dradis-nessus 5.3.0 → 5.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46ff80ecb13f5badf38868414855fa72e0e1d688d733c9b87b91877592526074
-  data.tar.gz: b98a2d162a75e6892f3ec3ab056994e2c0df638c8484b0a194e6c6be538bc371
+  metadata.gz: f7ac475e971a6bd47e08be398c5afebe82b6567b67bc7d585de1090afbdea70a
+  data.tar.gz: 622f90bea494deb65914b6c5a82caf5a76700065c3672ca81146568549e8d497
 SHA512:
-  metadata.gz: a8458437f511065ec3912598504e4a1c04ce72b1c3aa8ca6543dfdbaecca0b45bb9d265ef0094b75220edc4358ddeaf88a425381a50409d91d6469c28b21b010
-  data.tar.gz: e52036f86dee49e1485002b8fbcb18caa6a50e5726770c82060e20d6db5e96c1f090c66ab9558b3305523b4f79a74d249c07d2860f636d12eed8b43b1884150e
+  metadata.gz: 8bf274f85bb04b013c3153ada303a3ea51fbd2359d316b10e2a3df3b1468c82d6ea52f81ca15befb653a7805e8e8ffe57ca85a8de0c8879e06e9f5a9d275ea2e
+  data.tar.gz: 77c4395653509fc12e7b937403d90cbbeacc21bb64f42ad3d7b3d0392c0bacf25e826e8a63705d5dd1f6f12eef84e0616b170345948c4430798206b50d45db66

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+v5.4.0 (September 2026)
+  - No changes
+
 v5.3.0 (August 2026)
   - No changes
 

data/lib/dradis/plugins/nessus/gem_version.rb

@@ -8,7 +8,7 @@ module Dradis
 
       module VERSION
         MAJOR = 5
-        MINOR = 3
+        MINOR = 4
         TINY = 0
         PRE = nil
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dradis-nessus
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 5.4.0
 platform: ruby
 authors:
 - Daniel Martin
@@ -99,18 +99,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/issue_template.md"
-- ".github/pull_request_template.md"
-- ".gitignore"
-- ".rspec"
 - CHANGELOG.md
-- CHANGELOG.template
-- CONTRIBUTING.md
-- Gemfile
 - LICENSE
 - README.md
 - Rakefile
-- dradis-nessus.gemspec
 - lib/dradis-nessus.rb
 - lib/dradis/plugins/nessus.rb
 - lib/dradis/plugins/nessus/engine.rb
@@ -122,15 +114,6 @@ files:
 - lib/nessus/host.rb
 - lib/nessus/report_item.rb
 - lib/tasks/thorfile.rb
-- spec/dradis/plugins/nessus/field_processor_spec.rb
-- spec/dradis/plugins/nessus/importer_spec.rb
-- spec/fixtures/files/example_v2.nessus
-- spec/fixtures/files/host-01.xml
-- spec/fixtures/files/report_item-with-list.xml
-- spec/fixtures/files/vpr_score.xml
-- spec/fixtures/files/vulnerability_priority_rating.xml
-- spec/nessus/host_spec.rb
-- spec/spec_helper.rb
 - templates/evidence.sample
 - templates/report_host.sample
 - templates/report_item.sample
@@ -155,13 +138,4 @@ requirements: []
 rubygems_version: 3.6.9
 specification_version: 4
 summary: Nessus upload add-on for the Dradis Framework.
-test_files:
-- spec/dradis/plugins/nessus/field_processor_spec.rb
-- spec/dradis/plugins/nessus/importer_spec.rb
-- spec/fixtures/files/example_v2.nessus
-- spec/fixtures/files/host-01.xml
-- spec/fixtures/files/report_item-with-list.xml
-- spec/fixtures/files/vpr_score.xml
-- spec/fixtures/files/vulnerability_priority_rating.xml
-- spec/nessus/host_spec.rb
-- spec/spec_helper.rb
+test_files: []

data/.github/issue_template.md

@@ -1,16 +0,0 @@
-### Steps to reproduce
-
-Help us help you, how can we reproduce the problem?
-
-### Expected behavior
-Tell us what should happen
-
-### Actual behavior
-Tell us what happens instead
-
-### System configuration
-**Dradis version**:
-
-**Ruby version**:
-
-**OS version**:

data/.github/pull_request_template.md

@@ -1,45 +0,0 @@
-Please review [CONTRIBUTING.md](https://github.com/dradis/dradis-ce/blob/develop/CONTRIBUTING.md) and remove this line.
-
-### Summary
-
-Provide a general description of the code changes in your pull
-request... were there any bugs you had fixed? If so, mention them. If
-these bugs have open GitHub issues, be sure to tag them here as well,
-to keep the conversation linked together.
-
-
-### Testing Steps
-
-Provide steps to test functionality, described in detail for someone not familiar with this part of the application / code base
-
-
-### Other Information
-
-If there's anything else that's important and relevant to your pull
-request, mention that information here. This could include
-benchmarks, or other information.
-
-Thanks for contributing to Dradis!
-
-
-### Copyright assignment
-
-Collaboration is difficult with commercial closed source but we want
-to keep as much of the OSS ethos as possible available to users
-who want to fix it themselves.
-
-In order to unambiguously own and sell Dradis Framework commercial
-products, we must have the copyright associated with the entire
-codebase. Any code you create which is merged must be owned by us.
-That's not us trying to be a jerks, that's just the way it works.
-
-You can delete this section, but the following sentence needs to
-remain in the PR's description:
-
-> I assign all rights, including copyright, to any future Dradis
-> work by myself to Security Roots.
-
-### Check List
-
-- [ ] Added a CHANGELOG entry
-- [ ] Added specs

