secubox-deb/packages/secubox-cve-triage/tests
CyberMind-FR dc190aa049 fix(cve-triage): is_kev reads info.tags (real nuclei format) + CLI main() tests
is_kev() read tags at the template's top level while extract() already read
classification/metadata from under info: — real upstream nuclei-templates
nest tags under info: too, so a real curation run silently produced zero
candidates. Read info.tags first with a top-level fallback for legacy
fixtures, and realign the two vendored KEV templates to the real nested
format. Also add direct coverage of cli.main() (dry-run no-op, --apply
writing only product_absent_probes, and the incomplete-inventory fail-safe
returning 3 without touching the rules file).

Co-Authored-By: Gerald KERMA <devel@cybermind.fr>
2026-07-18 08:06:20 +02:00
..
conftest.py
test_cli.py fix(cve-triage): is_kev reads info.tags (real nuclei format) + CLI main() tests 2026-07-18 08:06:20 +02:00
test_emit.py fix(cve-triage): preserve waf-rules.json mode on wafgen rewrite 2026-07-18 07:41:00 +02:00
test_extract.py fix(cve-triage): is_kev reads info.tags (real nuclei format) + CLI main() tests 2026-07-18 08:06:20 +02:00
test_generate.py feat(cve-triage): secubox-cvectl waf-rules generate + vendored Nuclei subset 2026-07-18 07:46:16 +02:00
test_inventory.py fix(cve-triage): guard routes JSON against non-dict payloads 2026-07-18 07:23:38 +02:00
test_presence.py feat(cve-triage): presence oracle — appliance allowlist AND absence 2026-07-18 07:11:57 +02:00