carioca 2.1.0 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d0b4832b1cbdafeac7017a9e8c8a599c9b09c29aeab25671c81ca4a4aebbd7e5
-  data.tar.gz: 9991488a07f4332fb73cde45f5d2f7b47a560f1d3a87a5c71e730ba49cd2639f
+  metadata.gz: efd32c21848d7ab53724150ebbee9a3347662416fe0ee84ae46f3dd8f80cf4ac
+  data.tar.gz: 5a34be69f6405a4eae679b26117872f3be4f74181fd188e455044181c2b2b1a3
 SHA512:
-  metadata.gz: 4c45ba7ae9eec0793b5a2efbd28619539750b51f46a18d7d160d2b03beb0f9eed924f3feba75b5d6b28597bd889df9edb0cf0ea49be39719eed9163bd0e2d378
-  data.tar.gz: d270dd201a8e867532872d2b4482da4819f1c64a4dfd831c44683a39385a8b6f796cce861e853e9cdd5a3ef66a1cbf4072b42d91bff10456fea1211fa97ce6ec
+  metadata.gz: e9cc6b8643cfc08f0bdb0066dfa1c7344be07474f1138bb2dec79710a2dac2b2f0a828fae2e236196b5137f01e66fc3e3a0693035ad2b1330ef265966c9309e4
+  data.tar.gz: 8963f1b087355b09c8b364d359d2757c17b561db2f0e9e04d93fc84dd6684bac11ffe533757124ebe44bc7c35616b61c3187f21a4e0bf50f142c5dfd23d3a1e9

data/.debride_withelist

@@ -0,0 +1,49 @@
+builtins=
+config_file
+environment
+locales_availables
+locales_load_path=
+log_target=
+master_key_file=
+name=
+output_colors?
+output_emoji?
+output_mode
+output_target
+output_target=
+secure_store_file=
+supported_environments=
+user_config_path
+user_config_path=
+register
+active_services=
+services=
+altered=
+validated=
+data=
+settings=
+config_file
+refresh
+stage
+stage=
+terminate
+system_locale
+add_alias
+emoji
+generate_session
+level
+map_color
+map_emoji
+target
+target=
+verify_file
+verify_link
+verify_service
+data=
+install_file
+make_link
+get_processes
+group_root
+is_root?
+extended
+method_missing

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    carioca (2.0.12)
+    carioca (2.1.0)
       deep_merge (~> 1.2)
       i18n (~> 1.10)
       locale (~> 2.1)
@@ -20,22 +20,49 @@ GEM
       bundler (>= 1.2.0, < 3)
       thor (~> 1.0)
     code_statistics (0.2.13)
-    concurrent-ruby (1.1.10)
+    concurrent-ruby (1.2.2)
+    cyclonedx-ruby (1.1.0)
+      json (~> 2.2)
+      nokogiri (~> 1.8)
+      ostruct (~> 0.1)
+      rest-client (~> 2.0)
     deep_merge (1.2.2)
     diff-lcs (1.5.0)
-    i18n (1.12.0)
+    domain_name (0.5.20190701)
+      unf (>= 0.0.5, < 1.0.0)
+    http-accept (1.7.0)
+    http-cookie (1.0.5)
+      domain_name (~> 0.5)
+    i18n (1.14.1)
       concurrent-ruby (~> 1.0)
     json (2.6.2)
     locale (2.1.3)
+    mime-types (3.4.1)
+      mime-types-data (~> 3.2015)
+    mime-types-data (3.2023.0218.1)
+    mini_portile2 (2.8.2)
+    netrc (0.11.0)
+    nokogiri (1.15.2)
+      mini_portile2 (~> 2.8.2)
+      racc (~> 1.4)
+    nokogiri (1.15.2-arm64-darwin)
+      racc (~> 1.4)
+    ostruct (0.5.5)
     parallel (1.22.1)
     parser (3.1.2.0)
       ast (~> 2.4.1)
     pastel (0.8.0)
       tty-color (~> 0.5)
     ps-ruby (0.0.4)
+    racc (1.7.1)
     rainbow (3.1.1)
     rake (13.0.6)
     regexp_parser (2.5.0)
+    rest-client (2.1.0)
+      http-accept (>= 1.7.0, < 2.0)
+      http-cookie (>= 1.0.2, < 2.0)
+      mime-types (>= 1.16, < 4.0)
+      netrc (~> 0.8)
     rexml (3.2.5)
     rspec (3.9.0)
       rspec-core (~> 3.9.0)
@@ -74,6 +101,9 @@ GEM
       tty-screen (~> 0.8)
       wisper (~> 2.0)
     tty-screen (0.8.1)
+    unf (0.1.4)
+      unf_ext
+    unf_ext (0.0.8.2)
     unicode-display_width (2.2.0)
     version (1.1.1)
     webrick (1.7.0)
@@ -91,6 +121,7 @@ DEPENDENCIES
   bundle-audit (~> 0.1.0)
   carioca!
   code_statistics (~> 0.2.13)
+  cyclonedx-ruby (~> 1.1)
   rake (~> 13.0)
   rspec (~> 3.0)
   rubocop (~> 1.32)
@@ -98,4 +129,4 @@ DEPENDENCIES
   yard-rspec (~> 0.1)
 
