openclaw/src/security/audit.test-support.ts

import type { OpenClawConfig } from "../config/config.js";
import { runSecurityAuditCore } from "./audit.js";
import type { SecurityAuditFinding } from "./audit.types.js";

type AuditOverrides = Omit<Parameters<typeof runSecurityAuditCore>[0], "config">;

export async function collectSecurityAuditFindings(
  config: OpenClawConfig,
  overrides: AuditOverrides = {},
): Promise<SecurityAuditFinding[]> {
  const report = await runSecurityAuditCore({
    config,
    sourceConfig: config,
    includeFilesystem: false,
    includeChannelSecurity: false,
    loadPluginSecurityCollectors: false,
    ...overrides,
  });
  return report.findings;
}