capistrano-bundle_audit 0.2.2 → 0.3.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +5 -5
- data/lib/capistrano/bundle_audit/version.rb +1 -1
- data/lib/capistrano/tasks/bundle_audit.rake +2 -2
- metadata +3 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
|
-
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: 7c4b8c0f88c2701a55c32a35c0f93047b91f8d8f850dc6d84537b19c770fd5b9
|
|
4
|
+
data.tar.gz: 9fa21552381c17b76ced19fcf62f8fb75c815669535aa7d1a9d2b4b199ea453c
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e4a23ada4350e7a52e2f04c70fa18611ed55e0890d570d178e7a2b2d39da5c1941e2ce82ceb9bc14c324c6bb858e5982695f8088ed6c2e441a0639335278ca45
|
|
7
|
+
data.tar.gz: 9e2d0dd29cbf631b4f82f90effa942b8993021af39b49b1396f4dac57d1c35e0fd40e81b90acd8edd7c70e78c93151498d7e59b014344b29d5e5e110ef17ac20
|
|
@@ -7,7 +7,7 @@ namespace :deploy do
|
|
|
7
7
|
desc "Audit the Gemfile.lock for known vulnerabilities"
|
|
8
8
|
task :bundle_audit do
|
|
9
9
|
|
|
10
|
-
on
|
|
10
|
+
on primary(:app), in: :sequence do |host|
|
|
11
11
|
|
|
12
12
|
# Download the relevant files and run bundle-audit on them locally
|
|
13
13
|
Dir.mktmpdir do |dir|
|
|
@@ -24,7 +24,7 @@ namespace :deploy do
|
|
|
24
24
|
# bundle-audit includes failures for both gem vulnerabilities
|
|
25
25
|
# and insecure gem sources, and offers no way to distinguish those cases.
|
|
26
26
|
# unfortunately, we only want to fail when vulnerable gems are required.
|
|
27
|
-
# This should only fail if there is a bundle-audit output AND it has
|
|
27
|
+
# This should only fail if there is a bundle-audit output AND it has
|
|
28
28
|
# a solution available to upgrade. If no solution is available deploy
|
|
29
29
|
# will still be allowed.
|
|
30
30
|
if bundle_audit_output =~ /Solution: upgrade to/
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: capistrano-bundle_audit
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Chris Beer
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2020-04-20 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: capistrano
|
|
@@ -115,8 +115,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
115
115
|
- !ruby/object:Gem::Version
|
|
116
116
|
version: '0'
|
|
117
117
|
requirements: []
|
|
118
|
-
|
|
119
|
-
rubygems_version: 2.6.11
|
|
118
|
+
rubygems_version: 3.1.2
|
|
120
119
|
signing_key:
|
|
121
120
|
specification_version: 4
|
|
122
121
|
summary: Audit a project's gem dependencies before deployment
|