 BUNDLED WITH
-   2.2.3
+   2.3.24

data/README.md

@@ -199,15 +199,6 @@ yourgem_cmd.test
 
 ## Builtins services
 
-You could see, somme interesting things : 
-* Carioca have an internationalisation service (this service will be explain in detail after): 
-  * default configured on :en locale
-  * must be in French (:fr) or English (:en), other traductions are welcome
-* Carioca have a builtin logger service using regular Logger from Stdlib (also explain in detail in this document)
-  * default logging on STDOUT, but could be redirect in the configure bloc
-* Carioca give us some usefull traces in debug   
-* Carioca provide a complete solution to manage CLI output.  
-
 ### Description Registry 
 
 
@@ -246,7 +237,7 @@ class MyObject < Carioca::Container
 end
 
 ```
-the mAcro inject is already mixed in Carioca::Container
+The macro inject is already mixed in Carioca::Container
 
 **Note** : Service cloud be used on class method wrapping and instance mecthode. 
 
@@ -547,7 +538,7 @@ Output :
 
 * With colors and Emojies
 
-![Carioca output](assets/images/carioca_output_emoji_colors)
+![Carioca output](assets/images/carioca_output_emoji_colors.PNG)
 
 ### Service Debug
 
@@ -622,6 +613,93 @@ titi
 🐛 END CALL
 ```
 
+### Service Finisher
+
+### Service Setup
+
+### Service SanityCheck
+
+### Service Toolbox
+
+The toolbox service is a misceleanous all purpose toolbox of methods, used by carioca's services and available for you.
+### Listing of all methods and description 
+
+
+```ruby
+toolbox = Carioca::Registry.get.get_service name: :toolbox
+pp toolbox.describe
+```
+
+Output (actual for this version, lust increase with the time): 
+
+```ruby
+{:is_root?=>"Verify if active current processus is running as root",
+ :check_unicode_term=>"Check if terminal support unicode",
+ :user_root=>"Get the local system root username ",
+ :search_file_in_gem=>"Retrieve absolute path of a file in a specific gem",
+ :group_root=>"Get the local system root groupname ",
+ :get_processes=>"Get the list of running processus"}
+```
+
+### methods usage
+
+```ruby
+pp toolbox.user_root
+pp toolbox.search_file_in_gem('carioca','config/locales/en.yml')
+
+```
+
+```ruby
+"root"
+"/var/lib/gems/3.0.0/gems/carioca-2.0.12/config/locales/en.yml"
+```
+
+### Service SecureStore
+
+
+
+#### Exemple of usage of the Secure Store
+
+This simplist example show how to store current time in Secure Data Store  
+
+**Note** : if the Data store not exist nor the master.key, when injecting the service, the two item are created on initialisation 
+
+```ruby
+securestore = Carioca::Registry.get.get_service name: :securestore
+res = (securestore.data.empty?)? "first time" : securestore.data.to_s
+puts res
+securestore.data[:time] = Time.now
+securestore.save!
+```
+
+Output, on the first iteration :
+
+```
+first time
+```
+
+Output, on the second iteration :
+
+```
+{:time=>2023-06-02 14:27:39.8903567 +0200}
+```
+
+**Note** : by default Secure store : secure.store and Master key : master.key (chmod 400, owned by the running user), are created in "~/.carioca" of the running user. 
+
+#### Configuration in Carioca
+
+You could change path for master.key and secure.store with : 
+
+```ruby
+Carioca::Registry.configure do |spec|
+  spec.user_config_path = "~/.carioca" # default user path (folder)
+  spec.master_key_file =  "#{spec.user_config_path}/master.key" # default OpenSSL secret key for service SecureStore
+  sepc.secure_store_file = "#{spec.user_config_path}/secure.Store" # default OpenSSL YAM secure store file for service SecureStore
+end
+```
+
+
+
 ## Carioca Configuration
 
