mirror of
https://github.com/securego/gosec.git
synced 2024-12-25 12:05:52 +00:00
56f943b802
This feature adds support to generate auto fixes for Go scanning findings using LLM (AI). In a first instance, it relies on Gemini API to get a suggestion for a solution. This can be later extended, to integrate also other AI providers. --------- Signed-off-by: Cosmin Cojocar <ccojocar@google.com> Co-authored-by: ccoVeille <3875889+ccoVeille@users.noreply.github.com> Co-authored-by: Cosmin Cojocar <ccojocar@google.com>
114 lines
2.9 KiB
Go
114 lines
2.9 KiB
Go
package autofix
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/mock"
|
|
|
|
"github.com/securego/gosec/v2/issue"
|
|
)
|
|
|
|
// MockGenAIClient is a mock of the GenAIClient interface
|
|
type MockGenAIClient struct {
|
|
mock.Mock
|
|
}
|
|
|
|
func (m *MockGenAIClient) Close() error {
|
|
args := m.Called()
|
|
return args.Error(0)
|
|
}
|
|
|
|
func (m *MockGenAIClient) GenerativeModel(name string) GenAIGenerativeModel {
|
|
args := m.Called(name)
|
|
return args.Get(0).(GenAIGenerativeModel)
|
|
}
|
|
|
|
// MockGenAIGenerativeModel is a mock of the GenAIGenerativeModel interface
|
|
type MockGenAIGenerativeModel struct {
|
|
mock.Mock
|
|
}
|
|
|
|
func (m *MockGenAIGenerativeModel) GenerateContent(ctx context.Context, prompt string) (string, error) {
|
|
args := m.Called(ctx, prompt)
|
|
return args.String(0), args.Error(1)
|
|
}
|
|
|
|
func TestGenerateSolutionByGemini_Success(t *testing.T) {
|
|
// Arrange
|
|
issues := []*issue.Issue{
|
|
{What: "Example issue 1"},
|
|
}
|
|
|
|
mockClient := new(MockGenAIClient)
|
|
mockModel := new(MockGenAIGenerativeModel)
|
|
mockClient.On("GenerativeModel", GeminiModel).Return(mockModel)
|
|
mockModel.On("GenerateContent", mock.Anything, mock.Anything).Return("Autofix for issue 1", nil)
|
|
|
|
// Act
|
|
err := generateSolutionByGemini(mockClient, issues)
|
|
|
|
// Assert
|
|
assert.NoError(t, err)
|
|
assert.Equal(t, "Autofix for issue 1", issues[0].Autofix)
|
|
mockClient.AssertExpectations(t)
|
|
mockModel.AssertExpectations(t)
|
|
}
|
|
|
|
func TestGenerateSolutionByGemini_NoCandidates(t *testing.T) {
|
|
// Arrange
|
|
issues := []*issue.Issue{
|
|
{What: "Example issue 2"},
|
|
}
|
|
|
|
mockClient := new(MockGenAIClient)
|
|
mockModel := new(MockGenAIGenerativeModel)
|
|
mockClient.On("GenerativeModel", GeminiModel).Return(mockModel)
|
|
mockModel.On("GenerateContent", mock.Anything, mock.Anything).Return("", nil)
|
|
|
|
// Act
|
|
err := generateSolutionByGemini(mockClient, issues)
|
|
|
|
// Assert
|
|
assert.Error(t, err)
|
|
assert.Equal(t, "no autofix returned by gemini", err.Error())
|
|
mockClient.AssertExpectations(t)
|
|
mockModel.AssertExpectations(t)
|
|
}
|
|
|
|
func TestGenerateSolutionByGemini_APIError(t *testing.T) {
|
|
// Arrange
|
|
issues := []*issue.Issue{
|
|
{What: "Example issue 3"},
|
|
}
|
|
|
|
mockClient := new(MockGenAIClient)
|
|
mockModel := new(MockGenAIGenerativeModel)
|
|
mockClient.On("GenerativeModel", GeminiModel).Return(mockModel)
|
|
mockModel.On("GenerateContent", mock.Anything, mock.Anything).Return("", errors.New("API error"))
|
|
|
|
// Act
|
|
err := generateSolutionByGemini(mockClient, issues)
|
|
|
|
// Assert
|
|
assert.Error(t, err)
|
|
assert.Equal(t, "generating autofix with gemini: API error", err.Error())
|
|
mockClient.AssertExpectations(t)
|
|
mockModel.AssertExpectations(t)
|
|
}
|
|
|
|
func TestGenerateSolution_UnsupportedProvider(t *testing.T) {
|
|
// Arrange
|
|
issues := []*issue.Issue{
|
|
{What: "Example issue 4"},
|
|
}
|
|
|
|
// Act
|
|
err := GenerateSolution("unsupported-provider", "test-api-key", "", issues)
|
|
|
|
// Assert
|
|
assert.Error(t, err)
|
|
assert.Equal(t, "ai provider not supported", err.Error())
|
|
}
|