chelsea 0.0.5 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7c31a37e1fb1eac86e8eb9c6f25c4a5bda4eff5ed362ac64b8117f954547293f
-  data.tar.gz: c7e9c8170e2864da8af8b35ddbe9c7e49572e9393236d445aa6e52d7f5dbba61
+  metadata.gz: f1778ec5d4e68f4e48180d3ff4d5495bf742eb4b2b36e218b044e67248493c03
+  data.tar.gz: b07fd8484642d229301d5636a760cff9c4f205b2deea3f408cdcc92e3dc27f01
 SHA512:
-  metadata.gz: 2dd0bfcac2578790ebc122ad866f6cf503a33eb1e46e210ae16ad2c8e23aa11f834344c4e3e29d29335ecdebc8b3846438b2e58a655b3799acd1fc22001684f8
-  data.tar.gz: 4a4aa14bc7300d9725d7ebad07e7f8b890fd634666ad9f9248afc86b0c759872987bf14265ffb24d0df54518f9b78d15a0c90aa9bfc881239f2db30e70710dc9
+  metadata.gz: 90756c847bafc522b3757631a738f334be228c5d042e5e05cb4e61eecfcb518b1c57770b4828e6e9f74f35fb732fde652873b6680904f7d7a0e19ef13f613d71
+  data.tar.gz: c74ce61cf769d2f4612ad5a6652efc017ab417a60184a6abd6a13316ddf59dd49795dd341692503a98cf925fe360423442c0ff4ba1fe4a1711f605e93da630bd

data/lib/chelsea/deps.rb

@@ -7,13 +7,13 @@ require 'json'
 require 'rest-client'
 require 'pstore'
 
-
 module Chelsea
   class Deps
-    attr_reader :server_response, :reverse_dependencies, :coordinates
+    attr_reader :server_response, :reverse_dependencies, :coordinates, :dependencies
 
     def initialize(path: , quiet: false)
       @path, @quiet = path, quiet
+      ENV['BUNDLE_GEMFILE'] = File.expand_path(path).chomp(".lock")
 
       begin
         @lockfile = Bundler::LockfileParser.new(
@@ -30,14 +30,6 @@ module Chelsea
       @server_response = []
       @store = PStore.new(_get_db_store_location())
     end
-  
-    def to_h(reverse: false)
-      if reverse
-        @reverse_dependencies
-      else
-        @dependencies
-      end
-    end
 
     def nil?
       @dependencies.empty?
@@ -51,6 +43,7 @@ module Chelsea
       "chelsea/#{Chelsea::VERSION}"
     end
 
+    # Parses specs from lockfile instanct var and inserts into dependenices instance var
     def get_dependencies
       @lockfile.specs.each do |gem|\
         begin
@@ -61,6 +54,7 @@ module Chelsea
       end
     end
 
+    # Collects all reverse dependencies in reverse_dependencies instance var
     def get_reverse_dependencies
       begin
         reverse = Gem::Commands::DependencyCommand.new
@@ -71,6 +65,8 @@ module Chelsea
       end
     end
 
+    # Iterates over all dependencies and stores them
+    # in dependencies_versions and coordinates instance vars
     def get_dependencies_versions_as_coordinates
       @dependencies.each do |p, r|
         o =  r[0]
@@ -88,28 +84,22 @@ module Chelsea
       end
     end
 
-    # Makes multiple REST calls
+    # Makes REST calls to OSS for vulnerabilities 128 coordinates at a time
+    # Checks cache and stores results in cache
     def get_vulns()
       _check_db_for_cached_values()
 
       if @coordinates["coordinates"].count() > 0
         chunked = Hash.new()
         @coordinates["coordinates"].each_slice(128).to_a.each do |coords|
-          # Won't this return the first successful slice?
           chunked["coordinates"] = coords
           r = RestClient.post "https://ossindex.sonatype.org/api/v3/component-report", chunked.to_json,
             { content_type: :json, accept: :json, 'User-Agent': user_agent }
           if r.code == 200
             @server_response = @server_response.concat(JSON.parse(r.body))
             _save_values_to_db(JSON.parse(r.body))
-            @server_response.count()
-          else
-            0
           end
         end
-      else
-        #IDGI
-        @server_response.count()
       end
     end
 

data/lib/chelsea/gems.rb

@@ -24,7 +24,9 @@ module Chelsea
       @deps = Chelsea::Deps.new({path: Pathname.new(@file)})
     end
 
-    def execute(input: $stdin, output: $stdout) 
+    # Audits depenencies using deps library and prints results
+    # using formatter library
+    def execute(input: $stdin, output: $stdout)
       audit
       if @deps.nil?
         _print_err "No dependencies retrieved. Exiting."
@@ -37,6 +39,8 @@ module Chelsea
       @formatter.do_print(@formatter.get_results(@deps))
     end
 
+    # Runs through auditing algorithm, raising exceptions
+    # on REST calls made by @deps.get_vulns
     def audit
       unless @quiet
         spinner = _spin_msg "Parsing dependencies"

data/lib/chelsea/version.rb

@@ -1,3 +1,3 @@
 module Chelsea
-  VERSION = "0.0.5"
+  VERSION = "0.0.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: chelsea
 version: !ruby/object:Gem::Version
-  version: 0.0.5
+  version: 0.0.6
 platform: ruby
 authors:
 - Allister Beharry
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-04-03 00:00:00.000000000 Z
+date: 2020-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: tty-font