dawnscanner 2.1.0 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b54d897767ce4e5a5e565205cafb15af72ae9bf92079718dfa416d8fcc4900cb
-  data.tar.gz: 17d4cba48fb33fb04c473b0cb9e9f85c1aa40c84f16a39c1df34332695e0435b
+  metadata.gz: fbb231ba7ae0542ffa5a4df93bf1957ca989e4073129f8c57894b2f6d5813973
+  data.tar.gz: 833442b38e833db16ee550a56e26ce67b69cc77ee4ff2b69389bd1dab7ff16b3
 SHA512:
-  metadata.gz: c689915e7a17e4db223a9ef587a3c70ab1e6f748d54dec0463da7cf728770a77f9a298995959befbe77f322771de1c1eefb5bdd9e6c27352c389e2789d4d05e9
-  data.tar.gz: be77801fb48251c860b2b07341927dbc704eb34f28951f082d0971aa23c96cdf90d70bff219b946e67facea7022948ac9aa3353e0a87a4441ab6f7ea5f7fa19f
+  metadata.gz: 157a7aaf188e55b35027cae52ae7f7a71146d2b490ab5d31b8eaf3dcfc29a10de0dc3ef646e0d9b8f30330ec3b73412df62bdb4467233046b92a98f2ba4bb81a
+  data.tar.gz: 012e8a07b7d8bdde1947b8c0ccd6fee4bd31336c72481934ec74d4f252847fb26a0bcbab60550c2221d9716d2e51bdefeff140425c99a82e7af4df5e15a7b074

data/Changelog.md

@@ -5,7 +5,11 @@ It supports [Sinatra](http://www.sinatrarb.com),
 [Padrino](http://www.padrinorb.com) and [Ruby on Rails](http://rubyonrails.org)
 frameworks.
 
-_latest update: thu 13 apr 2023, 16:54:52, CEST_
+_latest update: fri 14 apr 2023, 16:36:56, CEST_
+
+## Version 2.1.1 (2023-04-14)
+
+* Issue #252 fix was uncomplete.
 
 ## Version 2.1.0 (2023-04-13)
 

data/Rakefile

@@ -160,35 +160,35 @@ namespace :rubysec do
 end
 
 def __kb_pack
-  if Dir.exists? "#{YAML_KB}/bulletin"
+  if Dir.exist? "#{YAML_KB}/bulletin"
     system "tar cfvz #{YAML_KB}/bulletin.tar.gz -C #{YAML_KB} bulletin"
     system "rm -rf #{YAML_KB}/bulletin"
     system "shasum -a 256 #{YAML_KB}/bulletin.tar.gz > #{YAML_KB}/bulletin.tar.gz.sig"
   end
 
-  if Dir.exists? "#{YAML_KB}/generic_check"
+  if Dir.exist? "#{YAML_KB}/generic_check"
     system "tar cfvz #{YAML_KB}/generic_check.tar.gz -C #{YAML_KB} generic_check"
     system "rm -rf #{YAML_KB}/generic_check"
     system "shasum -a 256 #{YAML_KB}/generic_check.tar.gz > #{YAML_KB}/generic_check.tar.gz.sig"
   end
 
-  if Dir.exists? "#{YAML_KB}/owasp_ror_cheatsheet"
+  if Dir.exist? "#{YAML_KB}/owasp_ror_cheatsheet"
     system "tar cfvz #{YAML_KB}/owasp_ror_cheatsheet.tar.gz -C #{YAML_KB} owasp_ror_cheatsheet"
     system "rm -rf #{YAML_KB}/owasp_ror_cheatsheet"
     system "shasum -a 256 #{YAML_KB}/owasp_ror_cheatsheet.tar.gz > #{YAML_KB}/owasp_ror_cheatsheet.tar.gz.sig"
   end
 
-  if Dir.exists? "#{YAML_KB}/code_style"
+  if Dir.exist? "#{YAML_KB}/code_style"
     system "tar cfvz #{YAML_KB}/code_style.tar.gz -C #{YAML_KB} code_style"
     system "rm -rf #{YAML_KB}/code_style"
     system "shasum -a 256 #{YAML_KB}/code_style.tar.gz > #{YAML_KB}/code_style.tar.gz.sig"
   end
-  if Dir.exists? "#{YAML_KB}/code_quality"
+  if Dir.exist? "#{YAML_KB}/code_quality"
     system "tar cfvz #{YAML_KB}/code_quality.tar.gz -C #{YAML_KB} code_quality"
     system "rm -rf #{YAML_KB}/code_quality"
     system "shasum -a 256 #{YAML_KB}/code_quality.tar.gz > #{YAML_KB}/code_quality.tar.gz.sig"
   end
-  if Dir.exists? "#{YAML_KB}/owasp_top_10"
+  if Dir.exist? "#{YAML_KB}/owasp_top_10"
     system "tar cfvz #{YAML_KB}/owasp_top_10.tar.gz -C #{YAML_KB} owasp_top_10"
     system "rm -rf #{YAML_KB}/owasp_top_10"
     system "shasum -a 256 #{YAML_KB}/owasp_top_10.tar.gz > #{YAML_KB}/owasp_top_10.tar.gz.sig"

