datadog 2.8.0 → 2.39.0

data/ext/datadog_profiling_loader/datadog_profiling_loader.c

@@ -1,142 +0,0 @@
-#include <stdbool.h>
-#include <dlfcn.h>
-#include <ruby.h>
-
-// Why this exists:
-//
-// The Datadog::Profiling::Loader exists because when Ruby loads a native extension (using `require`), it uses
-// `dlopen(..., RTLD_LAZY | RTLD_GLOBAL)` (https://github.com/ruby/ruby/blob/67950a4c0a884bdb78d9beb4405ebf7459229b21/dln.c#L362).
-// This means that every symbol exposed directly or indirectly by that native extension becomes visible to every other
-// extension in the Ruby process. This can cause issues, see https://github.com/rubyjs/mini_racer/pull/179.
-//
-// Instead of `RTLD_LAZY | RTLD_GLOBAL`, we want to call `dlopen` with `RTLD_LAZY | RTLD_LOCAL | RTLD_DEEPBIND` when
-// loading the profiling native extension, to avoid leaking any unintended symbols (`RTLD_LOCAL`) and avoid picking
-// up other's symbols (`RTLD_DEEPBIND`).
-//
-// But Ruby's extension loading mechanism is not configurable -- there's no way to tell it to use different flags when
-// calling `dlopen`. To get around this, this file (datadog_profiling_loader.c) introduces another extension
-// (profiling loader) which has only a single responsibility: mimic Ruby's extension loading mechanism, but when calling
-// `dlopen` use a different set of flags.
-// This idea was shamelessly stolen from @lloeki's work in https://github.com/rubyjs/mini_racer/pull/179, big thanks!
-//
-// Extra note: Currently (May 2022), that we know of, the profiling native extension only exposes one potentially
-// problematic symbol: `rust_eh_personality` (coming from libdatadog).
-// Future versions of Rust have been patched not to expose this
-// (see https://github.com/rust-lang/rust/pull/95604#issuecomment-1108563434) so we may want to revisit the need
-// for this loader in the future, and perhaps delete it if we no longer require its services :)
-
-#ifndef RTLD_DEEPBIND
-  #define RTLD_DEEPBIND 0
-#endif
-
-// Used to mark function arguments that are deliberately left unused
-#ifdef __GNUC__
-  #define DDTRACE_UNUSED  __attribute__((unused))
-#else
-  #define DDTRACE_UNUSED
-#endif
-
-static VALUE ok_symbol = Qnil; // :ok in Ruby
-static VALUE error_symbol = Qnil; // :error in Ruby
-
-static VALUE _native_load(DDTRACE_UNUSED VALUE self, VALUE ruby_path, VALUE ruby_init_name);
-static bool failed_to_load(void *handle, VALUE *failure_details);
-static bool incompatible_library(void *handle, VALUE *failure_details);
-static bool failed_to_initialize(void *handle, char *init_name, VALUE *failure_details);
-static void set_failure_from_dlerror(VALUE *failure_details);
-static void unload_failed_library(void *handle);
-
-#define DDTRACE_EXPORT __attribute__ ((visibility ("default")))
-
-void DDTRACE_EXPORT Init_datadog_profiling_loader(void) {
-  VALUE datadog_module = rb_define_module("Datadog");
-  VALUE profiling_module = rb_define_module_under(datadog_module, "Profiling");
