capistrano-bundle_audit 0.2.2 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +5 -5
- data/lib/capistrano/bundle_audit/version.rb +1 -1
- data/lib/capistrano/tasks/bundle_audit.rake +2 -2
- metadata +3 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
|
-
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: 7c4b8c0f88c2701a55c32a35c0f93047b91f8d8f850dc6d84537b19c770fd5b9
|
|
4
|
+
data.tar.gz: 9fa21552381c17b76ced19fcf62f8fb75c815669535aa7d1a9d2b4b199ea453c
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: e4a23ada4350e7a52e2f04c70fa18611ed55e0890d570d178e7a2b2d39da5c1941e2ce82ceb9bc14c324c6bb858e5982695f8088ed6c2e441a0639335278ca45
|
|
7
|
+
data.tar.gz: 9e2d0dd29cbf631b4f82f90effa942b8993021af39b49b1396f4dac57d1c35e0fd40e81b90acd8edd7c70e78c93151498d7e59b014344b29d5e5e110ef17ac20
|
|
@@ -7,7 +7,7 @@ namespace :deploy do
|
|
|
7
7
|
desc "Audit the Gemfile.lock for known vulnerabilities"
|
|
8
8
|
task :bundle_audit do
|
|
9
9
|
|
|
10
|
-
on
|
|
10
|
+
on primary(:app), in: :sequence do |host|
|
|
11
11
|
|
|
12
12
|
# Download the relevant files and run bundle-audit on them locally
|
|
13
13
|
Dir.mktmpdir do |dir|
|
|
@@ -24,7 +24,7 @@ namespace :deploy do
|
|
|
24
24
|
# bundle-audit includes failures for both gem vulnerabilities
|
|
25
25
|
# and insecure gem sources, and offers no way to distinguish those cases.
|
|
26
26
|
# unfortunately, we only want to fail when vulnerable gems are required.
|
|
27
|
-
# This should only fail if there is a bundle-audit output AND it has
|
|
27
|
+
# This should only fail if there is a bundle-audit output AND it has
|
|
28
28
|
# a solution available to upgrade. If no solution is available deploy
|
|
29
29
|
# will still be allowed.
|
|
30
30
|
if bundle_audit_output =~ /Solution: upgrade to/
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: capistrano-bundle_audit
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.3.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Chris Beer
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2020-04-20 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: capistrano
|
|
@@ -115,8 +115,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
115
115
|
- !ruby/object:Gem::Version
|
|
116
116
|
version: '0'
|
|
117
117
|
requirements: []
|
|
118
|
-
|
|
119
|
-
rubygems_version: 2.6.11
|
|
118
|
+
rubygems_version: 3.1.2
|
|
120
119
|
signing_key:
|
|
121
120
|
specification_version: 4
|
|
122
121
|
summary: Audit a project's gem dependencies before deployment
|