 Carioca use a bloc given mapping object of to configure like :
@@ -637,7 +715,8 @@ end
 
 ```ruby
 attr_accessor :filename, :name, :builtins, :log_target, :default_locale, :locales_load_path, :debugger_tracer,
-                  :config_file, :config_root, :environment, :supported_environments, :output_mode, :log_level, :output_target
+                  :config_file, :config_root, :environment, :supported_environments, :output_mode, :log_level, :output_target, :user_config_path,
+                  :master_key_file, :secure_store_file
 attr_writer :init_from_file, :output_colors, :output_emoji
 attr_reader :log_file, :locales_availables, :debug
 
@@ -664,6 +743,9 @@ Carioca::Registry.configure do |spec|
   spec.output_colors = true # the current output status for colors (see Carioca Service Output)
   spec.locales_load_path << Dir["#{File.expand_path('./config/locales')}/*.yml"]
   spec.debugger_tracer = :output # the Debbugger service output in #log , :output
+  spec.user_config_path = "~/.carioca" # default user path (folder)
+  spec.master_key_file =  "#{spec.user_config_path}/master.key" # default OpenSSL secret key for service SecureStore
+  sepc.secure_store_file = "#{spec.user_config_path}/secure.Store" # default OpenSSL YAM secure store file for service SecureStore
 
 end
 ```

data/Rakefile

@@ -48,4 +48,14 @@ task clobber: 'yardoc:clobber'
 desc "Run CVE security audit over bundle"
 task :audit do
   system('bundle audit')
+end
+
+desc "Run dead line of code detection"
+task :debride do
+  system('debride -w .debride_withelist .')
+end
+
+desc "Run SBOM CycloneDX Xml format file"
+task :sbom do
+  system('cyclonedx-ruby -p .')
 end

