dependagrab 0.1.6 → 0.1.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7e32432885a4421f53fc65a7ffca2b8fef05e8738088b437eb8e9aa9a98d8f0b
-  data.tar.gz: 8cbbc87b9c80d5a81a6f3fe36a9758e57d43e60ac2fb1aecc291ac11b712962a
+  metadata.gz: 5571861c796d4c513f1e881285ae3d4fab353067bbaed3ff29e7b20373073bbb
+  data.tar.gz: 52868e44912d13efcf51b653a93fff2bcbf9f0c57b7e6397b7536f8f4856338f
 SHA512:
-  metadata.gz: b41b50249738a6d4df018e21f4f64c69eb7e1f052be98d5cad399202e66e97a4734db2d3da359f43fe60b058b817b3cbb9c3483efad37ef70d6fc09c697d5b77
-  data.tar.gz: 0ba5284cde0e3291400001ae6137a50529da56ea758b8d309cfc48f6a7b4f6cad713b8f36234113209da5533b9e765e077811bceb83f2b877ba39970cbb9acfc
+  metadata.gz: e9a9a6bafc2df8a2f23cf45b8f3fd9aa7b5e166da1149434fa08b48a0bf9935acff636c15d40496507aa78d13e4538e0e9a4123a23a037bb64994ab9d93c59db
+  data.tar.gz: f9b483d0fcba971dfb2dacc154058d25b07a6e27ddafc31f5731f2baeee1f2d7a41c3be3c7cfec8b225f91dd3b0ad52070c1a742f625f8cefb62586428ace35d

data/CHANGE_LOG.md

@@ -1,3 +1,8 @@
+# V0.1.7
+Refactor to better support integration into other applications
+Change case on source name
+make cvsScore to string
+
 # V0.1.6
 Handle interrupt and exceptions output nicer
 Change source name in json output to dependabot

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    dependagrab (0.1.6)
+    dependagrab (0.1.7)
       graphql-client (= 0.17.0)
 
 GEM

data/bin/dependagrab

@@ -5,7 +5,11 @@ begin
   Dependagrab::CLI.start
 rescue SignalException => e
   # exit
+rescue SystemExit => e
+  # exit
 rescue Exception => e
   STDERR.puts "Error: Something went wrong (set DEBUG=true for detailed backtrace)"
+
+  STDERR.puts e.message if ENV['DEBUG']
   STDERR.puts e.backtrace if ENV['DEBUG']
 end

data/lib/dependagrab/cli.rb

@@ -46,7 +46,8 @@ module Dependagrab
       end
 
       begin
-        run(options)
+        options.merge!(print: true)
+        Dependagrab.run(options)
       rescue => e
         STDERR.puts "Error: #{e.message}  (set DEBUG=true for detailed backtrace)"
         STDERR.puts e.backtrace if ENV['DEBUG']
@@ -56,24 +57,6 @@ module Dependagrab
 
     private
 
-    def self.run(options)
-      result = Dependagrab::GithubClient.new(options).grab
-
-      if options[:output]
-        begin
-          FileWriter.new(options[:output]).write!(result[:alerts])
-          puts "#{result[:alerts].count} dependency warnings written to '#{options.fetch(:output)}'"
-        rescue => e
-          STDERR.puts "Failed to write file '#{options.fetch(:output)}'"
-          STDERR.puts "Error: #{e.message} (set DEBUG=true for detailed backtrace)"
-          STDERR.puts e.backtrace if ENV['DEBUG']
-          exit 1
-        end
-      else
-        ConsoleWriter.new.write!(result[:alerts])
-      end
-    end
-
     def self.print_usage
       puts "Usage: dependagrab <REPO> [Options]"
       puts

data/lib/dependagrab/file_writer.rb

@@ -25,6 +25,8 @@ module Dependagrab
       File.open(output_file, "w") do |f|
         f.write(scan.to_json)
       end
+
+      output_file
     end
 
 
@@ -35,7 +37,7 @@ module Dependagrab
         id: SecureRandom.uuid,
         created: Time.now.strftime('%Y-%m-%dT%H:%M:%SZ'),
         exported: Time.now.strftime('%Y-%m-%dT%H:%M:%SZ'),
-        source: "dependagrab",
+        source: "DependAGrab",
         collectionType: "DEPENDENCY",
         findings: [],
       }
@@ -49,7 +51,7 @@ module Dependagrab
         severity: alert[:severity].gsub("MODERATE", "MEDIUM"),
         nativeSeverity: alert[:severity].gsub("MODERATE", "MEDIUM"),
         summary: alert[:summary],
-        cvsScore: alert[:cvss],
+        cvsScore: alert[:cvss].to_s,
         description: alert[:description],
         dependencyDetails: {
           library: alert[:package_name],

data/lib/dependagrab/version.rb

@@ -1,3 +1,3 @@
 module Dependagrab
-  VERSION = "0.1.6"
+  VERSION = "0.1.7"
 end

data/lib/dependagrab.rb

@@ -8,4 +8,30 @@ module Dependagrab
   class Error < StandardError; end
   class MissingConfigError < Dependagrab::Error; end
   class GhApiError < Dependagrab::Error; end
+
+
+  def self.run(options)
+    result = Dependagrab::GithubClient.new(options).grab
+
+    if options[:output]
+      begin
+        output_file = FileWriter.new(options[:output]).write!(result[:alerts])
+        if options[:print]
+          puts "#{result[:alerts].count} dependency warnings written to '#{options.fetch(:output)}'"
+        end
+        output_file
+      rescue => e
+        STDERR.puts "Failed to write file '#{options.fetch(:output)}'"
+        STDERR.puts "Error: #{e.message} (set DEBUG=true for detailed backtrace)"
+        STDERR.puts e.backtrace if ENV['DEBUG']
+        exit 1
+      end
+    else
+      if options[:print]
+        ConsoleWriter.new.write!(result[:alerts])
+      else
+        result[:alerts]
+      end
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependagrab
 version: !ruby/object:Gem::Version
-  version: 0.1.6
+  version: 0.1.7
 platform: ruby
 authors:
 - Dave Elliott
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-12-07 00:00:00.000000000 Z
+date: 2022-02-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: graphql-client