Function assertContainerFromLockEntry

core/integration/lockfile_test.go:503–528

(t *testctx.T, lockBytes []byte, expectedPolicy workspace.LockPolicy)

}

func assertContainerFromLockEntry(t *testctx.T, lockBytes []byte, expectedPolicy workspace.LockPolicy) {
	t.Helper()
	parsed, err := lockfile.Parse(lockBytes)
	require.NoError(t, err)

	var found bool
	for _, entry := range parsed.Entries() {
		if entry.Namespace != "" || entry.Operation != "container.from" {
			continue
		}
		found = true
		require.Len(t, entry.Inputs, 2)

		ref, ok := entry.Inputs[0].(string)
		require.True(t, ok)
		require.Contains(t, ref, "alpine:latest")

		require.Equal(t, string(expectedPolicy), entry.Policy)

		value, ok := entry.Value.(string)
		require.True(t, ok)
		require.True(t, strings.HasPrefix(value, "sha256:"))
	}

	require.True(t, found, "expected container.from entry in lockfile")
}

func assertGitLockEntry(t *testctx.T, lockBytes []byte, operation string, expectedInputs []any, expectedPolicy workspace.LockPolicy) {
	t.Helper()