data/VERSION

@@ -1 +1 @@
-2.1.0
+2.1.1

data/bom.xml

@@ -0,0 +1,746 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1" serialNumber="urn:uuid:1266bf21-8e20-4ef5-b237-536698997a61">
+  <components>
+    <component type="library">
+      <name>ast</name>
+      <version>2.4.2</version>
+      <description>A library for working with Abstract Syntax Trees.</description>
+      <hashes>
+        <hash alg="SHA-256">1e280232e6a33754cde542bc5ef85520b74db2aac73ec14acef453784447cc12</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/ast@2.4.2</purl>
+    </component>
+    <component type="library">
+      <name>bundle-audit</name>
+      <version>0.1.0</version>
+      <description>Helper gem to require bundler-audit</description>
+      <hashes>
+        <hash alg="SHA-256">c8f085920cde681ba837be69c87b08598c1a7f46f70877f1b3a1711be91a7a43</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/bundle-audit@0.1.0</purl>
+    </component>
+    <component type="library">
+      <name>bundler-audit</name>
+      <version>0.9.1</version>
+      <description>Patch-level verification for Bundler</description>
+      <hashes>
+        <hash alg="SHA-256">bdc716fc21cd8652a6507b137e5bc51f5e0e4f6f106a114ab004c89d0200bd3d</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>GPL-3.0+</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/bundler-audit@0.9.1</purl>
+    </component>
+    <component type="library">
+      <name>carioca</name>
+      <version>2.1.0</version>
+      <description>Carioca : Container And Registry with Inversion Of Control for your Applications</description>
+      <hashes>
+        <hash alg="SHA-256">4e89e5c23f92aa4731ca58110218d9b9b82ff5075a5bf500a96e19ba1ca9d1e1</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>BSD-3-Clause</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/carioca@2.1.0</purl>
+    </component>
+    <component type="library">
+      <name>code_statistics</name>
+      <version>0.2.13</version>
+      <description>Making a gem of the normal rails rake stats method, to make it more robust and work on non rails projects</description>
+      <hashes>
+        <hash alg="SHA-256">23556d2d44f89526722f3b6de8f2baa2aa23190203fa6ed1dd04d6c597be2d1f</hash>
+      </hashes>
+      <purl>pkg:gem/code_statistics@0.2.13</purl>
+    </component>
+    <component type="library">
+      <name>concurrent-ruby</name>
+      <version>1.2.2</version>
+      <description>Modern concurrency tools for Ruby. Inspired by Erlang, Clojure, Scala, Haskell, F#, C#, Java, and classic concurrency patterns.</description>
+      <hashes>
+        <hash alg="SHA-256">3879119b8b75e3b62616acc256c64a134d0b0a7a9a3fcba5a233025bcde22c4f</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/concurrent-ruby@1.2.2</purl>
+    </component>
+    <component type="library">
+      <name>cyclonedx-ruby</name>
+      <version>1.1.0</version>
+      <description>CycloneDX software bill-of-material (SBoM) generation utility</description>
+      <hashes>
+        <hash alg="SHA-256">a6d2ee6824fbd881f7a66092ecbe152422fd068e822709e9fa2648656b006900</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/cyclonedx-ruby@1.1.0</purl>
+    </component>
+    <component type="library">
+      <name>deep_merge</name>
+      <version>1.2.2</version>
+      <description>Merge Deeply Nested Hashes</description>
+      <hashes>
+        <hash alg="SHA-256">83ced3a3d7f95f67de958d2ce41b1874e83c8d94fe2ddbff50c8b4b82323563a</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/deep_merge@1.2.2</purl>
+    </component>
+    <component type="library">
+      <name>diff-lcs</name>
+      <version>1.5.0</version>
+      <description>Diff::LCS computes the difference between two Enumerable sequences using the McIlroy-Hunt longest common subsequence (LCS) algorithm</description>
+      <hashes>
+        <hash alg="SHA-256">49b934001c8c6aedb37ba19daec5c634da27b318a7a3c654ae979d6ba1929b67</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/diff-lcs@1.5.0</purl>
+    </component>
+    <component type="library">
+      <name>domain_name</name>
+      <version>0.5.20190701</version>
+      <description>Domain Name manipulation library for Ruby</description>
+      <hashes>
+        <hash alg="SHA-256">000a600454cb4a344769b2f10b531765ea7bd3a304fe47ed12e5ca1eab969851</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>BSD-2-Clause</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/domain_name@0.5.20190701</purl>
+    </component>
+    <component type="library">
+      <name>http-accept</name>
+      <version>1.7.0</version>
+      <description>Parse Accept and Accept-Language HTTP headers.</description>
+      <hashes>
+        <hash alg="SHA-256">c626860682bfbb3b46462f8c39cd470fd7b0584f61b3cc9df5b2e9eb9972a126</hash>
+      </hashes>
+      <purl>pkg:gem/http-accept@1.7.0</purl>
+    </component>
+    <component type="library">
+      <name>http-cookie</name>
+      <version>1.0.5</version>
+      <description>A Ruby library to handle HTTP Cookies based on RFC 6265</description>
+      <hashes>
+        <hash alg="SHA-256">73756d46c7dbdc7023deecdb8a171348ea95a1b99810b31cfe8b4fb4e9a6318f</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/http-cookie@1.0.5</purl>
+    </component>
+    <component type="library">
+      <name>i18n</name>
+      <version>1.14.1</version>
+      <description>New wave Internationalization support for Ruby</description>
+      <hashes>
+        <hash alg="SHA-256">9d03698903547c060928e70a9bc8b6b87fda674453cda918fc7ab80235ae4a61</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/i18n@1.14.1</purl>
+    </component>
+    <component type="library">
+      <name>json</name>
+      <version>2.6.2</version>
+      <description>JSON Implementation for Ruby</description>
+      <hashes>
+        <hash alg="SHA-256">cc9eedb357374667fe2b45e2a7fa65af517cc33bbfa12f56a14953f38a4845f5</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Ruby</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/json@2.6.2</purl>
+    </component>
+    <component type="library">
+      <name>locale</name>
+      <version>2.1.3</version>
+      <description>Ruby-Locale is the pure ruby library which provides basic APIs for localization.</description>
+      <hashes>
+        <hash alg="SHA-256">b6ddee011e157817cb98e521b3ce7cb626424d5882f1e844aafdee3e8b212725</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Ruby</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/locale@2.1.3</purl>
+    </component>
+    <component type="library">
+      <name>mime-types</name>
+      <version>3.4.1</version>
+      <description>The mime-types library provides a library and registry for information about MIME content type definitions</description>
+      <hashes>
+        <hash alg="SHA-256">6bcf8b0e656b6ae9977bdc1351ef211d0383252d2f759a59ef4bcf254542fc46</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/mime-types@3.4.1</purl>
+    </component>
+    <component type="library">
+      <name>mime-types-data</name>
+      <version>3.2023.0218.1</version>
+      <description>mime-types-data provides a registry for information about MIME media type definitions</description>
+      <hashes>
