danger-brakeman_scanner 0.1.0.pre.preview → 0.1.0.pre.preview2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0fbfd5ee304ec4be6876f559fb554b741853f21e176c25295fea97708a036388
-  data.tar.gz: 2194c26064a82df51f6743ec568b9ec529b858b93be8814052ca29a469eedb1f
+  metadata.gz: aa55127ee135d7ce475aacb7252c07e70cbfa8a42a6a3bc9f90ef2883db26a48
+  data.tar.gz: ff2ff2c3f8ae6e139e85db788edf8abbb95a19956f98ae5f525d98119fe23f27
 SHA512:
-  metadata.gz: 88df0e5755614f0b06dcb03842dbc6d881ba5cdb596ac34f88b3479e28620897529c38cfb34d1cf99fda9feace4afc41fcf5dae8c179fe8eb4b9913cda1b46f4
-  data.tar.gz: 0b299aa41039120ccd1d92ef925a5034756b44b08c54ce07168784a1dfd04fa9abb3c495bab2208bc723a12dd1517af194314b67c5f21c2ad507ed3d1a823df9
+  metadata.gz: 011b9b6c956e3b4001ddcfdc168217c0bde7aeabd1bc76f5d0a95d56c4222c466edf8e87f6f81e05cb4013cf3133e7fc4881b3cf16134a15b9bc29080eb7472d
+  data.tar.gz: bb0fdac41d8ac5c8543e89bf4ae74125ec9cf443bf5782a31107089253312825da84c532df25edfb0967637147809962fdcfd8a6f92a11b55e165289354e58c4

data/.circleci/config.yml

@@ -15,13 +15,10 @@ jobs:
       - checkout
       - run:
           name: Configuring Bundler
-          command: |
-            echo 'export BUNDLER_VERSION=$(tail -1 Gemfile.lock | xargs)' >> $BASH_ENV
-            source $BASH_ENV
-            gem install bundler -v $BUNDLER_VERSION
+          command: gem install bundler
       - restore_cache:
           keys:
-            - v1-dependencies-{{ arch }}-{{ checksum "Gemfile.lock" }}
+            - v1-dependencies-{{ arch }}-{{ checksum "danger-brakeman_scanner.gemspec" }}
             # fallback to using the latest cache if no exact match is found
             - v1-dependencies-{{ arch }}-
       - run:
@@ -29,7 +26,7 @@ jobs:
           command: |
             bundle check || bundle install --jobs=4 --retry=3
       - save_cache:
-          key: v1-dependencies-{{ arch }}-{{ checksum "Gemfile.lock" }}
+          key: v1-dependencies-{{ arch }}-{{ checksum "danger-brakeman_scanner.gemspec" }}
           paths:
             - vendor/bundle
 

data/.gitignore

@@ -7,6 +7,10 @@
 /pkg/
 /spec/reports/
 /tmp/
+/*.gem
+
+# A gem should base itself on the .gemspec file only.
+/Gemfile.lock
 
 # rspec failure tracking
 .rspec_status

data/README.md

@@ -1,4 +1,4 @@
-# Danger Brakeman Plugin [![CircleCI](https://circleci.com/gh/klaxit/danger-brakeman_scanner.svg?style=svg)](https://circleci.com/gh/klaxit/danger-brakeman_scanner)
+# Danger Brakeman Plugin [![CircleCI](https://circleci.com/gh/klaxit/danger-brakeman_scanner.svg?style=shield)](https://circleci.com/gh/klaxit/danger-brakeman_scanner) [![Gem Version](https://badge.fury.io/rb/danger-brakeman_scanner.svg)](https://badge.fury.io/rb/danger-brakeman_scanner)
 
 A [Danger] plugin for [Brakeman] security static analysis.
 

data/lib/danger_plugin.rb

@@ -4,11 +4,11 @@
 #
 # @example Run with default configuration in application directory
 #
-#   brakeman.run
+#   brakeman_scanner.run
 #
 # @see https://github.com/presidentbeef/brakeman
 # @tags brakeman, security, ruby
-class Danger::DangerBrakeman < Danger::Plugin
+class Danger::DangerBrakemanScanner < Danger::Plugin
   require "brakeman"
 
   # Run a Brakeman scan over current application.
@@ -17,7 +17,15 @@ class Danger::DangerBrakeman < Danger::Plugin
   # @return [void]
   def run(options = File.dirname(Kernel.caller_locations.first.absolute_path))
     tracker = Brakeman.run(options)
-    return if tracker.warnings.empty? && tracker.errors.empty?
+
+    warnings = if tracker.ignored_filter
+                 tracker.warnings.select do |warning|
+                   !tracker.ignored_filter.ignored_warnings.include?(warning)
+                 end
+               else
+                 tracker.warnings
+               end
+    return if warnings.empty? && tracker.errors.empty?
 
