test(oie): sync stale fixtures with AISVS repos, NIST gold, LLM hub CREs

Unblock CI Test: packaged repos.yaml has three targets, mapping fixtures
include nist_800_53_v5, and the LLM parser test seeds AI-topic CRE ids.

Author: northdpole

application/tests/harvester_test/config_loader_test.py

@@ -99,9 +99,8 @@ def test_load_packaged_repos_yaml(self):
 
         config = load_repo_config(config_path)
 
-        self.assertEqual(len(config.repositories), 2)
-        self.assertEqual(config.repositories[0].id, "owasp-asvs")
-        self.assertEqual(config.repositories[1].id, "owasp-cheatsheets")
+        ids = [repo.id for repo in config.repositories]
+        self.assertEqual(ids, ["owasp-asvs", "owasp-aisvs", "owasp-cheatsheets"])
 
     def test_empty_owner(self):
         config_path = FIXTURES_DIR / "empty_owner.yaml"

application/tests/owasp_llm_top10_2025_parser_test.py

@@ -8,6 +8,7 @@
 from application.database import db
 from application.defs import cre_defs as defs
 from application.prompt_client import prompt_client
+from application.utils import mapping_fixtures
 from application.utils.external_project_parsers.parsers import owasp_llm_top10_2025
 
 
@@ -25,13 +26,17 @@ def setUp(self) -> None:
         self.collection = db.Node_collection()
 
     def test_parse(self) -> None:
-        for cre_id, name in [
-            ("161-451", "Output encoding and injection prevention"),
-            ("064-808", "Encode output context-specifically"),
-            ("760-764", "Injection protection"),
-            ("623-550", "Denial Of Service protection"),
-        ]:
-            self.collection.add_cre(defs.CRE(id=cre_id, name=name, description=""))
+        # Seed the AI-topic hub CREs from the LLM mapping fixture (not classic web CREs).
+        gold = mapping_fixtures.load_owasp_mapping_fixture("owasp_llm_top10_2025")
+        seeded: set[str] = set()
+        for entry in gold:
+            for cre_id in entry["cre_ids"]:
+                if cre_id in seeded:
+                    continue
+                self.collection.add_cre(
+                    defs.CRE(id=cre_id, name=f"CRE {cre_id}", description="")
+                )
+                seeded.add(cre_id)
 
         result = owasp_llm_top10_2025.OwaspLlmTop10_2025().parse(
             self.collection, prompt_client.PromptHandler(database=self.collection)
@@ -42,8 +47,12 @@ def test_parse(self) -> None:
         self.assertEqual("LLM01", entries[0].sectionID)
         self.assertEqual("Prompt Injection", entries[0].section)
         self.assertEqual(
-            ["161-451", "760-764"], [link.document.id for link in entries[0].links]
+            ["012-625", "686-110"],
+            [link.document.id for link in entries[0].links],
+        )
+        self.assertEqual(
+            ["044-202", "780-757"],
+            [link.document.id for link in entries[4].links],
         )
-        self.assertEqual(["064-808"], [link.document.id for link in entries[4].links])
         self.assertEqual("LLM10", entries[-1].sectionID)
-        self.assertEqual(["623-550"], [link.document.id for link in entries[-1].links])
+        self.assertEqual(["230-318"], [link.document.id for link in entries[-1].links])

application/tests/owasp_mapping_fixtures_test.py

@@ -9,6 +9,7 @@
 
 
 EXPECTED_FIXTURES = {
+    "nist_800_53_v5.json",
     "owasp_aisvs_1_0.json",
     "owasp_api_top10_2023.json",
     "owasp_asvs_5_0_provisional.json",