+        <hash alg="SHA-256">e90f027e54346bbbf7bd993a97e9cb7270cd4fe41c535ef84bf5d1aefe1e7ede</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/mime-types-data@3.2023.0218.1</purl>
+    </component>
+    <component type="library">
+      <name>mini_portile2</name>
+      <version>2.8.2</version>
+      <description>Simplistic port-like solution for developers</description>
+      <hashes>
+        <hash alg="SHA-256">46b2d244cc6ff01a89bf61274690c09fdbdca47a84ae9eac39039e81231aee7c</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/mini_portile2@2.8.2</purl>
+    </component>
+    <component type="library">
+      <name>netrc</name>
+      <version>0.11.0</version>
+      <description>Library to read and write netrc files.</description>
+      <hashes>
+        <hash alg="SHA-256">de1ce33da8c99ab1d97871726cba75151113f117146becbe45aa85cb3dabee3f</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/netrc@0.11.0</purl>
+    </component>
+    <component type="library">
+      <name>nokogiri</name>
+      <version>1.15.2</version>
+      <description>Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">20dc800b8fbe4c4f4b5b164e6aa3ab82a371bcb27eb685c166961c34dd8a22d7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/nokogiri@1.15.2</purl>
+    </component>
+    <component type="library">
+      <name>nokogiri</name>
+      <version>1.15.2</version>
+      <description>Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">20dc800b8fbe4c4f4b5b164e6aa3ab82a371bcb27eb685c166961c34dd8a22d7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/nokogiri@1.15.2</purl>
+    </component>
+    <component type="library">
+      <name>ostruct</name>
+      <version>0.5.5</version>
+      <description>Class to build custom data structures, similar to a Hash.</description>
+      <hashes>
+        <hash alg="SHA-256">bc73d0e10f85ca2afdddc7eb79b3132bee622e2281db4e6e033a4cbf7d845efb</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Ruby</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/ostruct@0.5.5</purl>
+    </component>
+    <component type="library">
+      <name>parallel</name>
+      <version>1.22.1</version>
+      <description>Run any kind of code in parallel processes</description>
+      <hashes>
+        <hash alg="SHA-256">ebdf1f0c51f182df38522f70ba770214940bef998cdb6e00f36492b29699761f</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/parallel@1.22.1</purl>
+    </component>
+    <component type="library">
+      <name>parser</name>
+      <version>3.1.2.0</version>
+      <description>A Ruby parser written in pure Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">eda4d7b49bbfddad3b6ca9cdfb23302eec6cf73c2e808b6d5b0cc9161f7c0e76</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/parser@3.1.2.0</purl>
+    </component>
+    <component type="library">
+      <name>pastel</name>
+      <version>0.8.0</version>
+      <description>Terminal strings styling with intuitive and clean API.</description>
+      <hashes>
+        <hash alg="SHA-256">481da9fb7d2f6e6b1a08faf11fa10363172dc40fd47848f096ae21209f805a75</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/pastel@0.8.0</purl>
+    </component>
+    <component type="library">
+      <name>ps-ruby</name>
+      <version>0.0.4</version>
+      <description>PS-Ruby is a simple ps wrapper with ruby</description>
+      <hashes>
+        <hash alg="SHA-256">3798226a01e5b4066a880e8911cac475bc69f0010076c9151e6841131cb23b12</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/ps-ruby@0.0.4</purl>
+    </component>
+    <component type="library">
+      <name>racc</name>
+      <version>1.7.1</version>
+      <description>Racc is a LALR(1) parser generator</description>
+      <hashes>
+        <hash alg="SHA-256">eaa5cd10ace36a5c5a139e699875a45fa1dfd7d5df8432ffd6243962c6b24ef0</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Ruby</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/racc@1.7.1</purl>
+    </component>
+    <component type="library">
+      <name>rainbow</name>
+      <version>3.1.1</version>
+      <description>Colorize printed text on ANSI terminals</description>
+      <hashes>
+        <hash alg="SHA-256">039491aa3a89f42efa1d6dec2fc4e62ede96eb6acd95e52f1ad581182b79bc6a</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rainbow@3.1.1</purl>
+    </component>
+    <component type="library">
+      <name>rake</name>
+      <version>13.0.6</version>
+      <description>Rake is a Make-like program implemented in Ruby</description>
+      <hashes>
+        <hash alg="SHA-256">5ce4bf5037b4196c24ac62834d8db1ce175470391026bd9e557d669beeb19097</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rake@13.0.6</purl>
+    </component>
+    <component type="library">
+      <name>regexp_parser</name>
+      <version>2.5.0</version>
+      <description>Scanner, lexer, parser for ruby's regular expressions</description>
+      <hashes>
+        <hash alg="SHA-256">a076d2d35ab8d11feab5fecf8aa09ec6df68c2429810748cba079f7b021ecde5</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/regexp_parser@2.5.0</purl>
+    </component>
+    <component type="library">
+      <name>rest-client</name>
+      <version>2.1.0</version>
+      <description>Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.</description>
+      <hashes>
+        <hash alg="SHA-256">a35a3bb8d16ca39d110a946a2c805267f98ce07a0ae890e4512a45eadea47a6e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rest-client@2.1.0</purl>
+    </component>
+    <component type="library">
+      <name>rexml</name>
+      <version>3.2.5</version>
+      <description>An XML toolkit for Ruby</description>
+      <hashes>
+        <hash alg="SHA-256">a33c3bf95fda7983ec7f05054f3a985af41dbc25a0339843bd2479e93cabb123</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>BSD-2-Clause</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rexml@3.2.5</purl>
+    </component>
+    <component type="library">
+      <name>rspec</name>
+      <version>3.9.0</version>
+      <description>rspec-3.9.0</description>
+      <hashes>
+        <hash alg="SHA-256">90a037a7cc02365d7c112201881839aafbc875a88094423bc8cba778c98bfac3</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rspec@3.9.0</purl>
+    </component>
+    <component type="library">
+      <name>rspec-core</name>
+      <version>3.9.3</version>
+      <description>rspec-core-3.9.3</description>
+      <hashes>
+        <hash alg="SHA-256">704f3af166bb8d763199742d94f0be3027c0f26d61a2f2156d99d0444248082d</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rspec-core@3.9.3</purl>
+    </component>
+    <component type="library">
+      <name>rspec-expectations</name>
+      <version>3.9.4</version>
+      <description>rspec-expectations-3.9.4</description>
+      <hashes>
+        <hash alg="SHA-256">58248bcc7ca1cde7255aa2436d27a1a6133d8d235409011b5256a24ce050583e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rspec-expectations@3.9.4</purl>
+    </component>
+    <component type="library">
+      <name>rspec-mocks</name>
+      <version>3.9.1</version>
+      <description>rspec-mocks-3.9.1</description>
+      <hashes>
+        <hash alg="SHA-256">b9820ed35afbc552b4448ccb98984ffe20e92bff6760dbd60f4fec503d6e75a7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rspec-mocks@3.9.1</purl>
+    </component>
+    <component type="library">
