dillenberg/ECC
1
0
Fork 0
mirror of https://github.com/Jeuners/ECC.git synced 2026-09-18 02:56:11 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

security: cover gh-token-monitor token persistence

Browse source
This commit is contained in:
Affaan Mustafa 2026-05-17 17:46:35 -04:00
parent 6b282aaa43
commit 36d390aa7d
3 changed files with 37 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
tests/ci/scan-supply-chain-iocs.test.js
View file

@ -365,6 +365,18 @@ function run() {
});
})) passed++; else failed++;
if (test('rejects Mini Shai-Hulud gh-token-monitor token store when home scan is enabled', () => {
withFixture({
'home/.config/gh-token-monitor/token': 'redacted-token-placeholder',
}, rootDir => {
const homeDir = path.join(rootDir, 'home');
const result = scanSupplyChainIocs({ rootDir, home: true, homeDir });
assert.ok(result.findings.some(
finding => finding.indicator === '~/.config/gh-token-monitor/token',
));
});
})) passed++; else failed++;
if (test('rejects installed payload filenames in node_modules', () => {
withFixture({
'node_modules/@tanstack/react-router/router_init.js': '/* payload */',