// SPDX-License-Identifier: GPL-3.0-or-later

package detectors

import (
	"testing"

	"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/config"
	"codeberg.org/anassaeneroi/enodia-sentinal/go-agent/internal/model"
)

func TestNewSUIDSeverityAndBaseline(t *testing.T) {
	alerts := NewSUID(model.State{
		SUIDBinaries: []string{"/tmp/evil", "/usr/local/bin/newtool", "/usr/bin/sudo"},
		SUIDBaseline: []string{"/usr/bin/sudo"},
	}, config.Default())
	if len(alerts) != 2 {
		t.Fatalf("got %#v", alerts)
	}
	if alerts[0].Severity != "CRITICAL" || alerts[1].Severity != "HIGH" {
		t.Fatalf("unexpected severities: %#v", alerts)
	}
}

func TestNewSUIDWithoutScanIsSilent(t *testing.T) {
	if alerts := NewSUID(model.State{SUIDBaseline: []string{"/usr/bin/sudo"}}, config.Default()); len(alerts) != 0 {
		t.Fatalf("got %#v", alerts)
	}
}