from pathlib import Path from scripts.adapters.gitleaks import parse_gitleaks_output _FIXTURES = Path(__file__).parent / "fixtures" def test_parses_findings_as_critical(): payload = (_FIXTURES / "gitleaks_sample.json").read_text() findings = parse_gitleaks_output(payload) rules = {f.rule_id for f in findings} assert "aws-access-token" in rules assert "generic-api-key" in rules for f in findings: assert f.severity == "critical" assert f.tool == "gitleaks" def test_handles_empty(): assert parse_gitleaks_output("[]") == [] def test_handles_invalid(): assert parse_gitleaks_output("nope") == []