capistrano-bundle_audit 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 4f6157938e40feb73815c43c9bbbf5bdddc58492
-  data.tar.gz: a76db4d182893e2ff65e4aa815909ad4471443c2
+  metadata.gz: 8d3a3a901717f79d9080dee97f2c95c1a7f7caea
+  data.tar.gz: ecaa49ed99b0543bee2ae57c9dcdafc921c00412
 SHA512:
-  metadata.gz: d32b94727ce50a46fdc4da9c97abd02f7bcb7d63c59f1cfa9e88859dc468c78739e18a2b7c39d9cfb39dd3fe7ee28db2524d5c97e3ec866a9093a07af89587d3
-  data.tar.gz: fc8cf08160e752b76523b1d03c4a316b0a9fb1fc771cfd0a22ab24d1b476ad45a9842990fab196984c9c5f222c24cf9f7fb4f42915cb67483e6e37a700843902
+  metadata.gz: 56b899afe426b298c4b150d75214e5df47b2b5cbe771d9a713a7ee0993a6ac8300e26a54d801bb2cfba06a26f94a87c13f53f99a90febcb6e851b6ca6c305121
+  data.tar.gz: 2ebfb880fe8a8182f95a8a0c22e045db5d1d2cfcee7cd840c636d1b2cf7bff4671b4b7ac7ab9cc91da0671f0aae0fe91fe74707421be83c16146028a608fda33

data/README.md

@@ -1,6 +1,6 @@
 # Capistrano::BundleAudit
 
-TODO: Write a gem description
+Audit your Gemfile for known vulnerabilies before releasing.
 
 ## Installation
 
@@ -14,13 +14,15 @@ And then execute:
 
     $ bundle
 
-Or install it yourself as:
+Add this line to your `Capfile`:
 
-    $ gem install capistrano-bundle_audit
+```ruby
+require 'capistrano/bundle_audit'
+```
 
 ## Usage
 
-TODO: Write usage instructions here
+After `deploy:updating` (and before the deployed code is released as the current version), `bundle-audit` will be run against the pushed code. If any vulnerabilities are discovered, the release will be aborted.
 
 ## Contributing
 

data/lib/capistrano/bundle_audit/version.rb

@@ -1,5 +1,5 @@
 module Capistrano
   module BundleAudit
-    VERSION = "0.0.2"
+    VERSION = "0.0.3"
   end
 end

data/lib/capistrano/tasks/bundle_audit.rake

@@ -4,10 +4,10 @@ namespace :deploy do
   namespace :check do
     desc "Audit the Gemfile/Gemfile.lock for known vulnerabilities"
     task :bundle_audit do
-      on roles(:app) do |host|
+      on roles(:app), in: :sequence do |host|
 
         # Download the relevant files and run bundle-audit on them locally
-        Dir.mktmpdir do |dir| 
+        Dir.mktmpdir do |dir|
           Dir.chdir dir do
             download! "#{release_path}/Gemfile.lock", "Gemfile.lock"
             download! "#{release_path}/Gemfile", "Gemfile"
@@ -31,6 +31,6 @@ namespace :deploy do
       end
     end
   end
-  
+
   after 'deploy:updating', 'deploy:check:bundle_audit' unless ENV['SKIP_BUNDLE_AUDIT']
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-bundle_audit
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - Chris Beer
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-08-20 00:00:00.000000000 Z
+date: 2014-09-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: capistrano