ben.carrasco/prowler
1
0
Fork 0
mirror of https://github.com/prowler-cloud/prowler.git synced 2026-10-04 02:04:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(sdk): report all-users 2sv override failures (#12700)

Browse Source
This commit is contained in:
Haitao Zheng
2026-09-17 13:19:11 +02:00
committed by GitHub
parent f382400037
commit d0d29108e0
3 changed files with 6 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/providers/googleworkspace/services/security/security_2sv_enforced/security_2sv_enforced_test.py
+4 -6
View File
@@ -224,8 +224,8 @@ class TestSecurity2svEnforced:
assert "trust their device" in findings[0].status_extended
assert "also overridden" in findings[0].status_extended
def test_manual_when_every_failing_setting_is_overridden(self):
"""The overriding value is not exposed, so the failure is unconfirmed"""
def test_fail_when_every_failing_setting_is_overridden(self):
"""The all-users requirement still fails for users outside the override"""
findings = run_check(
**{
**COMPLIANT,
@@ -235,11 +235,9 @@ class TestSecurity2svEnforced:
)
assert len(findings) == 1
assert findings[0].status == "MANUAL"
assert findings[0].status == "FAIL"
assert "trust their device" in findings[0].status_extended
assert "every failing setting is also overridden" in (
findings[0].status_extended
)
assert "also overridden" in findings[0].status_extended
def test_fail_when_only_some_failing_settings_are_overridden(self):
"""A failure no override reaches is still proven for the whole domain"""