test(sbom): update test to include a range of scenarios

Author: JasonTheDeveloper

test/sbom/install_sbom_custom_alias.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+
+# Scenario: install_sbom_custom_alias
+# Verifies that sbom-tool installs with a custom alias ("msft-sbom")
+
+set -e
+
+source dev-container-features-test-lib
+
+# Verify the custom alias is available on the PATH
+check "msft-sbom is installed" bash -c "which msft-sbom"
+
+# Verify the custom alias can report its version
+check "msft-sbom version runs" bash -c "msft-sbom version"
+
+# Verify the binary is in the expected location under the custom alias
+check "msft-sbom in /usr/local/bin" bash -c "ls /usr/local/bin/msft-sbom"
+
+# Verify the default alias is NOT present (only the custom alias should exist)
+check "default sbom-tool alias not present" bash -c "! which sbom-tool"
+
+reportResults

test/sbom/install_sbom_latest.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+# Scenario: install_sbom_latest
+# Verifies that sbom-tool installs successfully when version is set to "latest"
+
+set -e
+
+source dev-container-features-test-lib
+
+# Verify sbom-tool is installed
+check "sbom-tool is installed" bash -c "which sbom-tool"
+
+# Verify sbom-tool version output is not empty
+check "sbom-tool version reports output" bash -c "sbom-tool version"
+
+# Verify sbom-tool binary is in the expected location
+check "sbom-tool in /usr/local/bin" bash -c "ls /usr/local/bin/sbom-tool"
+
+reportResults

test/sbom/install_sbom_specific_version.sh

@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+
+# Scenario: install_sbom_specific_version
+# Verifies that a specific version of sbom-tool (0.3.3) installs correctly
+
+set -e
+
+source dev-container-features-test-lib
+
+# Verify sbom-tool is installed
+check "sbom-tool is installed" bash -c "which sbom-tool"
+
+# Verify sbom-tool can run
+check "sbom-tool version runs" bash -c "sbom-tool version"
+
+# Verify sbom-tool binary is in the expected location
+check "sbom-tool in /usr/local/bin" bash -c "ls /usr/local/bin/sbom-tool"
+
+reportResults

test/sbom/invalid_version.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+
+# Scenario: invalid_version
+# Verifies that the install script's version validation correctly rejects
+# a non-existent version. Since the container must build successfully to
+# run tests, sbom-tool is installed with "latest" and we then exercise the
+# validation logic manually.
+
+set -e
+
+source dev-container-features-test-lib
+
+# sbom-tool should be installed (the scenario uses "latest")
+check "sbom-tool is installed" bash -c "which sbom-tool"
+
+# Verify that a completely fake version does NOT appear in the releases list
+check "fake version not in releases" bash -c \
+    "! curl -sL https://api.github.com/repos/microsoft/sbom-tool/releases | jq -r '.[].tag_name' | grep -qx 'v99.99.99'"
+
+# Simulate the install script's validation: attempt to match a non-existent
+# version against the release list and confirm it fails
+check "validation rejects non-existent version" bash -c '
+    version_list=$(curl -sL https://api.github.com/repos/microsoft/sbom-tool/releases | jq -r ".[].tag_name")
+    if echo "${version_list}" | grep -qx "v99.99.99"; then
+        echo "ERROR: fake version was found in release list"
+        exit 1
+    fi
+    echo "Correctly rejected non-existent version v99.99.99"
+'
+
+# Also verify that a valid version IS accepted by the same logic
+check "validation accepts a real version" bash -c '
+    version_list=$(curl -sL https://api.github.com/repos/microsoft/sbom-tool/releases | jq -r ".[].tag_name")
+    if ! echo "${version_list}" | grep -q "0.3.3"; then
+        echo "ERROR: valid version 0.3.3 was not found in release list"
+        exit 1
+    fi
+    echo "Correctly accepted valid version 0.3.3"
+'
+
+reportResults

test/sbom/scenarios.json

@@ -0,0 +1,35 @@
+{
+    "install_sbom_latest": {
+        "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+        "features": {
+            "sbom": {
+                "version": "latest"
+            }
+        }
+    },
+    "install_sbom_specific_version": {
+        "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+        "features": {
+            "sbom": {
+                "version": "0.3.3"
+            }
+        }
+    },
+    "install_sbom_custom_alias": {
+        "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+        "features": {
+            "sbom": {
+                "version": "latest",
+                "alias": "msft-sbom"
+            }
+        }
+    },
+    "invalid_version": {
+        "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+        "features": {
+            "sbom": {
+                "version": "latest"
+            }
+        }
+    }
+}

test/sbom/test.sh

@@ -2,7 +2,7 @@
 
 # This test can be run with the following command (from the root of this repo)
 #    devcontainer features test \
-#               --features sbom-tool \
+#               --features sbom \
 #               --base-image mcr.microsoft.com/devcontainers/base:ubuntu .
 
 set -e
@@ -12,7 +12,15 @@ source dev-container-features-test-lib
 
 # Feature-specific tests
 # The 'check' command comes from the dev-container-features-test-lib.
-check "sbom-tool version" sbom-tool version
+
+# Verify sbom-tool is installed and on the PATH
+check "sbom-tool is installed" bash -c "which sbom-tool"
+
+# Verify sbom-tool can report its version
+check "sbom-tool version runs" bash -c "sbom-tool version"
+
+# Verify sbom-tool is installed to the expected location
+check "sbom-tool in /usr/local/bin" bash -c "ls /usr/local/bin/sbom-tool"
 
 # Report result
 # If any of the checks above exited with a non-zero exit code, the test will fail.