-  VALUE loader_module = rb_define_module_under(profiling_module, "Loader");
-  rb_define_singleton_method(loader_module, "_native_load", _native_load, 2);
-
-  ok_symbol = ID2SYM(rb_intern_const("ok"));
-  error_symbol = ID2SYM(rb_intern_const("error"));
-}
-
-static VALUE _native_load(DDTRACE_UNUSED VALUE self, VALUE ruby_path, VALUE ruby_init_name) {
-  Check_Type(ruby_path, T_STRING);
-  Check_Type(ruby_init_name, T_STRING);
-
-  char *path = StringValueCStr(ruby_path);
-  char *init_name = StringValueCStr(ruby_init_name);
-
-  int dlopen_flags = RTLD_LAZY | RTLD_LOCAL | RTLD_DEEPBIND;
-
-  #if defined(__has_feature)
-    #if __has_feature(address_sanitizer)
-      dlopen_flags &= ~RTLD_DEEPBIND; // Not supported by ASAN
-    #endif
-  #endif
-
-  void *handle = dlopen(path, dlopen_flags);
-
-  VALUE failure_details = Qnil;
-
-  if (
-    failed_to_load(handle, &failure_details) ||
-    incompatible_library(handle, &failure_details) ||
-    failed_to_initialize(handle, init_name, &failure_details)
-  ) {
-    return rb_ary_new_from_args(2, error_symbol, failure_details);
-  }
-
-  return rb_ary_new_from_args(2, ok_symbol, Qnil);
-}
-
-static bool failed_to_load(void *handle, VALUE *failure_details) {
-  if (handle == NULL) {
-    set_failure_from_dlerror(failure_details);
-    return true;
-  } else {
-    return false;
-  }
-}
-
-static bool incompatible_library(void *handle, VALUE *failure_details) {
-  // The library being loaded may be linked to a different libruby than the current executing Ruby.
-  // We check if this is the case by checking if a well-known symbol resolves to a common address.
-
-  void *xmalloc_from_library = dlsym(handle, "ruby_xmalloc");
-
-  if (xmalloc_from_library == NULL) {
-    // This happens when ruby is built without a `libruby.so` by using `--disable-shared` at compilation time.
-    // In this situation, no conflict between libruby version is possible.
-    return false;
-  }
-
-  if (xmalloc_from_library != &ruby_xmalloc) {
-    *failure_details = rb_str_new_cstr("library was compiled and linked to a different Ruby version");
-    unload_failed_library(handle);
-    return true;
-  } else {
-    return false;
-  }
-}
-
-static bool failed_to_initialize(void *handle, char *init_name, VALUE *failure_details) {
-  void (*initialization_function)(void) = dlsym(handle, init_name);
-
-  if (initialization_function == NULL) {
-    set_failure_from_dlerror(failure_details);
-    unload_failed_library(handle);
-    return true;
-  } else {
-    (*initialization_function)();
-    return false;
-  }
-}
-
-static void set_failure_from_dlerror(VALUE *failure_details) {
-  char *failure = dlerror();
-  *failure_details = failure == NULL ? Qnil : rb_str_new_cstr(failure);
-}
-
-static void unload_failed_library(void *handle) {
-  // Note: According to the Ruby VM sources, this may fail with a segfault on really old versions of macOS (< 10.11)
-  dlclose(handle);
-}