+      <name>rspec-support</name>
+      <version>3.9.4</version>
+      <description>rspec-support-3.9.4</description>
+      <hashes>
+        <hash alg="SHA-256">f4333c6df9413909aa652e8460588b36e8bb62e76e51e94c039e1b4bc3e4e645</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rspec-support@3.9.4</purl>
+    </component>
+    <component type="library">
+      <name>rubocop</name>
+      <version>1.32.0</version>
+      <description>Automatic Ruby code style checking tool.</description>
+      <hashes>
+        <hash alg="SHA-256">82d2a9c2995324ee0d27b75f4396d30a021e965c0e82c39162e7041a6a386326</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rubocop@1.32.0</purl>
+    </component>
+    <component type="library">
+      <name>rubocop-ast</name>
+      <version>1.19.1</version>
+      <description>RuboCop tools to deal with Ruby code AST.</description>
+      <hashes>
+        <hash alg="SHA-256">f549a8f636a3d4d7bc235ee091a7cea955441cf7a250d124d44e218df91b1841</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/rubocop-ast@1.19.1</purl>
+    </component>
+    <component type="library">
+      <name>ruby-progressbar</name>
+      <version>1.11.0</version>
+      <description>Ruby/ProgressBar is a flexible text progress bar library for Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">cc127db3866dc414ffccbf92928a241e585b3aa2b758a5563e74a6ee0f57d50a</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/ruby-progressbar@1.11.0</purl>
+    </component>
+    <component type="library">
+      <name>thor</name>
+      <version>1.2.2</version>
+      <description>Thor is a toolkit for building powerful command-line interfaces.</description>
+      <hashes>
+        <hash alg="SHA-256">2f93c652828cba9fcf4f65f5dc8c306f1a7317e05aad5835a13740122c17f24c</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/thor@1.2.2</purl>
+    </component>
+    <component type="library">
+      <name>tty-color</name>
+      <version>0.6.0</version>
+      <description>Terminal color capabilities detection</description>
+      <hashes>
+        <hash alg="SHA-256">6f9c37ca3a4e2367fb2e6d09722762647d6f455c111f05b59f35730eeb24332a</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/tty-color@0.6.0</purl>
+    </component>
+    <component type="library">
+      <name>tty-cursor</name>
+      <version>0.7.1</version>
+      <description>Terminal cursor positioning, visibility and text manipulation.</description>
+      <hashes>
+        <hash alg="SHA-256">79534185e6a777888d88628b14b6a1fdf5154a603f285f80b1753e1908e0bf48</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/tty-cursor@0.7.1</purl>
+    </component>
+    <component type="library">
+      <name>tty-prompt</name>
+      <version>0.23.1</version>
+      <description>A beautiful and powerful interactive command line prompt.</description>
+      <hashes>
+        <hash alg="SHA-256">fcdbce905238993f27eecfdf67597a636bc839d92192f6a0eef22b8166449ec8</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/tty-prompt@0.23.1</purl>
+    </component>
+    <component type="library">
+      <name>tty-reader</name>
+      <version>0.9.0</version>
+      <description>A set of methods for processing keyboard input in character, line and multiline modes.</description>
+      <hashes>
+        <hash alg="SHA-256">c62972c985c0b1566f0e56743b6a7882f979d3dc32ff491ed490a076f899c2b1</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/tty-reader@0.9.0</purl>
+    </component>
+    <component type="library">
+      <name>tty-screen</name>
+      <version>0.8.1</version>
+      <description>Terminal screen size detection which works on Linux, OS X and Windows/Cygwin platforms and supports MRI, JRuby, TruffleRuby and Rubinius interpreters.</description>
+      <hashes>
+        <hash alg="SHA-256">6508657c38f32bdca64880abe201ce237d80c94146e1f9b911cba3c7823659a2</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/tty-screen@0.8.1</purl>
+    </component>
+    <component type="library">
+      <name>unf</name>
+      <version>0.1.4</version>
+      <description>A wrapper library to bring Unicode Normalization Form support to Ruby/JRuby</description>
+      <hashes>
+        <hash alg="SHA-256">49a5972ec0b3d091d3b0b2e00113f2f342b9b212f0db855eb30a629637f6d302</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>2-clause BSDL</name>
+        </license>
+      </licenses>
+      <purl>pkg:gem/unf@0.1.4</purl>
+    </component>
+    <component type="library">
+      <name>unf_ext</name>
+      <version>0.0.8.2</version>
+      <description>Unicode Normalization Form support library for CRuby</description>
+      <hashes>
+        <hash alg="SHA-256">6d44c13c98924bebd15ebdd4ed196ead403a0770ac03304570873349fda2a208</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/unf_ext@0.0.8.2</purl>
+    </component>
+    <component type="library">
+      <name>unicode-display_width</name>
+      <version>2.2.0</version>
+      <description>Determines the monospace display width of a string in Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">967fa4071b42b2c4afab8375c4f464392c5fb956959c0ceeb3cea0f4cd648eda</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/unicode-display_width@2.2.0</purl>
+    </component>
+    <component type="library">
+      <name>version</name>
+      <version>1.1.1</version>
+      <description>simple version-number encapsulation</description>
+      <hashes>
+        <hash alg="SHA-256">09961d4a5ba4571a8410461b4baa69c0befcf3c28bb8905c202ba60ab5d01aca</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/version@1.1.1</purl>
+    </component>
+    <component type="library">
+      <name>webrick</name>
+      <version>1.7.0</version>
+      <description>HTTP server toolkit</description>
+      <hashes>
+        <hash alg="SHA-256">87e9b8e39947b7925338a5eb55427b11ce1f2b25a3645770ec9f39d8ebdb8cb4</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Ruby</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/webrick@1.7.0</purl>
+    </component>
+    <component type="library">
+      <name>wisper</name>
+      <version>2.0.1</version>
+      <description>A micro library providing objects with Publish-Subscribe capabilities</description>
+      <hashes>
+        <hash alg="SHA-256">ce17bc5c3a166f241a2e6613848b025c8146fce2defba505920c1d1f3f88fae6</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/wisper@2.0.1</purl>
+    </component>
+    <component type="library">
+      <name>yard</name>
+      <version>0.9.28</version>
+      <description>Documentation tool for consistent and usable documentation in Ruby.</description>
+      <hashes>
+        <hash alg="SHA-256">d31b7e3172405165212e0c8db5b3b57865f0831f1bc33bdda5d0709e1e72315c</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+        </license>
+      </licenses>
+      <purl>pkg:gem/yard@0.9.28</purl>
+    </component>
+    <component type="library">
+      <name>yard-rspec</name>
+      <version>0.1</version>
+      <description>YARD plugin to list RSpec specifications inside documentation</description>
+      <hashes>
+        <hash alg="SHA-256">f59e3070cdca303fa460f43ad7adbbffa0a6c5d6b79651b6d03fb87778815db5</hash>
+      </hashes>
+      <purl>pkg:gem/yard-rspec@0.1</purl>
+    </component>
+  </components>
+</bom>

