prowler-test-api

Provide structured testing patterns and fixtures for Prowler API validation.

Updated Jan 19, 2026
One-click install
npx skills add https://github.com/adbertram/Devolutions-CIEM --skill prowler-test-api
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: prowler-test-api
Source: https://github.com/adbertram/Devolutions-CIEM/tree/main/prowler/skills/prowler-test-api
Command: npx skills add https://github.com/adbertram/Devolutions-CIEM --skill prowler-test-api

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides structured testing patterns and fixtures for Prowler API, enabling consistent validation of JSON:API endpoints, RBAC, and RLS isolation across multi-tenant environments.

Core Features & Use Cases

  • API pattern templates for JSON:API requests, responses, and validations.
  • RBAC and RLS coverage to ensure proper access control and tenant isolation.
  • Fixtures and test organization with predefined fixtures like tenants_fixture, providers_fixture, and authenticated_client for CI workflows.
  • Celery task integration validation to mock and verify background tasks.

Quick Start

  • Run the API test suite with pytest, focusing on provider endpoints or RBAC scenarios.
  • Use provided fixtures like tenants_fixture, providers_fixture, and authenticated_client in tests.
  • Execute: cd prowler/skills/prowler-test-api && pytest -k "provider" -x

Frequently Asked Questions about prowler-test-api

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test RBAC and RLS isolation in a multi-tenant API?

API testing patterns for RBAC and RLS isolation validate multi-tenant access control through structured fixtures like tenants_fixture and authenticated_client. They ensure proper enforcement of role-based permissions and prevent cross-tenant data leakage.

What's the best way to test JSON:API endpoints with pytest fixtures?

The best way to test JSON:API endpoints is using pytest with predefined fixtures like providers_fixture and authenticated_client. This provides consistent request and response validation across CI workflows.

How do I validate Celery background tasks in API tests?

Validating Celery tasks in API tests involves mocking and verifying background task execution within your test suite. This approach integrates task validation directly into your CI workflows using provided test fixtures.

Can I use predefined pytest fixtures for tenant isolation testing?

Yes, you can use predefined pytest fixtures like tenants_fixture and authenticated_client for tenant isolation testing. These reusable fixtures support consistent validation of cross-tenant access and provider endpoints in CI environments.

Why does my multi-tenant API test fail to enforce row-level security?

Multi-tenant API tests fail row-level security enforcement when lacking proper RLS coverage and structured fixtures. Without authenticated_client and tenants_fixture validating cross-tenant access, isolation boundaries remain untested and vulnerable.