data/ext/datadog_profiling_loader/extconf.rb

@@ -1,60 +0,0 @@
-# rubocop:disable Style/StderrPuts
-
-if RUBY_ENGINE != "ruby" || Gem.win_platform?
-  $stderr.puts(
-    "WARN: Skipping build of Datadog profiling loader. See Datadog profiling native extension note for details."
-  )
-
-  File.write("Makefile", "all install clean: # dummy makefile that does nothing")
-  exit
-end
-
-require "mkmf"
-
-# Because we can't control what compiler versions our customers use, shipping with -Werror by default is a no-go.
-# But we can enable it in CI, so that we quickly spot any new warnings that just got introduced.
-append_cflags "-Werror" if ENV["DATADOG_GEM_CI"] == "true"
-
-# Older gcc releases may not default to C99 and we need to ask for this. This is also used:
-# * by upstream Ruby -- search for gnu99 in the codebase
-# * by msgpack, another datadog gem dependency
-#   (https://github.com/msgpack/msgpack-ruby/blob/18ce08f6d612fe973843c366ac9a0b74c4e50599/ext/msgpack/extconf.rb#L8)
-append_cflags "-std=gnu99"
-
-# Gets really noisy when we include the MJIT header, let's omit it (TODO: Use #pragma GCC diagnostic instead?)
-append_cflags "-Wno-unused-function"
-
-# Allow defining variables at any point in a function
-append_cflags "-Wno-declaration-after-statement"
-
-# If we forget to include a Ruby header, the function call may still appear to work, but then
-# cause a segfault later. Let's ensure that never happens.
-append_cflags "-Werror-implicit-function-declaration"
-
-# Warn on unused parameters to functions. Use `DDTRACE_UNUSED` to mark things as known-to-not-be-used.
-append_cflags "-Wunused-parameter"
-
-# The native extension is not intended to expose any symbols/functions for other native libraries to use;
-# the sole exception being `Init_datadog_profiling_loader` which needs to be visible for Ruby to call it when
-# it `dlopen`s the library.
-#
-# By setting this compiler flag, we tell it to assume that everything is private unless explicitly stated.
-# For more details see https://gcc.gnu.org/wiki/Visibility
-append_cflags "-fvisibility=hidden"
-
-# Avoid legacy C definitions
-append_cflags "-Wold-style-definition"
-
-# Enable all other compiler warnings
-append_cflags "-Wall"
-append_cflags "-Wextra"
-
-# Tag the native extension library with the Ruby version and Ruby platform.
-# This makes it easier for development (avoids "oops I forgot to rebuild when I switched my Ruby") and ensures that
-# the wrong library is never loaded.
-# When requiring, we need to use the exact same string, including the version and the platform.
-EXTENSION_NAME = "datadog_profiling_loader.#{RUBY_VERSION}_#{RUBY_PLATFORM}".freeze
-
-create_makefile(EXTENSION_NAME)
-
-# rubocop:enable Style/StderrPuts

data/ext/datadog_profiling_native_extension/clock_id_noop.c

@@ -1,21 +0,0 @@
-#include "extconf.h"
-
-// This file is the dual of clock_id_from_pthread.c for systems where that info
-// is not available.
-#ifndef HAVE_PTHREAD_GETCPUCLOCKID
-
-#include "clock_id.h"
-#include "helpers.h"
-#include "datadog_ruby_common.h"
-
-void self_test_clock_id(void) { } // Nothing to check
-
-thread_cpu_time_id thread_cpu_time_id_for(DDTRACE_UNUSED VALUE _thread) {
-  return (thread_cpu_time_id) {.valid = false};
-}
-
-thread_cpu_time thread_cpu_time_for(DDTRACE_UNUSED thread_cpu_time_id _time_id) {
-  return (thread_cpu_time) {.valid = false};
-}
-
-#endif

data/ext/libdatadog_api/macos_development.md

@@ -1,26 +0,0 @@
-# Developing on macOS
-
-As of this writing (August 2024), the libdatadog builds on rubygems.org only support Linux.
-
-We don't officially support using libdatadog for Ruby on other platforms yet, but it is possible to use it for local development on macOS.
-(**Note that you don't need these instructions if you develop inside docker.**)
-
-Here's how you can do so:
-
-1. [Install rust](https://www.rust-lang.org/tools/install)
-2. Install `cbindgen`: `cargo install cbindgen`
-3. Clone [libdatadog](https://github.com/datadog/libdatadog)
-4. Create a folder for building into based on your ruby platform:
-
-```
-export DD_RUBY_PLATFORM=`ruby -e 'puts Gem::Platform.local.to_s'`
-mkdir -p my-libdatadog-build/$DD_RUBY_PLATFORM
-```
-
-5. Build libdatadog into this folder: `./build-profiling-ffi.sh my-libdatadog-build/$DD_RUBY_PLATFORM`
-6. Tell the Ruby where to find libdatadog: `export LIBDATADOG_VENDOR_OVERRIDE=/full/path/to/my-libdatadog-build/` (Notice no platform here)
-7. Run `bundle exec rake clean compile`
-
-If you additionally want to run the profiler test suite, also remember to `export DD_PROFILING_MACOS_TESTING=true` and re-run `rake clean compile`.
-
-These instructions can quickly get outdated, so feel free to open an issue if they're not working (and/or ping @ivoanjo).

