feat(github): add organization domain verification check (#10033)

Co-authored-by: Kush321 <kushp2018@gmail.com> Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
2026-03-22 03:08:23 +00:00 · 2026-02-13 07:41:17 -05:00
parent 8c1da0732d
commit 9da0b0c0b1
7 changed files with 212 additions and 2 deletions
--- a/tests/providers/github/services/organization/organization_verified_badge/organization_verified_badge_test.py
+++ b/tests/providers/github/services/organization/organization_verified_badge/organization_verified_badge_test.py
@@ -0,0 +1,137 @@
+from unittest import mock
+
+from prowler.providers.github.services.organization.organization_service import Org
+from tests.providers.github.github_fixtures import set_mocked_github_provider
+
+
+class Test_organization_verified_badge:
+    def test_no_organizations(self):
+        organization_client = mock.MagicMock
+        organization_client.organizations = {}
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_github_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge.organization_client",
+                new=organization_client,
+            ),
+        ):
+            from prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge import (
+                organization_verified_badge,
+            )
+
+            check = organization_verified_badge()
+            result = check.execute()
+            assert len(result) == 0
+
+    def test_organization_is_verified_true_pass(self):
+        organization_client = mock.MagicMock
+        org_name = "test-organization"
+        organization_client.organizations = {
+            1: Org(
+                id=1,
+                name=org_name,
+                is_verified=True,
+            ),
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_github_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge.organization_client",
+                new=organization_client,
+            ),
+        ):
+            from prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge import (
+                organization_verified_badge,
+            )
+
+            check = organization_verified_badge()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].resource_id == 1
+            assert result[0].resource_name == org_name
+            assert result[0].status == "PASS"
+            assert (
+                result[0].status_extended
+                == f"Organization {org_name} is verified on GitHub."
+            )
+
+    def test_organization_is_verified_false_fail(self):
+        organization_client = mock.MagicMock
+        org_name = "test-organization"
+        organization_client.organizations = {
+            1: Org(
+                id=1,
+                name=org_name,
+                is_verified=False,
+            ),
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_github_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge.organization_client",
+                new=organization_client,
+            ),
+        ):
+            from prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge import (
+                organization_verified_badge,
+            )
+
+            check = organization_verified_badge()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].resource_id == 1
+            assert result[0].resource_name == org_name
+            assert result[0].status == "FAIL"
+            assert (
+                result[0].status_extended
+                == f"Organization {org_name} is not verified on GitHub."
+            )
+
+    def test_organization_is_verified_none_edge_case(self):
+        organization_client = mock.MagicMock
+        org_name = "test-organization"
+        organization_client.organizations = {
+            1: Org(
+                id=1,
+                name=org_name,
+                is_verified=None,
+            ),
+        }
+
+        with (
+            mock.patch(
+                "prowler.providers.common.provider.Provider.get_global_provider",
+                return_value=set_mocked_github_provider(),
+            ),
+            mock.patch(
+                "prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge.organization_client",
+                new=organization_client,
+            ),
+        ):
+            from prowler.providers.github.services.organization.organization_verified_badge.organization_verified_badge import (
+                organization_verified_badge,
+            )
+
+            check = organization_verified_badge()
+            result = check.execute()
+            assert len(result) == 1
+            assert result[0].resource_id == 1
+            assert result[0].resource_name == org_name
+            # Treat none like not verified (false)
+            assert result[0].status == "FAIL"
+            assert (
+                result[0].status_extended
+                == f"Organization {org_name} is not verified on GitHub."
+            )