feat: add platform and supply-chain audit commands (#1926)

This commit is contained in:
Affaan Mustafa
2026-05-15 08:06:26 -04:00
committed by GitHub
parent ee85e1482e
commit 13585f1092
10 changed files with 1049 additions and 3 deletions

View File

@@ -72,6 +72,8 @@ function main() {
assert.match(result.stdout, /consult/);
assert.match(result.stdout, /loop-status/);
assert.match(result.stdout, /work-items/);
assert.match(result.stdout, /platform-audit/);
assert.match(result.stdout, /security-ioc-scan/);
}],
['delegates explicit install command', () => {
const result = runCli(['install', '--dry-run', '--json', 'typescript']);
@@ -207,6 +209,28 @@ function main() {
assert.strictEqual(result.status, 0, result.stderr);
assert.match(result.stdout, /node scripts\/work-items\.js upsert/);
}],
['supports help for the platform-audit subcommand', () => {
const result = runCli(['help', 'platform-audit']);
assert.strictEqual(result.status, 0, result.stderr);
assert.match(result.stdout, /Usage: node scripts\/platform-audit\.js/);
}],
['supports help for the security-ioc-scan subcommand', () => {
const result = runCli(['help', 'security-ioc-scan']);
assert.strictEqual(result.status, 0, result.stderr);
assert.match(result.stdout, /Usage: node scripts\/ci\/scan-supply-chain-iocs\.js/);
}],
['delegates security-ioc-scan command', () => {
const projectRoot = createTempDir('ecc-cli-ioc-scan-');
fs.writeFileSync(
path.join(projectRoot, 'package.json'),
JSON.stringify({ dependencies: { leftpad: '1.0.0' } }, null, 2)
);
const result = runCli(['security-ioc-scan', '--root', projectRoot, '--json']);
assert.strictEqual(result.status, 0, result.stderr);
const payload = parseJson(result.stdout);
assert.deepStrictEqual(payload.findings, []);
}],
['fails on unknown commands instead of treating them as installs', () => {
const result = runCli(['bogus']);
assert.strictEqual(result.status, 1);