data/lib/datadog/appsec/assets/waf_rules/processors.json

@@ -1,92 +0,0 @@
-[
-  {
-    "id": "processor-001",
-    "generator": "extract_schema",
-    "conditions": [
-      {
-        "operator": "equals",
-        "parameters": {
-          "inputs": [
-            {
-              "address": "waf.context.processor",
-              "key_path": [
-                "extract-schema"
-              ]
-            }
-          ],
-          "type": "boolean",
-          "value": true
-        }
-      }
-    ],
-    "parameters": {
-      "mappings": [
-        {
-          "inputs": [
-            {
-              "address": "server.request.body"
-            }
-          ],
-          "output": "_dd.appsec.s.req.body"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.req.headers"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.query"
-            }
-          ],
-          "output": "_dd.appsec.s.req.query"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.path_params"
-            }
-          ],
-          "output": "_dd.appsec.s.req.params"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.request.cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.req.cookies"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.response.headers.no_cookies"
-            }
-          ],
-          "output": "_dd.appsec.s.res.headers"
-        },
-        {
-          "inputs": [
-            {
-              "address": "server.response.body"
-            }
-          ],
-          "output": "_dd.appsec.s.res.body"
-        }
-      ],
-      "scanners": [
-        {
-          "tags": {
-            "category": "pii"
-          }
-        }
-      ]
-    },
-    "evaluate": false,
-    "output": true
-  }
-]

data/lib/datadog/appsec/assets/waf_rules/scanners.json

@@ -1,114 +0,0 @@
-[
-  {
-    "id": "d962f7ddb3f55041e39195a60ff79d4814a7c331",
-    "name": "US Passport Scanner",
-    "key": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "passport",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 8
-        }
-      }
-    },
-    "value": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "\\b[0-9A-Z]{9}\\b|\\b[0-9]{6}[A-Z][0-9]{2}\\b",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 8
-        }
-      }
-    },
-    "tags": {
-      "type": "passport_number",
-      "category": "pii"
-    }
-  },
-  {
-    "id": "ac6d683cbac77f6e399a14990793dd8fd0fca333",
-    "name": "US Vehicle Identification Number Scanner",
-    "key": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "vehicle[_\\s-]*identification[_\\s-]*number|vin",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 3
-        }
-      }
-    },
-    "value": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "\\b[A-HJ-NPR-Z0-9]{17}\\b",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 17
-        }
-      }
-    },
-    "tags": {
-      "type": "vin",
-      "category": "pii"
-    }
-  },
-  {
-    "id": "de0899e0cbaaa812bb624cf04c912071012f616d",
-    "name": "UK National Insurance Number Scanner",
-    "key": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "national[\\s_]?(?:insurance(?:\\s+number)?)?|NIN|NI[\\s_]?number|insurance[\\s_]?number",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 3
-        }
-      }
-    },
-    "value": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "\\b[A-Z]{2}\\d{6}[A-Z]?\\b",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 8
-        }
-      }
-    },
-    "tags": {
-      "type": "uk_nin",
-      "category": "pii"
-    }
-  },
-  {
-    "id": "450239afc250a19799b6c03dc0e16fd6a4b2a1af",
-    "name": "Canadian Social Insurance Number Scanner",
-    "key": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "social[\\s_]?(?:insurance(?:\\s+number)?)?|SIN|Canadian[\\s_]?(?:social[\\s_]?(?:insurance)?|insurance[\\s_]?number)?",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 3
-        }
-      }
-    },
-    "value": {
-      "operator": "match_regex",
-      "parameters": {
-        "regex": "\\b\\d{3}-\\d{3}-\\d{3}\\b",
-        "options": {
-          "case_sensitive": false,
-          "min_length": 11
-        }
-      }
-    },
-    "tags": {
-      "type": "canadian_sin",
-      "category": "pii"
-    }
-  }
-]

