dependabot-terraform 0.378.0 → 0.380.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 82dc5ca53635fe57b1be1093871873b3da6a82e7ac247e8b8a9cf930136ce119
-  data.tar.gz: 5bd513792064de72090022f49e60270fc8bc2b354648bcd2acedf9b1be811c88
+  metadata.gz: a63c9f154ae0ee26e035747e644c7fc02416c08354927708bc9879f8c6767bbc
+  data.tar.gz: 70145b36e1792566bd62c654342ad50023191ad96eda587eab85816e3e36ca0a
 SHA512:
-  metadata.gz: 1cf3f90198c722f49f11a9df1e52da940089378d8936be349bff058a816c8558fe1305da837a411616deac6bdf822bf99a1ff8aafb17ed4a5efb114817107215
-  data.tar.gz: cca7d62ee3906a32ab8dff83a327b51d1152cc8ba8f8b818862ae57cd7aa8bbb2b86be2ccf4b85bbc3299c6fe7eb1601c77fb06bbcd1bf7bb566280a3e4d3793
+  metadata.gz: 46506d23ea7f792af0caedb59a8cf17b1275d83347db354982db7cb27f819cb7b06a1c34535e4725c70b99d2cb32f4bb0787dbcff6968c86085098dfdc71b553
+  data.tar.gz: 6647bbee58a30d77c488f2ea3e6c8d3af947b977c24ee24206eb8daf96050d6af1e81d851e7e0c5df2eea194a6444755fef38eb8163adc58c355ed66b6e6df3c

data/lib/dependabot/terraform/registry_client.rb

@@ -21,6 +21,10 @@ module Dependabot
         T::Array[String]
       )
       PUBLIC_HOSTNAME = "registry.terraform.io"
+      CERTIFICATE_ERROR_KEYWORDS = T.let(
+        %w(certificate SSL x509 verify).freeze,
+        T::Array[String]
+      )
 
       sig { params(hostname: String, credentials: T::Array[Dependabot::Credential]).void }
       def initialize(hostname: PUBLIC_HOSTNAME, credentials: [])
@@ -176,10 +180,14 @@ module Dependabot
         @services ||= T.let(
           begin
             response = http_get(url_for("/.well-known/terraform.json"))
-            if response.status == 200 && !response.body.empty?
-              JSON.parse(response.body)
-            else
+            if response.status == 200
+              response.body.empty? ? {} : JSON.parse(response.body)
+            elsif response.status == 404
               {}
+            elsif response.status == 401
+              raise PrivateSourceAuthenticationFailure, hostname
+            else
+              raise PrivateSourceBadResponse, hostname
             end
           rescue JSON::ParserError => e
             Dependabot.logger.warn("Failed to parse Terraform registry services: #{e.message}")
@@ -207,7 +215,11 @@ module Dependabot
           url: url.to_s,
           headers: headers_for(hostname)
         )
-      rescue Excon::Error::Socket, Excon::Error::Timeout
+      rescue Excon::Error::Socket => e
+        raise PrivateSourceCertificateFailure, hostname if certificate_error?(e.message)
+
+        raise PrivateSourceBadResponse, hostname
+      rescue Excon::Error::Timeout
         raise PrivateSourceBadResponse, hostname
       end
 
@@ -240,6 +252,11 @@ module Dependabot
       def error(message)
         Dependabot::DependabotError.new(message)
       end
+
+      sig { params(message: String).returns(T::Boolean) }
+      def certificate_error?(message)
+        CERTIFICATE_ERROR_KEYWORDS.any? { |keyword| message.include?(keyword) }
+      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-terraform
 version: !ruby/object:Gem::Version
-  version: 0.378.0
+  version: 0.380.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.378.0
+        version: 0.380.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.378.0
+        version: 0.380.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -263,7 +263,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.378.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.380.0
 rdoc_options: []
 require_paths:
 - lib