chore: add TestJobUsesSelfHostedRunner (#31)

* ensure job_uses_self_hosted_runner returns false

* add TestJobUsesSelfHostedRunner

Author: becojo

opa/opa.go

@@ -63,6 +63,7 @@ func (o *Opa) Eval(ctx context.Context, query string, input map[string]interface
 		rego.Compiler(o.Compiler),
 		rego.PrintHook(o),
 		rego.Input(input),
+		rego.Imports([]string{"data.poutine.utils"}),
 	)
 
 	rs, err := rego.Eval(ctx)

opa/opa_test.go

@@ -87,3 +87,49 @@ func TestSemverConstraintCheck(t *testing.T) {
 		assert.Equal(t, c.expected, result)
 	}
 }
+
+func TestJobUsesSelfHostedRunner(t *testing.T) {
+	// based on https://github.com/actions/runner-images/
+	cases := map[string]bool{
+		"ubuntu-latest":       false,
+		"ubuntu-22.04":        false,
+		"ubuntu-20.04":        false,
+		"macos-latest-large":  false,
+		"macos-14-large":      false,
+		"macos-latest":        false,
+		"macos-14":            false,
+		"macos-latest-xlarge": false,
+		"macos-14-xlarge":     false,
+		"macos-13":            false,
+		"macos-13-large":      false,
+		"macos-13-xlarge":     false,
+		"macos-12":            false,
+		"macos-12-large":      false,
+		"macos-11":            false,
+		"windows-latest":      false,
+		"windows-2022":        false,
+		"windows-2019":        false,
+		"self-hosted":         true,
+		"random-name":         true,
+	}
+
+	opa, err := NewOpa()
+	noOpaErrors(t, err)
+
+	for runner, expected := range cases {
+		var result bool
+		input := map[string]interface{}{
+			"runs_on": []string{runner},
+		}
+
+		err = opa.Eval(
+			context.TODO(),
+			`utils.job_uses_self_hosted_runner(input)`,
+			input,
+			&result,
+		)
+
+		noOpaErrors(t, err)
+		assert.Equal(t, expected, result, "runner: "+runner)
+	}
+}

opa/rego/poutine/utils.rego

@@ -49,7 +49,7 @@ job_uses_self_hosted_runner(job) if {
 		"(?i)^((ubuntu-(([0-9]{2})\\.04|latest)|macos-([0-9]{2}|latest)(-x?large)?|windows-(20[0-9]{2}|latest)|(buildjet|warp)-[a-z0-9-]+))$",
 		run_on,
 	)
-}
+} else := false
 
 empty(xs) if {
 	xs == null