from app.modules.admin.security_diagnostics import build_security_diagnostics_report


def test_build_security_diagnostics_report_returns_checks():
    report = build_security_diagnostics_report()
    assert "checks" in report
    assert len(report["checks"]) >= 10
    ids = {check["id"] for check in report["checks"]}
    assert "jwt_access_secret" in ids
    assert "install_secrets_locked" in ids