Skip to content

Add integration tests, security/QAT workflows, and SDK framework README#3

Open
bnreplah wants to merge 1 commit intomainfrom
claude/veracode-sdk-framework-488tC
Open

Add integration tests, security/QAT workflows, and SDK framework README#3
bnreplah wants to merge 1 commit intomainfrom
claude/veracode-sdk-framework-488tC

Conversation

@bnreplah
Copy link
Copy Markdown
Owner

  • tests/unit/: 55 unit tests for email validation, schedule helpers, CSV parsing
  • tests/integration/: 71 integration tests covering DAST request script, blacklist
    script, bash syntax validation, shellcheck, XML API scripts, and live API
    connectivity (credential-gated)
  • tests/fixtures/: allowlist, blacklist, glblacklist CSV fixtures for test runs
  • pytest.ini, requirements-test.txt: test runner configuration
  • .github/workflows/integration-tests.yml: unit + integration + shell + API tests,
    split into jobs with artifact uploads and optional live API job on main
  • .github/workflows/security-scan.yml: Bandit, ShellCheck, Gitleaks, pip-audit,
    Semgrep, and credentials-file checker; scheduled weekly
  • .github/workflows/qat.yml: flake8, ShellCheck lint, JSON/YAML validation,
    PSScriptAnalyzer on Windows, full test suite with result publishing
  • README.md: rewritten with badge table, SDK framework overview, API reference,
    quick-start, test docs, and secrets guide
  • .gitignore: excludes pycache, credentials, test artifacts, coverage files

https://claude.ai/code/session_015pBhzcxzBhLcAujgXrwsaz

- tests/unit/: 55 unit tests for email validation, schedule helpers, CSV parsing
- tests/integration/: 71 integration tests covering DAST request script, blacklist
  script, bash syntax validation, shellcheck, XML API scripts, and live API
  connectivity (credential-gated)
- tests/fixtures/: allowlist, blacklist, glblacklist CSV fixtures for test runs
- pytest.ini, requirements-test.txt: test runner configuration
- .github/workflows/integration-tests.yml: unit + integration + shell + API tests,
  split into jobs with artifact uploads and optional live API job on main
- .github/workflows/security-scan.yml: Bandit, ShellCheck, Gitleaks, pip-audit,
  Semgrep, and credentials-file checker; scheduled weekly
- .github/workflows/qat.yml: flake8, ShellCheck lint, JSON/YAML validation,
  PSScriptAnalyzer on Windows, full test suite with result publishing
- README.md: rewritten with badge table, SDK framework overview, API reference,
  quick-start, test docs, and secrets guide
- .gitignore: excludes __pycache__, credentials, test artifacts, coverage files

https://claude.ai/code/session_015pBhzcxzBhLcAujgXrwsaz
@github-actions
Copy link
Copy Markdown

QAT Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 5198c9b.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants