Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Vulnerability Detector integration tests for SUSE Linux Enterprise #2792

Closed
jmv74211 opened this issue Apr 18, 2022 · 0 comments · Fixed by #2847 or #2945
Closed

Add Vulnerability Detector integration tests for SUSE Linux Enterprise #2792

jmv74211 opened this issue Apr 18, 2022 · 0 comments · Fixed by #2847 or #2945

Comments

@jmv74211
Copy link
Contributor

For Wazuh v4.4.0 we want to add SUSE Linux Enterprise support for the Wazuh Vulnerability Detector module.

Therefore, we want to add the related testing to test this new integration. During this development, we were working on the construction of new integration tests (see this PR #1472), but these tests have already been deprecated, because we recently made a refactor of all the integration tests of vulnerability detector.

A study has been made of what would need to be added, being the following:

Documentation

  • Add SUSE OS to the test documentation

Feed

  • Add new custom SUSE feed

Suite test_feeds

  • Test download feeds: Prove that it is downloaded, and that the update date is recent.
  • Test duplicate feeds: Test that after downloading the feed again, the vulnerabilities of the feeds are not duplicated
  • Test import invalid feed type: Test behavior when an invalid feed URL is entered
  • Test validate feed content: It downloads the feed files and checks that they are parseable (XML or JSON).

Suite test_providers

  • Test enabled/disabled: Check that the provider's feeds start downloading when activated.
  • Test missing os: Test the behavior when the tag is omitted. Check failure if the tag is required, and in case it is not, it starts downloading the feeds as normal
  • Test OS: Test that it starts downloading the feeds of the specified OS.
  • Test update from year: Test if the feed is updated from a specific date. If the option does not apply, check warning warning.
  • Test update interval: Test that the feed is updated at the specified interval

Suite test_scan_results

  • Test scan provider and NVD vulnerabilities: Test that vulnerable packages are reported using the OVAL and NVD feed.
  • Test scan provider vulnerabilities: Test that vulnerable packages are reported using the OVAL feed (NVD contains different vulnerabilities).
  • Test scan vulnerability removal: Check that it generates vulnerability alert fixed after removing or updating a vulnerable package.

It is requested to add and modify what is necessary in the integration tests for the integration of SUSE in vulnerability detector.

@damarisg damarisg added the Epic label Apr 20, 2022
@Deblintrake09 Deblintrake09 linked a pull request Jun 1, 2022 that will close this issue
@jmv74211 jmv74211 added this to the Development 4.4 milestone Jun 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment