test: move test program to sandbox directory

This prepares for the separation of app and sandbox tests.

Signed-off-by: Ophestra <cat@gensokyo.uk>

test/configuration.nix

@@ -5,37 +5,7 @@
   ...
 }:
 let
-  testProgram =
+  testProgram = pkgs.callPackage ./sandbox/tool/package.nix { inherit (config.environment.fortify.package) version; };
-    let
-      inherit (pkgs)
-        buildGoModule
-        pkg-config
-        util-linux
-        ;
-    in
-    buildGoModule rec {
-      pname = "check-sandbox";
-      inherit (config.environment.fortify.package) version;
-
-      src = builtins.path {
-        name = "${pname}-src";
-        path = lib.cleanSource ./.;
-        filter = path: type: (type == "directory" && lib.hasSuffix "sandbox" path) || (type == "regular" && lib.hasSuffix ".go" path);
-      };
-      vendorHash = null;
-
-      buildInputs = [ util-linux ];
-      nativeBuildInputs = [ pkg-config ];
-
-      preBuild = ''
-        go mod init git.gensokyo.uk/security/fortify/test >& /dev/null
-      '';
-
-      postInstall = ''
-        mv $out/bin/test $out/bin/fortify-test
-      '';
-    };
-
   testCases = import ./sandbox/case lib testProgram;
 in
 {

test/sandbox/tool/package.nix

@@ -0,0 +1,30 @@
+{
+  lib,
+  buildGoModule,
+  pkg-config,
+  util-linux,
+
+  version,
+}:
+buildGoModule rec {
+  pname = "check-sandbox";
+  inherit version;
+
+  src = builtins.path {
+    name = "${pname}-src";
+    path = lib.cleanSource ../.;
+    filter = path: type: (type == "directory") || (type == "regular" && lib.hasSuffix ".go" path);
+  };
+  vendorHash = null;
+
+  buildInputs = [ util-linux ];
+  nativeBuildInputs = [ pkg-config ];
+
+  preBuild = ''
+    go mod init git.gensokyo.uk/security/fortify/test/sandbox >& /dev/null
+  '';
+
+  postInstall = ''
+    mv $out/bin/tool $out/bin/fortify-test
+  '';
+}