blame_brakeman 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 9e083bb6abb71a675ff5df098b4bfb0c0babaa138cb2b03e85a85a2193abd196
+  data.tar.gz: 4466b65077c5716ca3ba4e389ccf9878f40b48e619c4d9eae2bc125d44d0ec7e
+SHA512:
+  metadata.gz: b0cb32a695e05d31924970a401658ed2fd343ac19fd7734440bc5a04cc9ae28959f142a4078e787ea531114d80bce66c84ec53696e643130ddc71f75e28998d2
+  data.tar.gz: e4d0779155582f9ecdb375f37635ac038407604d19bba223e7d52e8c621542c839b404acf9f0552bbd754fc21728c0adfb7d33c63e03a0189c1e496fcb96b4e0

data/lib/blame_brakeman.rb

@@ -0,0 +1,73 @@
+require 'fileutils'
+
+module BlameBrakeman
+class BrakemanSecurity
+  
+  def initialize(version_control = nil, from = nil, to = nil)
+    @version_control = version_control
+    @from = from
+    @to = to
+  end
+  
+  def brakeman_security
+    FileUtils.mkdir_p 'brakeman'
+    root_folder = "brakeman"
+    time_now = Time.now
+    time_yesterday = time_now - 86400 #1 Day Ago
+    brakeman_file_format = "security_#{time_format(time_yesterday)}.json"
+    comparison_file_format = "security_comparison_#{time_format(time_yesterday)}_to_#{time_format(time_now)}.json"
+    format = %w[json html]
+    if File.exist?("#{root_folder}/#{brakeman_file_format}")
+      comparison_file = "#{root_folder}/#{comparison_file_format}"
+      system("brakeman --compare #{root_folder}/#{brakeman_file_format} -o #{comparison_file}")
+      format.each { |fr| system("rm -f #{root_folder}/security_#{time_format(time_yesterday)}.#{fr}") }
+      create_security_file(root_folder, format, time_format(time_now))
+      condition = override_comparison_file(comparison_file)
+    else
+      create_security_file(root_folder, format, time_format(time_now))
+      puts 'Yesterday,Security File not there!!!.In that folder'
+      puts 'Create File: brakeman -o brakeman/security_MMDDYYYY.json'
+    end
+  end
+  
+  def override_comparison_file(file)
+    output = {}
+    data = File.read(file)
+    json_data = JSON.parse(data)
+    condition = json_data['new'].blank? && json_data['fixed'].blank?
+    return condition if condition
+    
+    # Overwrite JSON Data - Add Blame
+    json_data.each do |key, value|
+      value.each do |hash|
+        output[key] = add_gitblame(hash)
+      end
+    end
+    # Overwrite Comparison File
+    File.open(file, 'w') do |f|
+      f.puts JSON.pretty_generate(json_data)
+    end
+    condition
+  end
+  
+  def add_gitblame(hash)
+    file = hash['file']
+    line = hash['line']
+    if @version_control == 'git'
+      git_blame = `git blame -L #{line},#{line} #{file}`
+      hash['blame'] = git_blame
+      hash
+    else
+      hash
+    end  
+  end
+  
+  def create_security_file(root_folder, format, time_format)
+    format.each { |fr| system("brakeman -o #{root_folder}/security_#{time_format}.#{fr}") }
+  end
+  
+  def time_format(time)
+    time.strftime('%m%d%Y')
+  end
+end
+end

metadata

@@ -0,0 +1,48 @@
+--- !ruby/object:Gem::Specification
+name: blame_brakeman
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- Honestraj Kandhasamy
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2019-12-05 00:00:00.000000000 Z
+dependencies: []
+description: "'git blame' added Brakeman JSON warnings. We have all the information
+  at brakeman security warnings. \n                      But, Don't have a blame option
+  for which developer done the vulnerabilities.Below is example.\n                      \n
+  \       {\n         ....\n        'blame': 'xxxxxxxxxxxxx (developer_name 2019-07-17
+  20:59:12 +0530 4226)  params.require(:users).permit!\r\n'\n         ...\n        }"
+email: honestraj.it@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/blame_brakeman.rb
+homepage: https://rubygems.org/gems/blame_brakeman
+licenses:
+- MIT
+metadata:
+  source_code_uri: https://github.com/honestveera/blame_brakeman
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3
+signing_key: 
+specification_version: 4
+summary: Blame Brakeman
+test_files: []