package db import ( "slices" "testing" ) // TestFindingsPageAndStats exercises ListFindingsPage (filter/sort/paging) and // FindingStats against the live dev PG. It tags its rows with a unique vulnclass // so assertions are isolated from any pre-existing data, and cleans up after. func TestFindingsPageAndStats(t *testing.T) { d, err := Open(testDSN(t)) if err != nil { t.Skipf("postgres unavailable (%v) — skipping", err) } defer d.Close() const vc = "__test_vc_pagination__" // clean any leftovers from a prior aborted run, and clean up on exit cleanup := func() { _, _ = d.Exec(`DELETE FROM findings WHERE vulnclass=$1`, vc) } cleanup() defer cleanup() // Seed 5 findings under the marker vulnclass: 3 high, 2 low; 2 pending, 3 resolved. seed := []struct { sev, status string }{ {"high", "pending"}, {"high", "resolved"}, {"high", "resolved"}, {"low", "pending"}, {"low", "resolved"}, } var ids []int64 for i, s := range seed { id, err := d.AddFinding(0, 0, vc, s.sev, "summary", "poc", "tester", nil) if err != nil { t.Fatalf("AddFinding[%d]: %v", i, err) } if _, err := d.SetFindingStatus(id, s.status); err != nil { t.Fatalf("SetFindingStatus[%d]: %v", i, err) } ids = append(ids, id) } // Filter by our vulnclass → exactly the 5 seeded rows, paged 2 per page. p1, total, err := d.ListFindingsPage(FindingFilter{VulnClass: vc, Sort: "severity"}, 1, 2) if err != nil { t.Fatal(err) } if total != 5 { t.Fatalf("total: want 5, got %d", total) } if len(p1) != 2 { t.Fatalf("page1 size: want 2, got %d", len(p1)) } // severity sort → highs first if p1[0].Severity != "high" || p1[1].Severity != "high" { t.Fatalf("severity sort broken: %q, %q", p1[0].Severity, p1[1].Severity) } p3, _, err := d.ListFindingsPage(FindingFilter{VulnClass: vc, Sort: "severity"}, 3, 2) if err != nil { t.Fatal(err) } if len(p3) != 1 { t.Fatalf("page3 size: want 1 (5 rows / 2), got %d", len(p3)) } // Combined filter: vulnclass + status=pending → 2 rows. pend, total, err := d.ListFindingsPage(FindingFilter{VulnClass: vc, Status: FindingPending}, 1, 50) if err != nil { t.Fatal(err) } if total != 2 || len(pend) != 2 { t.Fatalf("pending filter: want 2/2, got %d/%d", total, len(pend)) } // Combined filter: vulnclass + severity=high → 3 rows. _, total, err = d.ListFindingsPage(FindingFilter{VulnClass: vc, Severity: "high"}, 1, 50) if err != nil { t.Fatal(err) } if total != 3 { t.Fatalf("high filter: want 3, got %d", total) } // Stats: whole-table, so assert our contribution is reflected (>=) and the // marker vulnclass is present. st, err := d.FindingStats() if err != nil { t.Fatal(err) } if st.Total < 5 || st.High < 3 || st.Low < 2 || st.Pending < 2 { t.Fatalf("stats undercount: %+v", st) } if !slices.Contains(st.VulnClasses, vc) { t.Fatalf("stats vulnclasses missing %q", vc) } }