1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
|
# Copyright (C) 2026 Siemens
#
# SPDX-License-Identifier: MIT
import io
import jsonschema
from packageurl import PackageURL
import json
from pathlib import Path
import pytest
from debsbom.tracepath.walker import GraphWalker, PackageRepr
from debsbom.commands.tracepath import TracePathCmd, PathOutputFormat
from debsbom.generate import SBOMType
from debsbom.schema import tracepath as schema_tracepath
from test_generation import sbom_generator
@pytest.mark.parametrize("sbom_type", list(SBOMType))
def test_tracepath_path(tmpdir, sbom_generator, sbom_type):
match sbom_type:
case SBOMType.SPDX:
_spdx_tools = pytest.importorskip("spdx_tools")
case SBOMType.CycloneDX:
_cyclonedx = pytest.importorskip("cyclonedx")
case _:
assert False, "unreachable"
dbom = sbom_generator("tests/root/dependency", sbom_types=[sbom_type])
outdir = Path(tmpdir)
dbom.generate(str(outdir / "sbom"), validate=False)
walker = GraphWalker.create(outdir / f"sbom.{sbom_type}.json")
src = PackageURL.from_string("pkg:deb/debian/libgcc-s1@12.2.0-14%2Bdeb12u1?arch=amd64")
path = walker.shortest(src)
assert len(path) == 2
assert path[0].name == "libgcc-s1"
assert path[1].name == "pytest-distro"
paths = list(walker.all_shortest(src))
assert len(paths) == 1
assert len(paths[0]) == 2
paths = list(walker.all_simple(src))
assert len(paths) == 2
assert any(len(p) == 2 for p in paths)
assert any(len(p) == 3 for p in paths)
def test_tracepath_schema():
path = [
PackageRepr(name="test-src", ref="REF-test-src"),
PackageRepr(name="test-middle", ref="REF-test-middle"),
PackageRepr(name="test-root", ref="REF-root"),
]
raw = next(TracePathCmd.iter_component_path(path, PathOutputFormat.JSON))
data = json.loads(raw)
assert len(data) == 3
jsonschema.validate(data, schema=schema_tracepath)
def test_tracepath_dot():
paths = [
[
PackageRepr(name="pkg-a", ref="REF-a", maintainer="maint1"),
PackageRepr(name="pkg-b", ref="REF-b", maintainer="maint2"),
],
[
PackageRepr(name="pkg-a", ref="REF-a", maintainer="maint1"),
PackageRepr(name="pkg-c", ref="REF-c", maintainer="maint3"),
],
]
buffer = io.StringIO()
TracePathCmd.dump_as_dot_graph(paths, buffer)
output = buffer.getvalue()
# Check that output contains digraph declaration
assert "digraph" in output
assert "{" in output
assert "}" in output
# Check that nodes are present
assert "pkg-a" in output
assert "pkg-b" in output
assert "pkg-c" in output
# Check that edges are present (arrows)
assert "->" in output
|
