diff --git a/backend/tests/test_rules.py b/backend/tests/test_rules.py index 47322f7..57ffbae 100644 --- a/backend/tests/test_rules.py +++ b/backend/tests/test_rules.py @@ -1,29 +1,31 @@ from datetime import UTC, datetime -from rules import _matches, evaluate_event - def test_matches_equals(): rule = {"conditions": [{"field": "operation", "op": "eq", "value": "Add user"}]} event = {"operation": "Add user", "timestamp": datetime.now(UTC).isoformat()} + from rules import _matches assert _matches(rule, event) is True def test_matches_not_equals(): rule = {"conditions": [{"field": "operation", "op": "neq", "value": "Delete user"}]} event = {"operation": "Add user", "timestamp": datetime.now(UTC).isoformat()} + from rules import _matches assert _matches(rule, event) is True def test_matches_contains(): rule = {"conditions": [{"field": "actor_display", "op": "contains", "value": "Admin"}]} event = {"actor_display": "Admin (admin@example.com)", "timestamp": datetime.now(UTC).isoformat()} + from rules import _matches assert _matches(rule, event) is True def test_matches_after_hours(): rule = {"conditions": [{"field": "timestamp", "op": "after_hours", "value": None}]} event = {"timestamp": "2024-01-01T22:00:00Z"} + from rules import _matches assert _matches(rule, event) is True event2 = {"timestamp": "2024-01-01T10:00:00Z"} @@ -31,7 +33,7 @@ def test_matches_after_hours(): def test_evaluate_event_creates_alert(monkeypatch): - from rules import alerts_collection + from rules import alerts_collection, evaluate_event monkeypatch.setattr( "rules.load_rules",