coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(WH-ENG-20260822-AUDIT-E2-01): bind declared fixtures

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a025c2-407a-7a32-b40a-f37a52f03f62
This commit is contained in:
tegwick 2026-08-22 12:04:50 +02:00
parent 461554a749
commit 1418dac0de
3 changed files with 39 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

17
runners/audit_core_e2.py
View file

@ -169,6 +169,20 @@ def equivalent(left: dict, right: dict) -> bool:
))
def invocation_fixture_ids(args: argparse.Namespace) -> set[str]:
"""Exact synthetic identifiers the invocation may address or emit."""
return {
args.tenant_a,
args.tenant_b,
args.event_a,
args.event_b,
args.absent_event,
args.correlation,
args.forged_event,
}
def main() -> None:
parser = argparse.ArgumentParser()
parser.add_argument("--base-url", required=True)
@ -181,6 +195,7 @@ def main() -> None:
parser.add_argument("--event-a", required=True)
parser.add_argument("--event-b", required=True)
parser.add_argument("--absent-event", required=True)
parser.add_argument("--forged-event", required=True)
parser.add_argument("--correlation", required=True)
parser.add_argument("--occurred-at", required=True,
help="fixed RFC3339 fixture time; makes retries idempotent")
@ -238,7 +253,7 @@ def main() -> None:
"outcome": "finding" if reasons else "pass", "reasons": reasons,
"observations": {"owner": owner_corr, "attacker": attacker_corr}})
forged = "whitehat-e2-forged-b-20260821"
forged = args.forged_event
forged_response = client.observation(client.call(
args.token_a_file, "POST", "/v1/events",
event(forged, args.tenant_b, args.correlation, args.occurred_at)