appsec_flow_anvil 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: f1ef5f1ef6d42cffa059d9a3854c17e10327cada
+  data.tar.gz: 2a755837a94787a33fae454806b4a2bed3d14640
+SHA512:
+  metadata.gz: c1bc0a5492309d4affd43dd6518de5f09ec48244c8ba5a56524ccc1656fee61516506ddf98cda8b8afe11ddaafcf6514bbbef9113f3d903de6258bc0aa7d3d09
+  data.tar.gz: 8ba0ca2d737060d3528af4560a19de0e28d773c2b462d5740f272226728f88480572b6cfeec05dc667f93f4bce978b06a24dac72ac93a936f7f8cc2784296df1

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+gem 'faraday'
+gem 'irbtools', require: 'irbtools/binding'

data/Gemfile.lock

@@ -0,0 +1,70 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    binding.repl (3.0.0)
+    cd (1.0.1)
+    clipboard (1.1.2)
+    code (0.9.2)
+      coderay (~> 1.1)
+      method_source (~> 0.9)
+    coderay (1.1.2)
+    debugging (1.1.1)
+      binding.repl (~> 3.0)
+      paint (>= 0.9, < 3.0)
+    every_day_irb (2.0.0)
+      cd (~> 1.0)
+    fancy_irb (1.1.0)
+      paint (>= 0.9, < 3.0)
+      unicode-display_width (~> 1.1)
+    faraday (0.13.1)
+      multipart-post (>= 1.2, < 3)
+    ffi (1.9.25)
+    hirb (0.7.3)
+    instance (0.2.0)
+    interactive_editor (0.0.11)
+      spoon (>= 0.0.1)
+    irbtools (2.2.1)
+      binding.repl (~> 3.0)
+      clipboard (~> 1.1)
+      code (~> 0.9)
+      coderay (~> 1.1)
+      debugging (~> 1.1)
+      every_day_irb (~> 2.0)
+      fancy_irb (~> 1.1)
+      hirb (~> 0.7, >= 0.7.3)
+      instance (~> 0.2)
+      interactive_editor (~> 0.0, >= 0.0.10)
+      method_locator (~> 0.0, >= 0.0.4)
+      methodfinder (~> 2.0)
+      ori (~> 0.1.0)
+      os
+      paint (>= 0.9, < 3.0)
+      ruby_engine (~> 1.0)
+      ruby_info (~> 1.0)
+      ruby_version (~> 1.0)
+      wirb (~> 2.0)
+    method_locator (0.0.4)
+    method_source (0.9.0)
+    methodfinder (2.2.1)
+    multipart-post (2.0.0)
+    ori (0.1.0)
+    os (1.0.0)
+    paint (2.0.1)
+    ruby_engine (1.0.1)
+    ruby_info (1.0.1)
+    ruby_version (1.0.1)
+    spoon (0.0.6)
+      ffi
+    unicode-display_width (1.4.0)
+    wirb (2.1.2)
+      paint (>= 0.9, < 3.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  faraday
+  irbtools
+
+BUNDLED WITH
+   1.16.0

data/README.md

@@ -0,0 +1,38 @@
+# Anvil
+
+## API version support
+
+This client supports AppSec Flow
+
+## Installation
+
+The Anvil can be installed using Rubygems or Bundler.
+
+### Rubygems
+
+```sh
+gem install appsec_flow_anvil
+```
+
+### Bundler
+
+Add it to your Gemfile
+
+    gem "appsec_flow_anvil"
+
+and follow normal [Bundler](http://gembundler.com/) installation and execution procedures.
+
+## Usage
+
+You will use an instance of Anvil::Client with your api code and environment (production, staging) as parameters.
+
+```ruby
+client = Anvil::Client.new('my_api_code', 'staging')
+```
+
+And with the client instance you can create new vulnerabilities on AppSec Flow
+
+```ruby
+client.vulnerabilities.create!(client_impact: 'impact_here', project_id: 9999, vulnerability_model_id: 10,
+  failure_type: 'code_review', code_review_code: 'code', evidences: ['/myfile/image.png'])
+```