data/VERSION

@@ -1,3 +1,3 @@
 # I removed codenames :-)
 # Code review is fun
-2.1.0
+2.1.1

data/checksum/dawnscanner-2.1.0.gem.sha1

@@ -0,0 +1 @@
+e463c7c3f54c900752f3b9be47da3f311cddd941

data/features/step_definition/dawn_steps.rb

@@ -1,19 +1,18 @@
 Given /^the generic project "(.*?)" doesn't exist$/ do |file|
-  FileUtils.rm(file) if File.exists?(file)
+  FileUtils.rm(file) if File.exist?(file)
 end
 
 Given /^the hello world rails project does exist$/ do
   system("rm -rf /tmp/hello_world_3.2.13")
-  system("cp -a ./spec/support/hello_world_3.2.13 /tmp") 
+  system("cp -a ./spec/support/hello_world_3.2.13 /tmp")
 end
 
 Given /^a safe sinatra application exists$/ do
   system("rm -rf /tmp/sinatra-safe")
-  system("cp -a ./spec/support/sinatra-safe /tmp") 
+  system("cp -a ./spec/support/sinatra-safe /tmp")
 end
 
 Given /^a vulnerable sinatra application exists$/ do
   system("rm -rf /tmp/sinatra-vulnerable")
-  system("cp -a ./spec/support/sinatra-vulnerable /tmp") 
+  system("cp -a ./spec/support/sinatra-vulnerable /tmp")
 end
-

data/lib/dawn/knowledge_base.rb

@@ -244,7 +244,7 @@ module Dawn
         # Please note that if we enter in this branch, it means someone
         # tampered the KB between the previous __valid? check and this point.
         # Of course this is a very rare situation, but we must handle it.
-        unless Dir.exists?(dir)
+        unless Dir.exist?(dir)
           $logger.warn "Missing check directory #{dir}"
         else
           Dir.glob(dir+"/**/*.yml").each do |f|
@@ -311,12 +311,12 @@ module Dawn
 
       lines = ""
 
-      unless File.exists?(File.join(@path, "kb.yaml"))
+      unless File.exist?(File.join(@path, "kb.yaml"))
         $logger.error  "Missing kb.yaml in #{path}. Giving up"
         return false
       end
 
-      unless File.exists?(File.join(@path, "kb.yaml.sig"))
+      unless File.exist?(File.join(@path, "kb.yaml.sig"))
         $logger.error  "Missing kb.yaml signature in #{path}. Giving up"
         return false
       end
@@ -343,7 +343,7 @@ module Dawn
     # local DB path
     def __packed?
       FILES.each do |fn|
-        return true if fn.end_with? 'tar.gz' and File.exists?(File.join(@path, fn))
+        return true if fn.end_with? 'tar.gz' and File.exist?(File.join(@path, fn))
       end
       return false
     end

data/lib/dawn/version.rb

@@ -1,6 +1,6 @@
 module Dawn
-    VERSION = "2.1.0"
-    RELEASE = "20230413"
-    BUILD = "3"
-    COMMIT = "gc8a1ac6"
+    VERSION = "2.1.1"
+    RELEASE = "20230414"
+    BUILD = "1"
+    COMMIT = "gbb3ea6d"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dawnscanner
 version: !ruby/object:Gem::Version
-  version: 2.1.0
+  version: 2.1.1
 platform: ruby
 authors:
 - Paolo Perego
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-04-13 00:00:00.000000000 Z
+date: 2023-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: cvss
@@ -277,6 +277,7 @@ files:
 - checksum/dawnscanner-2.0.0.rc2.gem.sha1
 - checksum/dawnscanner-2.0.0.rc3.gem.sha1
 - checksum/dawnscanner-2.0.0.rc5.gem.sha1
+- checksum/dawnscanner-2.1.0.gem.sha1
 - code_of_conduct.md
 - dawnscanner.gemspec
 - doc/change.sh