mirror of
https://github.com/we-promise/sure.git
synced 2026-05-31 08:19:03 +00:00
Pipelock secret scanner pattern-matches `sk-ant-*` as a real Anthropic API key and fails the PR security-scan check. Test stubs and ClimateControl env values used `sk-ant-test`, `sk-ant-from-setting`, `sk-ant-x`, `sk-ant-y` as obvious placeholders, but the scanner does not care about value entropy. Switched to `fake-anthropic-key-*` / `fake-token-*` strings so the scanner stops flagging them. No production code touched, no behavior change — Provider::Anthropic still accepts any non-blank token.
111 lines
3.6 KiB
Ruby
111 lines
3.6 KiB
Ruby
require "test_helper"
|
|
|
|
class Provider::RegistryTest < ActiveSupport::TestCase
|
|
test "providers filters out nil values when provider is not configured" do
|
|
# Ensure no LLM provider is configured
|
|
ClimateControl.modify(
|
|
"OPENAI_ACCESS_TOKEN" => nil,
|
|
"ANTHROPIC_ACCESS_TOKEN" => nil,
|
|
"ANTHROPIC_API_KEY" => nil
|
|
) do
|
|
Setting.stubs(:openai_access_token).returns(nil)
|
|
Setting.stubs(:anthropic_access_token).returns(nil)
|
|
|
|
registry = Provider::Registry.for_concept(:llm)
|
|
|
|
# Should return empty array instead of [nil]
|
|
assert_equal [], registry.providers
|
|
end
|
|
end
|
|
|
|
test "providers returns configured providers" do
|
|
# Mock a configured OpenAI provider
|
|
mock_provider = mock("openai_provider")
|
|
Provider::Registry.stubs(:openai).returns(mock_provider)
|
|
|
|
registry = Provider::Registry.for_concept(:llm)
|
|
|
|
assert_equal [ mock_provider ], registry.providers
|
|
end
|
|
|
|
test "get_provider raises error when provider not found for concept" do
|
|
registry = Provider::Registry.for_concept(:llm)
|
|
|
|
error = assert_raises(Provider::Registry::Error) do
|
|
registry.get_provider(:nonexistent)
|
|
end
|
|
|
|
assert_match(/Provider 'nonexistent' not found for concept: llm/, error.message)
|
|
end
|
|
|
|
test "get_provider returns nil when provider not configured" do
|
|
# Ensure OpenAI is not configured
|
|
ClimateControl.modify("OPENAI_ACCESS_TOKEN" => nil) do
|
|
Setting.stubs(:openai_access_token).returns(nil)
|
|
|
|
registry = Provider::Registry.for_concept(:llm)
|
|
|
|
# Should return nil when provider method exists but returns nil
|
|
assert_nil registry.get_provider(:openai)
|
|
end
|
|
end
|
|
|
|
test "anthropic provider returns nil when no credentials are configured" do
|
|
ClimateControl.modify(
|
|
"ANTHROPIC_ACCESS_TOKEN" => nil,
|
|
"ANTHROPIC_API_KEY" => nil
|
|
) do
|
|
Setting.stubs(:anthropic_access_token).returns(nil)
|
|
|
|
assert_nil Provider::Registry.get_provider(:anthropic)
|
|
end
|
|
end
|
|
|
|
test "anthropic provider initializes from ANTHROPIC_API_KEY env" do
|
|
ClimateControl.modify("ANTHROPIC_API_KEY" => "fake-anthropic-key-for-tests", "ANTHROPIC_ACCESS_TOKEN" => nil) do
|
|
Setting.stubs(:anthropic_access_token).returns(nil)
|
|
|
|
provider = Provider::Registry.get_provider(:anthropic)
|
|
|
|
assert_instance_of Provider::Anthropic, provider
|
|
end
|
|
end
|
|
|
|
test "anthropic provider falls back to Setting when ENV is empty" do
|
|
ClimateControl.modify(
|
|
"ANTHROPIC_ACCESS_TOKEN" => "",
|
|
"ANTHROPIC_API_KEY" => "",
|
|
"ANTHROPIC_BASE_URL" => "",
|
|
"ANTHROPIC_MODEL" => ""
|
|
) do
|
|
Setting.stubs(:anthropic_access_token).returns("fake-anthropic-key-from-setting")
|
|
Setting.stubs(:anthropic_base_url).returns(nil)
|
|
Setting.stubs(:anthropic_model).returns(nil)
|
|
|
|
provider = Provider::Registry.get_provider(:anthropic)
|
|
|
|
assert_instance_of Provider::Anthropic, provider
|
|
end
|
|
end
|
|
|
|
test "openai provider falls back to Setting when ENV is empty string" do
|
|
# Mock ENV to return empty string (common in Docker/env files)
|
|
# Use stub_env helper which properly stubs ENV access
|
|
ClimateControl.modify(
|
|
"OPENAI_ACCESS_TOKEN" => "",
|
|
"OPENAI_URI_BASE" => "",
|
|
"OPENAI_MODEL" => ""
|
|
) do
|
|
Setting.stubs(:openai_access_token).returns("test-token-from-setting")
|
|
Setting.stubs(:openai_uri_base).returns(nil)
|
|
Setting.stubs(:openai_model).returns(nil)
|
|
|
|
provider = Provider::Registry.get_provider(:openai)
|
|
|
|
# Should successfully create provider using Setting value
|
|
assert_not_nil provider
|
|
assert_instance_of Provider::Openai, provider
|
|
end
|
|
end
|
|
end
|