@ -76,7 +94,7 @@ async function findWeakRandomPatternMatches(repoRoot: string): Promise<string[]>
describe("weak random pattern guardrail", () => {
it("rejects Date.now + Math.random token/id patterns in runtime code", async () => {
const repoRoot = path.resolve(process.cwd());
const repoRoot = process.cwd();
const matches = await findWeakRandomPatternMatches(repoRoot);
expect(matches).toEqual([]);
});