data/lib/datadog/appsec/configuration/settings.rb

@@ -1,215 +0,0 @@
-# frozen_string_literal: true
-
-require_relative '../../core/utils/duration'
-require_relative '../sample_rate'
-
-module Datadog
-  module AppSec
-    module Configuration
-      # Settings
-      module Settings
-        # rubocop:disable Layout/LineLength
-        DEFAULT_OBFUSCATOR_KEY_REGEX = '(?i)pass|pw(?:or)?d|secret|(?:api|private|public|access)[_-]?key|token|consumer[_-]?(?:id|key|secret)|sign(?:ed|ature)|bearer|authorization|jsessionid|phpsessid|asp\.net[_-]sessionid|sid|jwt'
-        DEFAULT_OBFUSCATOR_VALUE_REGEX = '(?i)(?:p(?:ass)?w(?:or)?d|pass(?:[_-]?phrase)?|secret(?:[_-]?key)?|(?:(?:api|private|public|access)[_-]?)key(?:[_-]?id)?|(?:(?:auth|access|id|refresh)[_-]?)?token|consumer[_-]?(?:id|key|secret)|sign(?:ed|ature)?|auth(?:entication|orization)?|jsessionid|phpsessid|asp\.net(?:[_-]|-)sessionid|sid|jwt)(?:\s*=[^;]|"\s*:\s*"[^"]+")|bearer\s+[a-z0-9\._\-]+|token:[a-z0-9]{13}|gh[opsu]_[0-9a-zA-Z]{36}|ey[I-L][\w=-]+\.ey[I-L][\w=-]+(?:\.[\w.+\/=-]+)?|[\-]{5}BEGIN[a-z\s]+PRIVATE\sKEY[\-]{5}[^\-]+[\-]{5}END[a-z\s]+PRIVATE\sKEY|ssh-rsa\s*[a-z0-9\/\.+]{100,}'
-        # rubocop:enable Layout/LineLength
-        APPSEC_VALID_TRACK_USER_EVENTS_MODE = [
-          'safe',
-          'extended'
-        ].freeze
-        APPSEC_VALID_TRACK_USER_EVENTS_ENABLED_VALUES = [
-          '1',
-          'true'
-        ].concat(APPSEC_VALID_TRACK_USER_EVENTS_MODE).freeze
-
-        def self.extended(base)
-          base = base.singleton_class unless base.is_a?(Class)
-          add_settings!(base)
-        end
-
-        # rubocop:disable Metrics/AbcSize,Metrics/MethodLength,Metrics/BlockLength,Metrics/CyclomaticComplexity,Metrics/PerceivedComplexity
-        def self.add_settings!(base)
-          base.class_eval do
-            settings :appsec do
-              option :enabled do |o|
-                o.type :bool
-                o.env 'DD_APPSEC_ENABLED'
-                o.default false
-              end
-
-              define_method(:instrument) do |integration_name|
-                if enabled
-                  registered_integration = Datadog::AppSec::Contrib::Integration.registry[integration_name]
-                  if registered_integration
-                    klass = registered_integration.klass
-                    if klass.loaded? && klass.compatible?
-                      instance = klass.new
-                      instance.patcher.patch unless instance.patcher.patched?
-                    end
-                  end
-                end
-              end
-
-              option :ruleset do |o|
-                o.env 'DD_APPSEC_RULES'
-                o.default :recommended
-              end
-
-              option :ip_passlist do |o|
-                o.default []
-              end
-
-              option :ip_denylist do |o|
-                o.type :array
-                o.default []
-              end
-
-              option :user_id_denylist do |o|
-                o.type :array
-                o.default []
-              end
-
-              option :waf_timeout do |o|
-                o.env 'DD_APPSEC_WAF_TIMEOUT' # us
-                o.default 5_000
-                o.setter do |v|
-                  Datadog::Core::Utils::Duration.call(v.to_s, base: :us)
-                end
-              end
-
-              option :waf_debug do |o|
-                o.env 'DD_APPSEC_WAF_DEBUG'
-                o.default false
-                o.type :bool
-              end
-
-              option :trace_rate_limit do |o|
-                o.type :int
-                o.env 'DD_APPSEC_TRACE_RATE_LIMIT' # trace/s
-                o.default 100
-              end
-
-              option :obfuscator_key_regex do |o|
-                o.type :string
-                o.env 'DD_APPSEC_OBFUSCATION_PARAMETER_KEY_REGEXP'
-                o.default DEFAULT_OBFUSCATOR_KEY_REGEX
-              end
-
-              option :obfuscator_value_regex do |o|
-                o.type :string
-                o.env 'DD_APPSEC_OBFUSCATION_PARAMETER_VALUE_REGEXP'
-                o.default DEFAULT_OBFUSCATOR_VALUE_REGEX
-              end
-
