# Test Configuration for DaVinci MCP Professional

This directory contains test suites for the DaVinci MCP Professional project.

## Test Structure

- `test_security.py` - Security-focused tests including dependency scanning, secret detection, and vulnerability checks
- `__init__.py` - Makes this directory a Python package
- `conftest.py` - Pytest configuration and shared fixtures

## Running Tests

### All Tests
```bash
pytest
```

### Security Tests Only
```bash
pytest tests/test_security.py -v
```

### With Coverage
```bash
pytest --cov=src/davinci_mcp --cov-report=html
```

## Security Test Categories

1. **Secret Detection**: Scans for hardcoded secrets in code and git history
2. **Dependency Security**: Checks for known vulnerabilities using safety
3. **File Permissions**: Ensures sensitive files have appropriate permissions
4. **Import Security**: Identifies potentially dangerous imports
5. **Configuration Security**: Scans config files for exposed secrets
6. **Input Validation**: Tests for injection vulnerabilities

## Test Dependencies

Install test dependencies:
```bash
pip install pytest pytest-cov safety bandit
```

## Continuous Integration

These tests are automatically run in GitHub Actions on:
- Every push to main branch
- Every pull request
- Weekly scheduled runs for dependency updates