# FIXTURE_ONLY test table: want_rc|args|expected substring (shared by the bash and Pester tests)
1|--inventory tests/fixtures/inv_mixed.csv|VULNERABLE: PRD/sapprd01 (WEBDISP, kernel or patch 7.93 PL 100): Note 3778556 (CVE-2026-89126, CVSS 10.0, Web Dispatcher memory corruption, no account needed) not applied and internet exposed.
1|--inventory tests/fixtures/inv_mixed.csv|UNKNOWN: PRD/sapprd01 (GATEWAY, kernel or patch 7.93 PL 100): Note 3798345
0|--inventory tests/fixtures/inv_patched.csv|PATCHED: BOE/sapbo01 (BOBJ, kernel or patch 2025): Note 3799117 (CVE-2026-109798, CVSS 9.1
2|--inventory tests/fixtures/inv_unknown.csv|applied state is "blank"
2|--inventory tests/fixtures/inv_unknown.csv|applied state is "maybe"
3|--inventory tests/fixtures/inv_notinscope.csv|NOT IN SCOPE: PRD/sapprd01 (ABAP, kernel or patch 7.93): Note 3626303
0|--inventory tests/fixtures/inv_scope_and_patched.csv|PATCHED: DEV/sapdev01
5|--inventory tests/fixtures/inv_bad_header.csv|ERROR: CSV header must be
5|--inventory tests/fixtures/inv_header_only.csv|ERROR: CSV has no rows
1|--inventory tests/fixtures/inv_crlf.csv|Note 3798345 (CVE-2026-89103, CVSS 10.0, RFC Gateway default ACL treats an external attacker as internal, no account needed) not applied and internet exposed.
1|--inventory tests/fixtures/inv_exposed_lowpriv.csv|Note 3792735 (CVE-2026-76965, CVSS 9.9, AS ABAP OS command execution, needs a low privilege account) not applied. Internet exposed: yes.
1|--inventory tests/fixtures/inv_exposed_lowpriv.csv|no account needed but an admin must open a link) not applied and internet exposed.
4|--profile tests/fixtures/profile_bad.txt|FINDING: tests/fixtures/profile_bad.txt: gw/acl_mode = 0.
4|--profile tests/fixtures/profile_bad.txt|FINDING: tests/fixtures/profile_bad.txt: gw/sim_mode = 1.
4|--profile tests/fixtures/profile_bad.txt|FINDING: tests/fixtures/profile_bad.txt: gw/monitor = 2.
4|--profile tests/fixtures/profile_bad.txt|FINDING: tests/fixtures/profile_bad.txt: rdisp/msserv_internal not set.
2|--profile tests/fixtures/profile_good.txt|CONFIG: no findings
2|--profile tests/fixtures/profile_unset.txt|INFO: tests/fixtures/profile_unset.txt: gw/acl_mode not set.
4|--secinfo tests/fixtures/secinfo_open.txt|FINDING: tests/fixtures/secinfo_open.txt:4: secinfo permits any program
4|--secinfo tests/fixtures/secinfo_v1_open.txt|FINDING: tests/fixtures/secinfo_v1_open.txt:2: secinfo permits any program
4|--secinfo tests/fixtures/secinfo_v1_open.txt|INFO: tests/fixtures/secinfo_v1_open.txt: no #VERSION=2 first line
2|--secinfo tests/fixtures/secinfo_good.txt|CONFIG: no findings
4|--reginfo tests/fixtures/reginfo_open.txt|FINDING: tests/fixtures/reginfo_open.txt:4: reginfo permits any program to register from any host (TP=* HOST=not set).
4|--reginfo tests/fixtures/reginfo_open.txt|FINDING: tests/fixtures/reginfo_open.txt:5: reginfo permits any program to register from any host (TP=* HOST=internal,*).
2|--reginfo tests/fixtures/reginfo_good.txt|CONFIG: no findings
4|--audit tests/fixtures/audit_hits.csv|FINDING: tests/fixtures/audit_hits.csv:3: [standard user activity] user=SAP* msg=AU1
4|--audit tests/fixtures/audit_hits.csv|FINDING: tests/fixtures/audit_hits.csv:4: [user master or authorization change] user=JSMITH msg=AUD
4|--audit tests/fixtures/audit_hits.csv|FINDING: tests/fixtures/audit_hits.csv:5: [user created, message ID unverified]
4|--audit tests/fixtures/audit_hits.csv|FINDING: tests/fixtures/audit_hits.csv:6: [SAP_ALL or SAP_NEW in event text]
2|--audit tests/fixtures/audit_clean.csv|CONFIG: no findings
5|--audit tests/fixtures/audit_bad_header.csv|ERROR: audit CSV header must be
0|--inventory tests/fixtures/inv_patched.csv --profile tests/fixtures/profile_good.txt --secinfo tests/fixtures/secinfo_good.txt --reginfo tests/fixtures/reginfo_good.txt --audit tests/fixtures/audit_clean.csv|CONFIG: no findings
4|--inventory tests/fixtures/inv_patched.csv --audit tests/fixtures/audit_hits.csv|REVIEW: findings above come from our own checks
4|--inventory tests/fixtures/inv_mixed.csv --reginfo tests/fixtures/reginfo_open.txt|REVIEW:
5|--inventory tests/fixtures/does_not_exist.csv|ERROR: cannot read: tests/fixtures/does_not_exist.csv
5||Usage: check-sap.sh
5|--bogus x|Usage: check-sap.sh
5|--inventory|Usage: check-sap.sh
