Skip to content

test(inbox): allow the Defender platform's two modules to be absent on the host #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
fadwen merged 1 commit into from
Oct 15, 2026
Merged

test(inbox): allow the Defender platform's two modules to be absent on the host #45

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion Tests/Unit/Private/Get-IslInboxModule.Tests.ps1
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,11 @@ BeforeAll {
$script:EngineModule = 'Microsoft.PowerShell.Core'
# Pro and Enterprise features a Home edition does not ship (Windows 11 Home 24H2, ARM64)
$script:EditionOnly = 'AppLocker', 'AppvClient', 'AssignedAccess', 'BranchCache', 'ConfigCI', 'iSCSI', 'UEV'
# Put under System32 by the Defender platform update rather than the Windows image, so a host
# whose Defender platform is still at the image's baseline does not have them yet. Two hosted
# ARM64 runners on the same image (windows-11-vs2026-arm64 20261013.183.4) differed on this
# within ten minutes of each other; a device that has updated once has both
$script:PlatformUpdateModules = 'ConfigDefender', 'ConfigDefenderPerformance'

@fadwen fadwen Oct 15, 2026

Copy link
Copy Markdown
Owner Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A separate list rather than two more names in EditionOnly: the edition list is about what a Home SKU never ships, and this pair is about timing on any SKU. Keeping them apart keeps the comment on each honest, and the table stays as it is because a managed device that has taken one platform update has both modules, which is what the IslModuleDependency rule needs to know.

# Windows features that put a module under System32 when they are turned on: Hyper-V and the
# container and host-guardian family. HostNetworkingService is there on a Windows 11 Home ARM64
# host without the feature. None is on a plain device, so none is in the table
Expand Down Expand Up @@ -84,7 +89,7 @@ Describe 'Get-IslInboxModule' -Tag 'Unit', 'Private' {
$script:HostModules.Count | Should-BeGreaterThan 50
$missing = @($script:Table | Where-Object {
$_ -ne $script:EngineModule -and $_ -notin $script:EditionOnly -and
$_ -notin $script:HostModules
$_ -notin $script:PlatformUpdateModules -and $_ -notin $script:HostModules
})
$missing | Should-BeCollection @()
}
Expand Down
Loading