     markdown tracker.report.to_markdown
     failure "Brakeman static analysis detected issues in the code. " \
@@ -25,3 +33,11 @@ class Danger::DangerBrakeman < Danger::Plugin
             "(https://brakemanscanner.org/docs/ignoring_false_positives/)."
   end
 end
+
+# (see Danger::DangerBrakemanScanner)
+#
+# @example Use the alias for conveniance
+#
+#   brakeman.run
+#
+class Danger::DangerBrakeman < Danger::DangerBrakemanScanner; end

data/lib/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module DangerBrakemanScanner
-  VERSION = "0.1.0-preview"
+  VERSION = "0.1.0-preview2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: danger-brakeman_scanner
 version: !ruby/object:Gem::Version
-  version: 0.1.0.pre.preview
+  version: 0.1.0.pre.preview2
 platform: ruby
 authors:
 - Ulysse Buonomo
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-03-26 00:00:00.000000000 Z
+date: 2020-04-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: brakeman
@@ -108,7 +108,6 @@ files:
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
-- Gemfile.lock
 - LICENSE
 - Makefile
 - README.md

data/Gemfile.lock

@@ -1,109 +0,0 @@
-PATH
-  remote: .
-  specs:
-    danger-brakeman_scanner (0.1.0.pre.preview)
-      brakeman
-      danger
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    addressable (2.7.0)
-      public_suffix (>= 2.0.2, < 5.0)
-    ast (2.4.0)
-    brakeman (4.8.0)
-    claide (1.0.3)
-    claide-plugins (0.9.2)
-      cork
-      nap
-      open4 (~> 1.3)
-    coderay (1.1.2)
-    colored2 (3.1.2)
-    cork (0.3.0)
-      colored2 (~> 3.1)
-    danger (6.3.1)
-      claide (~> 1.0)
-      claide-plugins (>= 0.9.2)
-      colored2 (~> 3.1)
-      cork (~> 0.1)
-      faraday (~> 0.9)
-      faraday-http-cache (~> 2.0)
-      git (~> 1.6)
-      kramdown (~> 2.0)
-      kramdown-parser-gfm (~> 1.0)
-      no_proxy_fix
-      octokit (~> 4.7)
-      terminal-table (~> 1)
-    diff-lcs (1.3)
-    faraday (0.17.3)
-      multipart-post (>= 1.2, < 3)
-    faraday-http-cache (2.0.0)
-      faraday (~> 0.8)
-    git (1.6.0)
-      rchardet (~> 1.8)
-    jaro_winkler (1.5.4)
-    kramdown (2.1.0)
-    kramdown-parser-gfm (1.1.0)
-      kramdown (~> 2.0)
-    method_source (1.0.0)
-    multipart-post (2.1.1)
-    nap (1.1.0)
-    no_proxy_fix (0.1.2)
-    octokit (4.18.0)
-      faraday (>= 0.9)
-      sawyer (~> 0.8.0, >= 0.5.3)
-    open4 (1.3.4)
-    parallel (1.19.1)
-    parser (2.7.0.5)
-      ast (~> 2.4.0)
-    pry (0.13.0)
-      coderay (~> 1.1)
-      method_source (~> 1.0)
-    public_suffix (4.0.3)
-    rainbow (3.0.0)
-    rake (12.3.3)
-    rchardet (1.8.0)
-    rexml (3.2.4)
-    rspec (3.9.0)
-      rspec-core (~> 3.9.0)
-      rspec-expectations (~> 3.9.0)
-      rspec-mocks (~> 3.9.0)
-    rspec-core (3.9.1)
-      rspec-support (~> 3.9.1)
-    rspec-expectations (3.9.1)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-mocks (3.9.1)
-      diff-lcs (>= 1.2.0, < 2.0)
-      rspec-support (~> 3.9.0)
-    rspec-support (3.9.2)
-    rubocop (0.79.0)
-      jaro_winkler (~> 1.5.1)
-      parallel (~> 1.10)
-      parser (>= 2.7.0.1)
-      rainbow (>= 2.2.2, < 4.0)
-      rexml
-      ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 1.7)
-    ruby-progressbar (1.10.1)
-    sawyer (0.8.2)
-      addressable (>= 2.3.5)
-      faraday (> 0.8, < 2.0)
-    terminal-table (1.8.0)
-      unicode-display_width (~> 1.1, >= 1.1.1)
-    unicode-display_width (1.6.1)
-    yard (0.9.24)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  danger-brakeman_scanner!
-  pry
-  rake (~> 12.0)
-  rspec (~> 3.0)
-  rubocop
-  yard
-
-BUNDLED WITH
-   2.1.4