Fix Enforced Scanner Bug

salus-default.yaml

@@ -19,13 +19,4 @@ active_scanners: all
 # was necessary to ensure that certain scanners pass.
 # Other scanners may need to graduate from the testing phase or
 # should only be enforced explicitly by custom configuration.
-enforced_scanners:
-  - RepoNotEmpty
-  - Brakeman
-  - BundleAudit
-  - Gosec
-  - NPMAudit
-  - YarnAudit
-  - PatternSearch
-  - Semgrep
-  - CargoAudit
+enforced_scanners: []

spec/fixtures/processor/local_uri/expected_report.json

@@ -34,17 +34,7 @@
       "service_name": "buildkite",
       "url": "http://example.com/builds/123"
     },
-    "enforced_scanners": [
-      "Brakeman",
-      "BundleAudit",
-      "CargoAudit",
-      "Gosec",
-      "NPMAudit",
-      "PatternSearch",
-      "RepoNotEmpty",
-      "Semgrep",
-      "YarnAudit"
-    ],
+    "enforced_scanners": [],
     "report_uris": [
       {
         "format": "json",

spec/fixtures/processor/remote_uri/expected_report.json

@@ -34,17 +34,7 @@
       "service_name": "buildkite",
       "url": "http://example.com/builds/123"
     },
-    "enforced_scanners": [
-      "Brakeman",
-      "BundleAudit",
-      "CargoAudit",
-      "Gosec",
-      "NPMAudit",
-      "PatternSearch",
-      "RepoNotEmpty",
-      "Semgrep",
-      "YarnAudit"
-    ],
+    "enforced_scanners": [],
     "report_uris": [
       {
         "format": "json",

spec/lib/salus/config_spec.rb

@@ -28,7 +28,7 @@
         expect(config.project_name).to be_nil
         expect(config.custom_info).to be_nil
         expect(config.active_scanners).to eq(Set.new(Salus::Config::SCANNERS.keys))
-        expect(config.enforced_scanners).not_to be_empty
+        expect(config.enforced_scanners).to be_empty
         expect(config.scanner_configs['BundleAudit']).to include('pass_on_raise' => false)
       end
     end

spec/lib/salus/processor_spec.rb

@@ -112,7 +112,7 @@ def remove_key(json_string, encoded = false)
             'ReportNodeModules',
             'ReportRubyGems'
           )
-          expect(reported_config[:enforced_scanners]).not_to be_empty
+          expect(reported_config[:enforced_scanners]).to be_empty
         end
       end
     end
@@ -143,14 +143,14 @@ def remove_key(json_string, encoded = false)
     it 'should scan the project given by a particular path' do
       processor = Salus::Processor.new(repo_path: 'spec/fixtures/processor/explicit_path')
       processor.scan_project
-      expect(processor.passed?).to eq(false)
+      expect(processor.passed?).to eq(true)
 
       report_hsh = processor.report.to_h
 
       expect(report_hsh[:project_name]).to eq('EVA-01')
       expect(report_hsh[:custom_info]).to eq('Purple unit')
       expect(report_hsh[:version]).to eq(Salus::VERSION)
-      expect(report_hsh[:passed]).to eq(false)
+      expect(report_hsh[:passed]).to eq(true)
       expect(report_hsh[:errors]).to eq([])
 
       expect(report_hsh[:scans]['BundleAudit'][:passed]).to eq(false)
@@ -178,7 +178,7 @@ def remove_key(json_string, encoded = false)
         cli_scanners_to_run: %w[Brakeman NPMAudit])
       processor.scan_project
 
-      expect(processor.passed?).to eq(false)
+      expect(processor.passed?).to eq(true)
 
       report_hsh = processor.report.to_h
 
@@ -189,7 +189,7 @@ def remove_key(json_string, encoded = false)
       expect(report_hsh[:project_name]).to eq('EVA-01')
       expect(report_hsh[:custom_info]).to eq('Purple unit')
       expect(report_hsh[:version]).to eq(Salus::VERSION)
-      expect(report_hsh[:passed]).to eq(false)
+      expect(report_hsh[:passed]).to eq(true)
       expect(report_hsh[:errors]).to eq([])
 
       expect(report_hsh[:scans]['Brakeman'][:passed]).to eq(false)