@cyclonedx/cdxgen 12.3.2 → 12.4.0

package/lib/helpers/source.poku.js

@@ -45,6 +45,38 @@ describe("source helper purl resolution", () => {
     assert.strictEqual(recordActivity.firstCall.args[0].status, "blocked");
   });
 
+  it("hardenedGitCommand() tags git operations with the specific subcommand", async () => {
+    const safeSpawnSync = sinon
+      .stub()
+      .returns({ status: 0, stdout: "", stderr: "" });
+    const { hardenedGitCommand } = await esmock("./source.js", {
+      "./utils.js": {
+        cdxgenAgent: { get: sinon.stub() },
+        DEBUG_MODE: false,
+        fetchPomXmlAsJson: sinon.stub(),
+        getTmpDir: sinon.stub().returns(os.tmpdir()),
+        hasDangerousUnicode: sinon.stub().returns(false),
+        isDryRun: false,
+        isSecureMode: false,
+        isValidDriveRoot: sinon.stub().returns(true),
+        isWin: false,
+        safeMkdtempSync: sinon.stub(),
+        safeRmSync: sinon.stub(),
+        safeSpawnSync,
+      },
+    });
+
+    hardenedGitCommand(["fetch", "--tags"], { cwd: "/tmp/repo" });
+
+    sinon.assert.calledWithMatch(safeSpawnSync, "git", ["fetch", "--tags"], {
+      cdxgenActivity: sinon.match({
+        gitOperation: "fetch",
+        kind: "git-fetch",
+      }),
+      cwd: "/tmp/repo",
+    });
+  });
+
   it("resolves npm purl to repository URL", async () => {
     const getStub = sinon.stub().resolves({
       body: {