Skip to content

Commit

Permalink
test: Added integration test using a previous false-positive, ajax-re…
Browse files Browse the repository at this point in the history
…quester, which now does not report a false-positive
  • Loading branch information
art1f1c3R committed Nov 27, 2024
1 parent 827f149 commit 9fac0b7
Show file tree
Hide file tree
Showing 2 changed files with 33 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
/* Copyright (c) 2024 - 2024, Oracle and/or its affiliates. All rights reserved. */
/* Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl/. */

#include "prelude.dl"

Policy("check-ajax-requester", component_id, "Check ajax-requester artifacts") :-
check_passed(component_id, "mcn_detect_malicious_metadata_1").

apply_policy_to("check-ajax-requester", component_id) :-
is_component(component_id, purl),
match("pkg:pypi/ajax-requester", purl).
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
# Copyright (c) 2024 - 2024, Oracle and/or its affiliates. All rights reserved.
# Licensed under the Universal Permissive License v 1.0 as shown at https://oss.oracle.com/licenses/upl/.

description: |
Analyzing the metadata of a project with unreachable links, frequent releases, and the maintainer
released it shortly after account registration with a suspicious setup.py file, but a wheel file
is present. Macaron should report a pass for such a package.
tags:
- macaron-python-package

steps:
- name: Run macaron analyze against ajax-requester
kind: analyze
options:
command_args:
- -purl
- pkg:pypi/ajax-requester
- name: Run macaron verify-policy to check the results
kind: verify
options:
policy: policy.dl

0 comments on commit 9fac0b7

Please sign in to comment.