wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

fix(iwooos): add wazuh alert verifier readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details
CD Pipeline / tests (push) Has been cancelled
Details

Browse Source
This commit is contained in:
ogt
2026-07-10 17:48:14 +08:00
parent 05033c5a29
commit aceee39b4a
5 changed files with 1004 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
apps/api/tests/test_iwooos_security_tool_closure_readback.py
View File

@@ -22,13 +22,21 @@ def test_iwooos_security_tool_closure_readback_rolls_up_tool_tracks() -> None:
assert payload["status"] == (
"tool_closure_readback_ready_controlled_apply_policy_active"
)
assert payload["summary"]["source_readback_count"] == 7
assert payload["summary"]["source_readback_count"] == 8
assert payload["summary"]["tool_track_count"] == 8
assert payload["summary"]["p0_tool_track_count"] == 3
assert payload["summary"]["wazuh_expected_host_scope_count"] == 6
assert payload["summary"]["wazuh_manager_registry_accepted_count"] == 6
assert payload["summary"]["wazuh_registry_complete_count"] == 1
assert payload["summary"]["wazuh_fim_vulnerability_alert_closed_count"] == 0
assert (
payload["summary"]["wazuh_fim_vulnerability_alert_verifier_ready_count"]
== 0
)
assert (
payload["summary"]["wazuh_fim_vulnerability_alert_verifier_ready_signal_count"]
== 5
)
assert payload["summary"]["supply_chain_scan_closed_count"] == 0
assert payload["summary"]["runtime_detection_closed_count"] == 0
assert payload["summary"]["web_api_dast_closed_count"] == 0
@@ -85,8 +93,8 @@ def test_iwooos_security_tool_closure_readback_marks_partial_vs_missing_tracks()
assert tracks["wazuh_detection_response"]["closure_state"] == (
"partial_readback_missing_verifier"
)
assert tracks["wazuh_detection_response"]["ready_signal_count"] == 1
assert tracks["wazuh_detection_response"]["missing_signal_count"] == 5
assert tracks["wazuh_detection_response"]["ready_signal_count"] == 5
assert tracks["wazuh_detection_response"]["missing_signal_count"] == 1
assert tracks["supply_chain_sbom_scan"]["closure_state"] == "required_not_closed"
assert tracks["runtime_threat_detection"]["tool_ids"] == ["falco"]
assert tracks["web_api_dast"]["tool_ids"] == ["owasp_zap_or_equivalent_dast"]
@@ -107,7 +115,16 @@ def test_iwooos_security_tool_closure_readback_accepts_alert_receipt_signal() ->
assert payload["summary"]["alert_receipt_accepted_count"] == 1
assert payload["summary"]["alert_receipt_observed_count"] == 1
assert tracks["wazuh_detection_response"]["ready_signal_count"] == 2
assert payload["summary"]["wazuh_fim_vulnerability_alert_closed_count"] == 1
assert (
payload["summary"]["wazuh_fim_vulnerability_alert_verifier_ready_count"]
== 1
)
assert tracks["wazuh_detection_response"]["ready_signal_count"] == 6
assert tracks["wazuh_detection_response"]["missing_signal_count"] == 0
assert tracks["wazuh_detection_response"]["closure_state"] == (
"ready_for_controlled_apply_candidate"
)
assert tracks["normalized_detection_schema"]["ready_signal_count"] == 1
assert payload["summary"]["controlled_apply_policy_active_count"] == 1
@@ -133,6 +150,7 @@ def test_iwooos_security_tool_closure_readback_api_is_public_safe(monkeypatch) -
assert data["schema_version"] == "iwooos_security_tool_closure_readback_v1"
assert data["summary"]["tool_track_count"] == 8
assert data["summary"]["alert_receipt_accepted_count"] == 1
assert data["summary"]["wazuh_fim_vulnerability_alert_closed_count"] == 1
assert data["summary"]["controlled_apply_policy_active_count"] == 1
assert data["boundaries"]["controlled_apply_policy_active"] is True
assert any(