data/anvil.gemspec

@@ -0,0 +1,22 @@
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+
+Gem::Specification.new do |s|
+  s.name                  = 'appsec_flow_anvil'
+  s.version               = '0.0.1'
+  s.date                  = '2017-11-19'
+  s.summary               = 'Armature REST API Client'
+  s.description           = 'Ruby wrapper for the REST API for Conviso Armature'
+  s.authors               = ['Anezio Campos']
+  s.email                 = 'newdevas@gmail.com'
+  s.files                 = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  s.homepage              = 'http://app.conviso.com.br'
+  s.license               = 'MIT'
+  s.required_ruby_version = '2.4.2'
+  s.bindir                = 'exe'
+  s.executables           = s.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  s.require_paths         = ['lib']
+  s.add_development_dependency 'bundler', '~> 1.8'
+  s.add_development_dependency 'rake', '~> 10.0'
+  s.add_development_dependency 'rspec'
+end

data/lib/anvil.rb

@@ -0,0 +1 @@
+module Anvil; end

data/lib/anvil/client.rb

@@ -0,0 +1,33 @@
+module Anvil
+  class Client
+    attr_reader :api_key, :base_url
+
+    def initialize(api_key, environment)
+      @api_key = api_key
+      load_base_url_for(environment)
+    end
+
+    def vulnerabilities
+      Anvil::Vulnerability.new(self)
+    end
+
+    def vulnerability_templates
+      Anvil::VulnerabilityTemplate.new(self)
+    end
+
+    private
+
+    def load_base_url_for(environment)
+      case environment
+      when 'localhost'
+        @base_url = 'http://localhost:3000'
+      when 'production'
+        @base_url = 'https://app.conviso.com.br'
+      when 'staging'
+        @base_url = 'https://homologa.conviso.com.br'
+      else
+        raise ArgumentError, "environment must be 'production' or 'staging'"
+      end
+    end
+  end
+end

data/lib/anvil/vulnerability.rb

@@ -0,0 +1,26 @@
+module Anvil
+  class Vulnerability
+    attr_reader :client, :args
+
+    def initialize(client)
+      raise ArgumentError, 'client param must be a Client class' if client.class != Anvil::Client
+
+      @client = client
+    end
+
+    def create!(*params)
+      params.first[:evidences].each do |archive_path|
+        params.first[:vulnerability_archives_attributes] = [{ archive: Faraday::UploadIO.new(archive_path, 'image/png') }]
+      end
+      params.first.delete(:evidences)
+
+      conn = Faraday.new(url: @client.base_url) do |f|
+        f.request :multipart
+        f.request :url_encoded
+        f.adapter :net_http
+      end
+      conn.post '/api/v2/vulnerabilities', vulnerability: params.first,
+                                           api_key: @client.api_key
+    end
+  end
+end

data/lib/anvil/vulnerability_template.rb

@@ -0,0 +1,26 @@
+require 'faraday'
+
+module Anvil
+  class VulnerabilityTemplate
+    attr_reader :client, :args
+
+    def initialize(client)
+      if client.class != Anvil::Client
+        raise ArgumentError, "client param must be a Client class"
+      end
+      @client = client
+    end
+
+    def search(value)
+      url = URI.parse("#{@client.base_url}/api/v2/vulnerability_templates/?value=#{value}")
+      req = Net::HTTP::Get.new(url.to_s)
+      res = Net::HTTP.start(url.host, url.port) { |http| http.request(req) }
+      JSON.parse(res.body)
+    end
+
+    def create!(params)
+      conn = Faraday.new(:url => "#{@client.base_url}")
+      conn.post '/api/v2/vulnerability_templates', vulnerability_template:  params
+    end
+  end
+end

metadata

@@ -0,0 +1,93 @@
+--- !ruby/object:Gem::Specification
+name: appsec_flow_anvil
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Anezio Campos
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2017-11-19 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Ruby wrapper for the REST API for Conviso Armature
+email: newdevas@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- Gemfile
+- Gemfile.lock
+- README.md
+- anvil.gemspec
+- lib/anvil.rb
+- lib/anvil/client.rb
+- lib/anvil/vulnerability.rb
+- lib/anvil/vulnerability_template.rb
+homepage: http://app.conviso.com.br
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '='
+    - !ruby/object:Gem::Version
+      version: 2.4.2
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.6.14
+signing_key: 
+specification_version: 4
+summary: Armature REST API Client
+test_files: []