data/carioca.gemspec

@@ -45,4 +45,5 @@ Gem::Specification.new do |spec|
   spec.metadata['rubygems_mfa_required'] = 'false'
   spec.add_dependency 'version', '~> 1.1'
   spec.add_runtime_dependency 'ps-ruby','~> 0.0.4'
+  spec.add_development_dependency "cyclonedx-ruby", "~> 1.1"
 end

data/lib/carioca/services/sanitycheck.rb

@@ -59,9 +59,10 @@ module Carioca
     # @option [String] :owner file owner for folder, optionnal
     # @option [String] :group  file group for folder, optionnal
     def verify_folder(name:, mode: "755", owner: nil, group: nil)
+        full_name = File.expand_path(name)     
         res = Array::new
-        return  [:inexistant] unless File.directory?(name)
-        stat = File.stat(name)
+        return  [:inexistant] unless File.directory?(full_name)
+        stat = File.stat(full_name)
         if mode then
           tested_mode = "%o" % stat.mode
           res << :mode if tested_mode[-3..-1] != mode
@@ -79,10 +80,11 @@ module Carioca
       # @return [Boolean]
       # @option [String] :name path of the link
       def verify_link(name: )
+        full_name = File.expand_path(name)  
         res = Array::new
-        res.push :inexistant unless File.file?(name)
+        res.push :inexistant unless File.file?(full_name)
         return res
-    end
+      end
   
