mirror of
https://github.com/pre-commit/pre-commit-hooks.git
synced 2026-04-03 02:56:52 +00:00
ccdf02dfd4
As described by RFC7468 and RFC5958, keys that are encoded using the "ENCRYPTED PRIVATE KEY" label are described as private key information and therefore can contain secrets, even though encrypted. Signed-off-by: Luís Ferreira <contact@lsferreira.net>
25 lines
790 B
Python
25 lines
790 B
Python
import pytest
|
|
|
|
from pre_commit_hooks.detect_private_key import main
|
|
|
|
# Input, expected return value
|
|
TESTS = (
|
|
(b'-----BEGIN RSA PRIVATE KEY-----', 1),
|
|
(b'-----BEGIN DSA PRIVATE KEY-----', 1),
|
|
(b'-----BEGIN EC PRIVATE KEY-----', 1),
|
|
(b'-----BEGIN OPENSSH PRIVATE KEY-----', 1),
|
|
(b'PuTTY-User-Key-File-2: ssh-rsa', 1),
|
|
(b'---- BEGIN SSH2 ENCRYPTED PRIVATE KEY ----', 1),
|
|
(b'-----BEGIN ENCRYPTED PRIVATE KEY-----', 1),
|
|
(b'ssh-rsa DATA', 0),
|
|
(b'ssh-dsa DATA', 0),
|
|
# Some arbitrary binary data
|
|
(b'\xa2\xf1\x93\x12', 0),
|
|
)
|
|
|
|
|
|
@pytest.mark.parametrize(('input_s', 'expected_retval'), TESTS)
|
|
def test_main(input_s, expected_retval, tmpdir):
|
|
path = tmpdir.join('file.txt')
|
|
path.write_binary(input_s)
|
|
assert main([str(path)]) == expected_retval
|