-              settings :block do
-                settings :templates do
-                  option :html do |o|
-                    o.env 'DD_APPSEC_HTTP_BLOCKED_TEMPLATE_HTML'
-                    o.type :string, nilable: true
-                    o.setter do |value|
-                      if value
-                        raise(ArgumentError, "appsec.templates.html: file not found: #{value}") unless File.exist?(value)
-
-                        File.open(value, 'rb', &:read) || ''
-                      end
-                    end
-                  end
-
-                  option :json do |o|
-                    o.env 'DD_APPSEC_HTTP_BLOCKED_TEMPLATE_JSON'
-                    o.type :string, nilable: true
-                    o.setter do |value|
-                      if value
-                        raise(ArgumentError, "appsec.templates.json: file not found: #{value}") unless File.exist?(value)
-
-                        File.open(value, 'rb', &:read) || ''
-                      end
-                    end
-                  end
-
-                  option :text do |o|
-                    o.env 'DD_APPSEC_HTTP_BLOCKED_TEMPLATE_TEXT'
-                    o.type :string, nilable: true
-                    o.setter do |value|
-                      if value
-                        raise(ArgumentError, "appsec.templates.text: file not found: #{value}") unless File.exist?(value)
-
-                        File.open(value, 'rb', &:read) || ''
-                      end
-                    end
-                  end
-                end
-              end
-
-              settings :track_user_events do
-                option :enabled do |o|
-                  o.default true
-                  o.type :bool
-                  o.env 'DD_APPSEC_AUTOMATED_USER_EVENTS_TRACKING'
-                  o.env_parser do |env_value|
-                    if env_value == 'disabled'
-                      false
-                    else
-                      APPSEC_VALID_TRACK_USER_EVENTS_ENABLED_VALUES.include?(env_value.strip.downcase)
-                    end
-                  end
-                end
-
-                option :mode do |o|
-                  o.type :string
-                  o.env 'DD_APPSEC_AUTOMATED_USER_EVENTS_TRACKING'
-                  o.default 'safe'
-                  o.setter do |v|
-                    if APPSEC_VALID_TRACK_USER_EVENTS_MODE.include?(v)
-                      v
-                    elsif v == 'disabled'
-                      'safe'
-                    else
-                      Datadog.logger.warn(
-                        'The appsec.track_user_events.mode value provided is not supported.' \
-                        'Supported values are: safe | extended.' \
-                        'Using default value `safe`'
-                      )
-                      'safe'
-                    end
-                  end
-                end
-              end
-
-              settings :api_security do
-                option :enabled do |o|
-                  o.type :bool
-                  o.env 'DD_EXPERIMENTAL_API_SECURITY_ENABLED'
-                  o.default false
-                end
-
-                option :sample_rate do |o|
-                  o.type :float
-                  o.env 'DD_API_SECURITY_REQUEST_SAMPLE_RATE'
-                  o.default 0.1
-                  o.setter do |value|
-                    value = 1 if value > 1
-                    SampleRate.new(value)
-                  end
-                end
-              end
-
-              option :sca_enabled do |o|
-                o.type :bool, nilable: true
-                o.env 'DD_APPSEC_SCA_ENABLED'
-              end
-
-              settings :standalone do
-                option :enabled do |o|
-                  o.type :bool
-                  o.env 'DD_EXPERIMENTAL_APPSEC_STANDALONE_ENABLED'
-                  o.default false
-                end
-              end
-            end
-          end
-        end
-        # rubocop:enable Metrics/AbcSize,Metrics/MethodLength,Metrics/BlockLength,Metrics/CyclomaticComplexity,Metrics/PerceivedComplexity
-      end
-    end
-  end
-end