       # check file
       # @return [Array] of Symbol with error type : [:inexistant,:mode,:owner,:group]
@@ -91,9 +93,10 @@ module Carioca
       # @option [String] :owner file owner for file, optionnal
       # @option [String] :group  file group for file, optionnal
       def verify_file(name: , mode: '644', owner: nil, group: nil)
+        full_name = File.expand_path(name)
         res = Array::new
-        return  [:inexistant] unless File.file?(name)
-        stat = File.stat(name)
+        return  [:inexistant] unless File.file?(full_name)
+        stat = File.stat(full_name)
         if mode then
           tested_mode = "%o" % stat.mode
           res << :mode if tested_mode[-3..-1] != mode
@@ -137,4 +140,4 @@ module Carioca
 
         end
     end
-end
+end

data/lib/carioca/services/setup.rb

@@ -49,11 +49,12 @@ module Carioca
     # @option [Bool] :gem resolve file in gem root (default true)
     # @option [String] :gem_name name of the gem where to search (default "carioca")
     def install_file(source:, target:, mode: "644", owner: nil, group: nil, force: true, gem: true, gem_name: "carioca" )
-        @output.item @i18n.t('setup.install', file: target)
+      @output.item @i18n.t('setup.install', file: target)
+        full_target = File.expand_path(target)
         source = (gem)? @toolbox.search_file_in_gem(gem_name,source) : source
-        FileUtils::copy source, target if force
-        FileUtils.chmod mode.to_i(8), target
-        FileUtils.chown owner, group, target if owner and group
+        FileUtils::copy source, full_target if force
+        FileUtils.chmod mode.to_i(8), full_target
+        FileUtils.chown owner, group, full_target if owner and group
       end
   
       # facility for folder creation
@@ -61,17 +62,20 @@ module Carioca
       # @option [String] :mode String for OCTAL rights like "644"
       # @option [String] :owner file owner for folder
       # @option [String] :group  file group for folder
-      def make_folder(path:, mode: "644", owner: nil, group: nil )
-        @output.item @i18n.t('setup.mkdir', path: path)
-        FileUtils::mkdir_p path unless File::exist? path
-        FileUtils.chmod mode.to_i(8), path
-        FileUtils.chown owner, group, path if owner and group
+    def make_folder(path:, mode: "644", owner: nil, group: nil )
+        full_path = File.expand_path(path)
+        @output.item @i18n.t('setup.mkdir', path: full_path)
+        FileUtils::mkdir_p path unless File::exist? full_path
+        FileUtils.chmod mode.to_i(8), full_path
+        FileUtils.chown owner, group, full_path if owner and group
       end
   
       # facility for Symbolic link
       # @option [String] :source path of the file
       # @option [String] :link path of the symlink
       def make_link(source:, link:)
+        full_source = File.expand_path(source)
+        full_link = File.expand_path(link)
         @output.item @i18n.t('setup.ln', target: link, source: source)
         FileUtils::rm link if (File::symlink? link and not File::exist? link)
         FileUtils::ln_s source, link unless File::exist? link

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: carioca
 version: !ruby/object:Gem::Version
-  version: 2.1.0
+  version: 2.1.1
 platform: ruby
 authors:
 - Romain GEORGES
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2023-06-02 00:00:00.000000000 Z
+date: 2023-10-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: deep_merge
@@ -206,6 +206,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.0.4
+- !ruby/object:Gem::Dependency
+  name: cyclonedx-ruby
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
 description: 'Carioca 2: is a complete rewrite who provide a full IoC/DI light Container
   and a services registry, build with logs, config and Internationalization facilities
   for designing your applications'
@@ -215,6 +229,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".debride_withelist"
 - ".github/workflows/main.yml"
 - ".gitignore"
 - ".rspec"
@@ -240,6 +255,7 @@ files:
 - assets/images/logo_carioca_light_small.png
 - bin/console
 - bin/setup
+- bom.xml
 - carioca.gemspec
 - config/locales/en.yml
 - config/locales/fr.yml