35003 - Add test for sensitivity label configuration and reporting

[alexandair]

Fix https://github.com/microsoft/ztspecs/issues/54

[Copilot]

Pull request overview

This PR adds a new test (ID 35003) to check for the presence and configuration of sensitivity labels in Microsoft tenants. Sensitivity labels are foundational to Microsoft Information Protection and help organizations classify and protect sensitive data.

Key Changes

• New test function that queries sensitivity labels via the Get-Label cmdlet and validates that at least one label is configured
• Comprehensive reporting that includes label statistics (total, top-level, and sub-labels) and a sample table of up to 5 labels
• Unit tests covering success, failure, and error handling scenarios

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
src/powershell/tests/Test-Assessment.35003.ps1	Main test implementation that checks for configured sensitivity labels with error handling and detailed markdown report generation
src/powershell/tests/Test-Assessment.35003.md	Documentation providing context about sensitivity labels, remediation steps, and reference links
code-tests/test-assessments/Test-Assessment.35003.Tests.ps1	Comprehensive unit tests covering scenarios with labels, no labels, and error conditions

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The variable $parentName is being reassigned after it's already set. On line 88, $parentName is assigned a value from the label property or "None", then on line 90 it's reassigned with the result of Get-SafeMarkdown. This should be done in a single step to avoid the unnecessary reassignment and potential confusion. Consider combining these operations or using a different variable name for the sanitized version.

Suggested change

	$parentName = if (-not [string]::IsNullOrEmpty($label.ParentLabelDisplayName)) { $label.ParentLabelDisplayName } else { "None" }
	$labelName = Get-SafeMarkdown -Text $label.DisplayName
	$parentName = Get-SafeMarkdown -Text $parentName
	$testResultMarkdown += "| $labelName | $($label.Priority) | $parentName |`n"
	}
	$parentName = Get-SafeMarkdown -Text (if (-not [string]::IsNullOrEmpty($label.ParentLabelDisplayName)) { $label.ParentLabelDisplayName } else { "None" })
	$labelName = Get-SafeMarkdown -Text $label.DisplayName
	$testResultMarkdown += "| $labelName | $($label.Priority) | $parentName |`n"
	}