@cyclonedx/cdxgen/lib/helpers/auditCategories.poku.js

Creates CycloneDX Software Bill of Materials (SBOM) from source or container image

import { assert, describe, it } from "poku";

import {
  expandBomAuditCategories,
  validateBomAuditCategories,
} from "./auditCategories.js";

describe("auditCategories", () => {
  it("keeps host-topology as a direct category", () => {
    assert.deepStrictEqual(expandBomAuditCategories("host-topology"), [
      "host-topology",
    ]);
  });

  it("expands the host alias to the HBOM packs plus host-topology", () => {
    assert.deepStrictEqual(expandBomAuditCategories("host"), [
      "hbom-security",
      "hbom-performance",
      "hbom-compliance",
      "host-topology",
    ]);
  });

  it("expands the golem alias to all Go Evinse rule packs", () => {
    assert.deepStrictEqual(expandBomAuditCategories("golem"), [
      "golem-security",
      "golem-performance",
      "golem-compliance",
    ]);
  });

  it("expands the ai-bom alias to AI-BOM and agent inventory rule packs", () => {
    assert.deepStrictEqual(expandBomAuditCategories("ai-bom"), [
      "ai-governance",
      "ai-security",
      "ai-performance",
      "ai-agent",
      "mcp-server",
    ]);
  });

  it("accepts host-topology during validation", () => {
    const validation = validateBomAuditCategories("host-topology", [
      { category: "host-topology" },
      { category: "hbom-security" },
    ]);
    assert.deepStrictEqual(validation.categories, ["host-topology"]);
    assert.deepStrictEqual(validation.expandedCategories, ["host-topology"]);
  });

  it("accepts the ai-bom alias during validation", () => {
    const validation = validateBomAuditCategories("ai-bom", [
      { category: "ai-governance" },
      { category: "ai-security" },
      { category: "ai-performance" },
      { category: "ai-agent" },
      { category: "mcp-server" },
    ]);
    assert.deepStrictEqual(validation.categories, ["ai-bom"]);
    assert.deepStrictEqual(validation.expandedCategories, [
      "ai-governance",
      "ai-security",
      "ai-performance",
      "ai-agent",
      "mcp-server",
    ]);
  });
});