Files
sigma-rules/tests/base.py
T
Justin Ibarra cd6a5983c6 Speed up unit tests (#2626)
* cache rule loader; skip rule tests on RL failure

-------
Co-authored-by: brokensound77 <brokensound77@users.noreply.github.com>
2023-03-07 16:40:41 -07:00

60 lines
2.1 KiB
Python

# Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
# or more contributor license agreements. Licensed under the Elastic License
# 2.0; you may not use this file except in compliance with the Elastic License
# 2.0.
"""Shared resources for tests."""
import unittest
from functools import lru_cache
from typing import Union
from detection_rules.rule import TOMLRule
from detection_rules.rule_loader import DeprecatedCollection, DeprecatedRule, RuleCollection, production_filter
@lru_cache
def default_rules() -> RuleCollection:
return RuleCollection.default()
class BaseRuleTest(unittest.TestCase):
"""Base class for shared test cases which need to load rules"""
RULE_LOADER_FAIL = False
RULE_LOADER_FAIL_MSG = None
RULE_LOADER_FAIL_RAISED = False
@classmethod
def setUpClass(cls):
# too noisy; refactor
# os.environ["DR_NOTIFY_INTEGRATION_UPDATE_AVAILABLE"] = "1"
if not cls.RULE_LOADER_FAIL:
try:
rc = default_rules()
cls.all_rules = rc.rules
cls.rule_lookup = rc.id_map
cls.production_rules = rc.filter(production_filter)
cls.deprecated_rules: DeprecatedCollection = rc.deprecated
except Exception as e:
cls.RULE_LOADER_FAIL = True
cls.RULE_LOADER_FAIL_MSG = str(e)
@staticmethod
def rule_str(rule: Union[DeprecatedRule, TOMLRule], trailer=' ->') -> str:
return f'{rule.id} - {rule.name}{trailer or ""}'
def setUp(self) -> None:
if self.RULE_LOADER_FAIL:
# limit the loader failure to just one run
# raise a dedicated test failure for the loader
if not self.RULE_LOADER_FAIL_RAISED:
self.RULE_LOADER_FAIL_RAISED = True
with self.subTest('Test that the rule loader loaded with no validation or other failures.'):
self.fail(f'Rule loader failure: \n{self.RULE_LOADER_FAIL_MSG}')
self.skipTest('Rule loader failure')
else:
super().setUp()