cisa-kev 0.1.0

data/spec/spec_helper.rb

@@ -0,0 +1,3 @@
+require 'rspec'
+require 'simplecov'
+SimpleCov.start

data/spec/vulnerability_spec.rb

@@ -0,0 +1,59 @@
+require 'spec_helper'
+require 'cisa/kev/vulnerability'
+
+describe CISA::KEV::Vulnerability do
+  let(:fixtures_dir) { File.join(__dir__,'fixtures') }
+  let(:json_file)    { File.join(fixtures_dir,'known_exploited_vulnerabilities.json') }
+  let(:raw_json)     { File.read(json_file) }
+  let(:json)         { JSON.parse(raw_json)['vulnerabilities'][0] }
+
+  describe ".from_json" do
+    subject { described_class.from_json(json) }
+
+    it "must parse the JSON attributes and return a #{described_class} object" do
+      expect(subject).to be_kind_of(described_class)
+      expect(subject.cve_id).to eq(json['cveID'])
+      expect(subject.vendor_project).to eq(json['vendorProject'])
+      expect(subject.product).to eq(json['product'])
+      expect(subject.vulnerability_name).to eq(json['vulnerabilityName'])
+      expect(subject.date_added).to eq(Date.parse(json['dateAdded']))
+      expect(subject.short_description).to eq(json['shortDescription'])
+      expect(subject.required_action).to eq(json['requiredAction'])
+      expect(subject.due_date).to eq(Date.parse(json['dueDate']))
+    end
+
+    context "when the 'knownRansomwareCampaignUse' attribute is 'Known'" do
+      let(:json) { super().merge('knownRansomwareCampaignUse' => 'Known') }
+
+      it "must set #known_ransomware_campaign_use to true" do
+        expect(subject.known_ransomware_campaign_use).to be(true)
+      end
+    end
+
+    context "when the 'knownRansomwareCampaignUse' attribute is not 'Known'" do
+      let(:json) { super().merge('knownRansomwareCampaignUse' => 'Unknown') }
+
+      it "must set #known_ransomware_campaign_use to false" do
+        expect(subject.known_ransomware_campaign_use).to be(false)
+      end
+    end
+
+    context "when the 'notes' attribute is not empty" do
+      let(:notes) { 'Foo bar baz' }
+      let(:json)  { super().merge('notes' => notes) }
+
+      it "must set #notes" do
+        expect(subject.notes).to eq(notes)
+      end
+    end
+
+    context "when the 'notes' attribute is empty" do
+      let(:notes) { '' }
+      let(:json)  { super().merge('notes' => notes) }
+
+      it "must not set #notes" do
+        expect(subject.notes).to be(nil)
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,85 @@
+--- !ruby/object:Gem::Specification
+name: cisa-kev
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Postmodern
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-05-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+description: |
+  A simple Ruby library for parsing the CISA KEV (Known Exploited
+  Vulnerabilities) catalog
+email: postmodern.mod3@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files:
+- ChangeLog.md
+- LICENSE.txt
+- README.md
+files:
+- ".document"
+- ".github/workflows/ruby.yml"
+- ".gitignore"
+- ".rspec"
+- ".yardopts"
+- ChangeLog.md
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- cisa-kev.gemspec
+- gemspec.yml
+- lib/cisa/kev.rb
+- lib/cisa/kev/catalog.rb
+- lib/cisa/kev/version.rb
+- lib/cisa/kev/vulnerability.rb
+- spec/catalog_spec.rb
+- spec/fixtures/known_exploited_vulnerabilities.json
+- spec/spec_helper.rb
+- spec/vulnerability_spec.rb
+homepage: https://github.com/postmodern/cisa-kev.rb#readme
+licenses:
+- MIT
+metadata:
+  documentation_uri: https://rubydoc.info/gems/cisa-kev
+  source_code_uri: https://github.com/postmodern/cisa-kev.rb
+  bug_tracker_uri: https://github.com/postmodern/cisa-kev.rb/issues
+  changelog_uri: https://github.com/postmodern/cisa-kev.rb/blob/main/ChangeLog.md
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.19
+signing_key:
+specification_version: 4
+summary: A simple library for parsing the CISA KEV catalog
+test_files: []