conjur-api 6.0.1.pre.139 → 6.0.1.pre.252

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: be9dbeeabfdd50fc245dc23bae80dfcd8768b3e6acbff0e5a563e6289392e6f8
-  data.tar.gz: '03079e5cc447e507d2578b7e8be606cbcddffdbe369afab118439085173bc82b'
+  metadata.gz: 22577611fe210bd567dc63cd774db6bf8b188b764a0ed1d2d7d954010266573c
+  data.tar.gz: 635aad92a4751e1f68f5e03c67bf571b0498572d040fddf6a2d530eb83bcfb99
 SHA512:
-  metadata.gz: 98c984e425df062ca23cf4a5f56b3c7988164cb3bb1461a3cf09ae1e45b9d48f296d8e93456b6f1a3e78ca4e51eabd7d069f521aae36f5b2aff6f0793616dffc
-  data.tar.gz: 8024959d159baadde02a20914ee3e9b731b9f8b74a00370720b1f067a77b3955eb480fa28ea6cfa4f9a7b4e48a861547e80c1e75a7b8f96d923a7579da04e5d1
+  metadata.gz: 98ffb236fb6e0862be09adb1b2d3e6a0ca85b754295888936c69f35674884605135a13c5355833b2cb8147f3e53a2875ec87db7faa937b94d5ef17d5153d1d7e
+  data.tar.gz: f6bf3cd58f3df2d0bc26a8f8e889b6fd80610d3225946f386954b7abeab4e183956e3c0fa28c1032b9b25605b0b9838931a0cd0a7cf814afa3391600f24bfbf1

data/Dockerfile

@@ -1,7 +1,7 @@
 ARG RUBY_VERSION
 FROM ruby:$RUBY_VERSION
 
-RUN apt-get update && apt-get install -y vim curl
+RUN apt-get update && apt-get install -y --no-install-recommends vim curl
 
 WORKDIR /src/conjur-api
 

data/Jenkinsfile

@@ -82,6 +82,7 @@ pipeline {
     stage('Test Ruby 3.0') {
       environment {
         RUBY_VERSION = '3.0'
+        INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {
@@ -99,6 +100,7 @@ pipeline {
     stage('Test Ruby 3.1') {
       environment {
         RUBY_VERSION = '3.1'
+        INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {
@@ -116,6 +118,7 @@ pipeline {
     stage('Test Ruby 3.2') {
       environment {
         RUBY_VERSION = '3.2'
+        INFRAPOOL_REGISTRY_URL = "registry.tld"
       }
       steps {
         script {

data/VERSION

@@ -1 +1 @@
-6.0.1-139
+6.0.1-252

data/dev/Dockerfile.dev

@@ -1,6 +1,6 @@
 FROM ruby:3-slim
 
-RUN apt-get update && apt-get install -y vim curl git build-essential
+RUN apt-get update && apt-get install -y --no-install-recommends vim curl git build-essential
 
 WORKDIR /src/conjur-api
 

data/docker-compose.yml

@@ -6,7 +6,7 @@ services:
       POSTGRES_HOST_AUTH_METHOD: trust
 
   conjur:
-    image: cyberark/conjur:edge
+    image: ${REGISTRY_URL:-docker.io}/cyberark/conjur:edge
     # TODO: Test with a version that supports authn-sut
     command: server -a cucumber
     environment:

data/example/demo.rb

@@ -3,6 +3,7 @@
 require 'conjur-api'
 require 'securerandom'
 
+# deepcode ignore HardcodedCredential: This is demo code
 username = "admin"
 
 arguments = ARGV.dup

data/kics.config

@@ -0,0 +1,19 @@
+# All of the following issues are not a concern for the infrastructure files in this
+# repository since they're only used in the build process or testing.
+exclude-queries:
+  - 965a08d7-ef86-4f14-8792-4a3b2098937e # Apt Get Install Pin Version Not Defined
+  - fd54f200-402c-4333-a5a4-36ef6709af2f # Missing User Instruction
+  - ce76b7d0-9e77-464d-b86f-c5c48e03e22d # Container Capabilities Unrestricted
+  - 8c978947-0ff6-485c-b0c2-0bfca6026466 # Shared Volumes Between Containers
+  - 610e266e-6c12-4bca-9925-1ed0cd29742b # Security Opt Not Set
+  - b03a748a-542d-44f4-bb86-9199ab4fd2d5 # Healthcheck Instruction Missing
+  - 698ed579-b239-4f8f-a388-baa4bcb13ef8 # Healthcheck Not Set
+  - 451d79dc-0588-476a-ad03-3c7f0320abb3 # Container Traffic Not Bound To Host Interface
+  - df746b39-6564-4fed-bf85-e9c44382303c # Apt Get Install Lists Were Not Deleted
+  - 4f31dd9f-2cc3-4751-9b53-67e4af83dac0 # Host Namespace is Shared
+  - ce14a68b-1668-41a0-ab7d-facd9f784742 # Networks Not Set
+
+# The following files are used for development and testing only.
+exclude-paths:
+  - "conjur-api-ruby/docker-compose.yml"
+  - "conjur-api-ruby/dev/docker-compose.yml"

data/spec/api_spec.rb

@@ -146,6 +146,7 @@ describe Conjur::API do
       let(:token_encoded) { Base64.strict_encode64(token.to_json) }
       let(:base_headers) { { authorization: authz_header } }
       let(:headers) { base_headers }
+      # deepcode ignore InsecureTransmission: This is test code
       let(:resource) { RestClient::Resource.new("http://example.com", { headers: headers })}
       context 'basic functioning' do
         it_behaves_like 'it can clone itself'

data/test.sh

@@ -4,6 +4,8 @@
 # My local RUBY_VERSION is set to ruby-#.#.# so this allows running locally.
 RUBY_VERSION="$(cut -d '-' -f 2 <<< "$RUBY_VERSION")"
 
+export REGISTRY_URL=${INFRAPOOL_REGISTRY_URL:-"docker.io"}
+
 source ./ci/oauth/keycloak/keycloak_functions.sh
 TOP_LEVEL=$(git rev-parse --show-toplevel)
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: conjur-api
 version: !ruby/object:Gem::Version
-  version: 6.0.1.pre.139
+  version: 6.0.1.pre.252
 platform: ruby
 authors:
 - CyberArk Maintainers
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-04-11 00:00:00.000000000 Z
+date: 2024-09-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rest-client
@@ -339,6 +339,7 @@ files:
 - features/user.feature
 - features/variable_fields.feature
 - features/variable_value.feature
+- kics.config
 - lib/conjur-api.rb
 - lib/conjur-api/version.rb
 - lib/conjur/acts_as_resource.rb