dependabot-helm 0.380.0 → 0.381.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/helm/helpers.rb +22 -8
  3. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fe0ff44b0fcd408ac0b137fee40a8970e2b15bdf3e5042dfaf58a672ab63fc3e
4
- data.tar.gz: c8553063aabb31d0cc3984153b9df8c6637406d1ed05b0cc6d7f8adf646bb74f
3
+ metadata.gz: e201dbffe4f2e88505b72865d84dfb0a6df12c334ee483719e08ec0c30bab683
4
+ data.tar.gz: b521f4f22a83d634329a9b13f775926c3805f95bd5dae19ad49e836153fbf208
5
5
  SHA512:
6
- metadata.gz: 6a1164f59c8f105ee91e50d3942bc4d7d39e6a36e11c3d42e8190d1b79f660fb9a362f40a4d1b7d1d52d95fb4a934fe37d59d0c59f336e3a73478b0504190b07
7
- data.tar.gz: ac49c79bb245e4986f46ad6f9f926f722b47086e44204e5f8086f9bec45ded5d76b538ed6986e90af595dc6c6d8f1f6680b0ec6f66f64ad2d02cc5a6a73b39a2
6
+ metadata.gz: 39cd5b3bddbcc390ed45c30a08630bd864d9c7acd445e365a2e4e9de6892ee1ce3d593c8cf3d0e955416a444ea79bdbd9ed1b7e010f1b11b2176dae7b7f8e75d
7
+ data.tar.gz: d1fcc7c8a16add01938106939272e007aa7cb8a0d991f11c066037091a5b74fd3e3984f59517679826a2a4c8f27e9eae4b7033672b26d3146ec45fc102894a27
data/lib/dependabot/helm/helpers.rb CHANGED
@@ -14,21 +14,24 @@ module Dependabot
14
14
 
15
15
  sig { params(name: String).returns(String) }
16
16
  def self.search_releases(name)
17
+ validate_cli_arg!("name", name)
17
18
  Dependabot.logger.info("Searching Helm repository for: #{name}")
18
19
 
19
20
  Dependabot::SharedHelpers.run_shell_command(
20
- "helm search repo #{name} --versions --output=json",
21
- fingerprint: "helm search repo <name> --versions --output=json"
21
+ "helm search repo --versions --output=json -- #{name}",
22
+ fingerprint: "helm search repo --versions --output=json -- <name>"
22
23
  ).strip
23
24
  end
24
25
 
25
26
  sig { params(repo_name: String, repository_url: String).returns(String) }
26
27
  def self.add_repo(repo_name, repository_url)
28
+ validate_cli_arg!("repo_name", repo_name)
29
+ validate_cli_arg!("repository_url", repository_url)
27
30
  Dependabot.logger.info("Adding Helm repository: #{repo_name} (#{repository_url})")
28
31
 
29
32
  Dependabot::SharedHelpers.run_shell_command(
30
- "helm repo add #{repo_name} #{repository_url}",
31
- fingerprint: "helm repo add <repo_name> <repository_url>"
33
+ "helm repo add -- #{repo_name} #{repository_url}",
34
+ fingerprint: "helm repo add -- <repo_name> <repository_url>"
32
35
  )
33
36
  end
34
37
 
@@ -54,21 +57,32 @@ module Dependabot
54
57
 
55
58
  sig { params(name: String).returns(String) }
56
59
  def self.fetch_oci_tags(name)
60
+ validate_cli_arg!("name", name)
57
61
  Dependabot.logger.info("Searching OCI tags for: #{name}")
58
62
 
59
63
  Dependabot::SharedHelpers.run_shell_command(
60
- "oras repo tags #{name}",
61
- fingerprint: "oras repo tags <name>"
64
+ "oras repo tags -- #{name}",
65
+ fingerprint: "oras repo tags -- <name>"
62
66
  ).strip
63
67
  end
64
68
 
65
69
  sig { params(repo_url: String, tag: String).returns(String) }
66
70
  def self.fetch_tags_with_release_date_using_oci(repo_url, tag)
71
+ validate_cli_arg!("repo_url", repo_url)
72
+ validate_cli_arg!("tag", tag)
67
73
  Dependabot::SharedHelpers.run_shell_command(
68
- "oras manifest fetch #{repo_url}:#{tag}",
69
- fingerprint: "oras manifest fetch <repo_url>:<tag>"
74
+ "oras manifest fetch -- #{repo_url}:#{tag}",
75
+ fingerprint: "oras manifest fetch -- <repo_url>:<tag>"
70
76
  ).strip
71
77
  end
78
+
79
+ sig { params(argument_name: String, value: String).void }
80
+ def self.validate_cli_arg!(argument_name, value)
81
+ return unless value.match?(/\s/) || value.start_with?("-")
82
+
83
+ raise ArgumentError, "Invalid #{argument_name}"
84
+ end
85
+ private_class_method :validate_cli_arg!
72
86
  end
73
87
  end
74
88
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-helm
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.380.0
4
+ version: 0.381.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,28 +15,28 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.380.0
18
+ version: 0.381.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.380.0
25
+ version: 0.381.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: dependabot-docker
28
28
  requirement: !ruby/object:Gem::Requirement
29
29
  requirements:
30
30
  - - '='
31
31
  - !ruby/object:Gem::Version
32
- version: 0.380.0
32
+ version: 0.381.0
33
33
  type: :runtime
34
34
  prerelease: false
35
35
  version_requirements: !ruby/object:Gem::Requirement
36
36
  requirements:
37
37
  - - '='
38
38
  - !ruby/object:Gem::Version
39
- version: 0.380.0
39
+ version: 0.381.0
40
40
  - !ruby/object:Gem::Dependency
41
41
  name: debug
42
42
  requirement: !ruby/object:Gem::Requirement
@@ -273,7 +273,7 @@ licenses:
273
273
  - MIT
274
274
  metadata:
275
275
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
276
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.380.0
276
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
277
277
  rdoc_options: []
278
278
  require_paths:
279
279
  - lib