From e98a491f26eca1f276064b4c5941f20f0524a577 Mon Sep 17 00:00:00 2001
From: Goksu Ceylan <79890826+GoCeylan@users.noreply.github.com>
Date: Sun, 8 Mar 2026 07:11:40 -0400
Subject: [PATCH] test(shell): add CI test to validate
 default_deny_patterns.txt

---
 pkg/tools/shell_test.go | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/pkg/tools/shell_test.go b/pkg/tools/shell_test.go
index ac574b36d..56a5bbfb2 100644
--- a/pkg/tools/shell_test.go
+++ b/pkg/tools/shell_test.go
@@ -516,6 +516,20 @@ func TestParsePatternLines(t *testing.T) {
 	}
 }
 
+func TestDefaultDenyPatternsTxt(t *testing.T) {
+	patterns := parsePatternLines(defaultDenyPatternsText)
+	if len(patterns) == 0 {
+		t.Fatal("expected at least one pattern in default_deny_patterns.txt")
+	}
+	compiled, err := compileRegexPatterns(patterns)
+	if err != nil {
+		t.Fatalf("default_deny_patterns.txt contains invalid regex: %v", err)
+	}
+	if len(compiled) != len(patterns) {
+		t.Fatalf("expected %d compiled patterns, got %d", len(patterns), len(compiled))
+	}
+}
+
 func TestCompileRegexPatterns(t *testing.T) {
 	compiled, err := compileRegexPatterns([]string{`\brm\s+-[rf]{1,2}\b`, `\bsource\s+\S+`})
 	if err != nil {