dependagrab 0.1.3 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGE_LOG.md +4 -0
  3. data/Gemfile.lock +4 -4
  4. data/dependagrab.gemspec +1 -1
  5. data/lib/dependagrab/cli.rb +2 -1
  6. data/lib/dependagrab/file_writer.rb +3 -1
  7. data/lib/dependagrab/version.rb +1 -1
  8. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a9cb66b7f184dee69020c416ff1e23c6cbfe1da34449c50e4a4d2cef6092f362
4
- data.tar.gz: 772d441a8b660810529f769b60f3a50b447e0fc7cfa81b02919bd504d5cc9ea4
3
+ metadata.gz: 97c5ed1d93d9ee5cf650113f3702798630a24f54c070982f557ced50efc8c571
4
+ data.tar.gz: 368187d2ca1f4ed0c69d1b4ea861df11f10141f7ddf2cd37407bc7555399174a
5
5
  SHA512:
6
- metadata.gz: aba43cc9560c4545f883498c211e20336f3c5796a0a864d32d7e47bd6bb968f3c2e79b6b221b900836854be51d4495c00b557a9a6d5da15f680260b33fb8f7ee
7
- data.tar.gz: 239fc70026b806d739c24f8050d5eea26678ea25b629530b6e76b77d536ed85d08057b6831df37aefa0374b7109a95f25bc55c57e3222c7f5ec266c9c50880b6
6
+ metadata.gz: bf485732f452a2a4984a41523fac4d60d5ed271bf127d8d49e4ed1b40f547e25566f2eb68de20a52e0f23b042ad4cdb05e47d5516e7d74cdbdb45ea8e790f946
7
+ data.tar.gz: 8a2462a187216622cc0541f18b7ee6ba0bd0c66fcc8bc32c1b05322ea9df27354bc8247892abd4c54f61f79de63c662d614bf24755e0b433aa48162de28995e1
data/CHANGE_LOG.md CHANGED
@@ -1,3 +1,7 @@
1
+ # V0.1.3
2
+ Fix when there is no CWE present
3
+ Improve error logging
4
+
1
5
  # V0.1.3
2
6
  Fix add support for repos names with dots in them.
3
7
 
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- dependagrab (0.1.3)
4
+ dependagrab (0.1.4)
5
5
  graphql-client (= 0.17.0)
6
6
 
7
7
  GEM
@@ -46,14 +46,14 @@ GEM
46
46
  zeitwerk (2.5.1)
47
47
 
48
48
  PLATFORMS
49
- ruby
49
+ x86_64-linux
50
50
 
51
51
  DEPENDENCIES
52
- bundler (~> 1.17)
52
+ bundler (~> 2.2)
53
53
  dependagrab!
54
54
  pry (~> 0.14)
55
55
  rake (~> 10.0)
56
56
  rspec (~> 3.0)
57
57
 
58
58
  BUNDLED WITH
59
- 1.17.2
59
+ 2.2.32
data/dependagrab.gemspec CHANGED
@@ -39,7 +39,7 @@ Gem::Specification.new do |spec|
39
39
  spec.require_paths = ["lib", "static"]
40
40
 
41
41
  spec.add_dependency "graphql-client", "0.17.0"
42
- spec.add_development_dependency "bundler", "~> 1.17"
42
+ spec.add_development_dependency "bundler", "~> 2.2"
43
43
  spec.add_development_dependency "rake", "~> 10.0"
44
44
  spec.add_development_dependency "rspec", "~> 3.0"
45
45
  spec.add_development_dependency "pry", "~> 0.14"
data/lib/dependagrab/cli.rb CHANGED
@@ -56,7 +56,8 @@ module Dependagrab
56
56
  puts "#{result[:alerts].count} dependency warnings written to '#{options.fetch(:output)}'"
57
57
  rescue => e
58
58
  STDERR.puts "Failed to write file '#{options.fetch(:output)}'"
59
- STDERR.puts e.message
59
+ STDERR.puts "#{e.message} (set DEBUG=true for detailed backtrace)"
60
+ STDERR.puts e.backtrace if ENV['DEBUG']
60
61
  exit 1
61
62
  end
62
63
  else
data/lib/dependagrab/file_writer.rb CHANGED
@@ -44,6 +44,8 @@ module Dependagrab
44
44
  # Converts an alert into a ThreadFix finding format
45
45
  #
46
46
  def parse_threadfix_finding(alert)
47
+ cwe = alert[:cwe][4..] if alert[:cwe]
48
+
47
49
  {
48
50
  nativeId: alert[:id],
49
51
  severity: alert[:severity].gsub("MODERATE", "MEDIUM"),
@@ -62,7 +64,7 @@ module Dependagrab
62
64
  mappings: [
63
65
  {
64
66
  mappingType: "CWE",
65
- value: alert[:cwe][4..],
67
+ value: cwe,
66
68
  }
67
69
  ]
68
70
  }
data/lib/dependagrab/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Dependagrab
2
- VERSION = "0.1.3"
2
+ VERSION = "0.1.4"
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependagrab
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.3
4
+ version: 0.1.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dave Elliott
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-12-01 00:00:00.000000000 Z
11
+ date: 2021-12-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: graphql-client
@@ -30,14 +30,14 @@ dependencies:
30
30
  requirements:
31
31
  - - "~>"
32
32
  - !ruby/object:Gem::Version
33
- version: '1.17'
33
+ version: '2.2'
34
34
  type: :development
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - "~>"
39
39
  - !ruby/object:Gem::Version
40
- version: '1.17'
40
+ version: '2.2'
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: rake
43
43
  requirement: !ruby/object:Gem::Requirement
@@ -133,7 +133,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
133
133
  - !ruby/object:Gem::Version
134
134
  version: '0'
135
135
  requirements: []
136
- rubygems_version: 3.0.3
136
+ rubygems_version: 3.2.32
137
137
  signing_key:
138
138
  specification_version: 4
139
139
  summary: Utility for extracting dependency warnings from GitHub