data/.gitignore

@@ -1,11 +0,0 @@
-
-# Bundler config
-Gemfile.lock
-/.bundle/
-/vendor/bundle/
-
-# Gem artifacts
-/pkg/
-/spec/internal/
-
-.DS_Store

data/.rspec

@@ -1,2 +0,0 @@
---color
--f d

data/CHANGELOG.template

@@ -1,12 +0,0 @@
-[v#.#.#] ([month] [YYYY])
-  - [future tense verb] [feature]
-  - Upgraded gems:
-    - [gem]
-  - Bugs fixes:
-    - [future tense verb] [bug fix]
-    - Bug tracker items:
-      - [item]
-  - Security Fixes:
-    - High: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
-    - Medium: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]
-    - Low: (Authenticated|Unauthenticated) (admin|author|contributor) [vulnerability description]

data/CONTRIBUTING.md

@@ -1,3 +0,0 @@
-# Plugin contribution guidelines
-
-See the Dradis Framework's [CONTRIBUTING.md](https://github.com/dradis/dradisframework/blob/master/CONTRIBUTING.md)

data/Gemfile

@@ -1,23 +0,0 @@
-source 'https://rubygems.org'
-
-# Declare your gem's dependencies in dradispro-duoweb.gemspec.
-# Bundler will treat runtime dependencies like base dependencies, and
-# development dependencies will be added by default to the :development group.
-gemspec
-
-# jquery-rails is used by the dummy application
-# gem "jquery-rails"
-
-# Declare any dependencies that are still in development here instead of in
-# your gemspec. These might include edge Rails or gems from your path or
-# Git. Remember to move these dependencies to your gemspec before releasing
-# your gem to rubygems.org.
-
-# To use debugger
-# gem 'debugger'
-
-if Dir.exist?('../dradis-plugins')
-  gem 'dradis-plugins', path: '../dradis-plugins'
-else
-  gem 'dradis-plugins', github: 'dradis/dradis-plugins'
-end

data/dradis-nessus.gemspec

@@ -1,33 +0,0 @@
-$:.push File.expand_path('../lib', __FILE__)
-require 'dradis/plugins/nessus/version'
-version = Dradis::Plugins::Nessus::VERSION::STRING
-
-# Describe your gem and declare its dependencies:
-Gem::Specification.new do |spec|
-  spec.platform = Gem::Platform::RUBY
-  spec.name = 'dradis-nessus'
-  spec.version = version
-  spec.summary = 'Nessus upload add-on for the Dradis Framework.'
-  spec.description = 'This add-on allows you to upload and parse output produced from Tenable\'s Nessus Scanner into Dradis.'
-
-  spec.license = 'GPL-2'
-
-  spec.authors = ['Daniel Martin']
-  spec.homepage = 'https://dradis.com/integrations/nessus.html'
-
-  spec.files = `git ls-files`.split($\)
-  spec.executables = spec.files.grep(%r{^bin/}).map { |f| File.basename(f) }
-  spec.test_files = spec.files.grep(%r{^(test|spec|features)/})
-
-  # By not including Rails as a dependency, we can use the gem with different
-  # versions of Rails (a sure recipe for disaster, I'm sure), which is needed
-  # until we bump Dradis Pro to 4.1.
-  # s.add_dependency 'rails', '~> 4.1.1'
-  spec.add_dependency 'dradis-plugins', '>= 4.0'
-  spec.add_dependency 'nokogiri'
-
-  spec.add_development_dependency 'bundler', '~> 2.0'
-  spec.add_development_dependency 'rake', '~> 10.0'
-  spec.add_development_dependency 'rspec-rails'
-  spec.add_development_dependency 'combustion', '~> 0.5.2'
-end

data/spec/dradis/plugins/nessus/field_processor_spec.rb

@@ -1,41 +0,0 @@
-require 'spec_helper'
-require 'ostruct'
-
-describe Dradis::Plugins::Nessus::FieldProcessor do
-
-  describe '%report_item.description% field formatting' do
-    context 'bullet points' do
-      before do
-        doc = Nokogiri::XML(
-          File.read('spec/fixtures/files/report_item-with-list.xml')
-        )
-        processor = described_class.new(data: doc.root)
-
-        @value = processor.value(field: 'report_item.description')
-      end
-
-      it 'converts Nessus broken lists into Textile bullet-point lists' do
-        expect(@value).to_not be_empty
-
-        expect(@value).to include(
-          '* A denial of service vulnerability exists relating to '\
-          'the \'mod_dav\' module as it relates to MERGE requests.'
-        )
-      end
-
-      it 'does not add unnecessary newlines to list items' do
-        expect(@value).to include("vulnerabilities:\n\n* A flaw exists")
-      end
-    end
-  end
-
-  it 'Recasted severity values appear in the Evidence' do
-    doc = Nokogiri::XML(
-      File.read('spec/fixtures/files/report_item-with-list.xml')
-    )
-    processor = described_class.new(data: doc.root)
-    value = processor.value(field: 'evidence.severity')
-    expect(value).to_not be_empty
-    expect(value).to include('2')
-  end
-end

data/spec/dradis/plugins/nessus/importer_spec.rb

@@ -1,77 +0,0 @@
-require 'spec_helper'
-require 'ostruct'
-
-describe Dradis::Plugins::Nessus::Importer do
-  before(:each) do
-    mapping_service = double('Dradis::Plugins::MappingService')
-    allow(mapping_service).to receive(:apply_mapping).and_return('')
-    allow(Dradis::Plugins::MappingService).to receive(:new).and_return(mapping_service)
-
-    # Init services
-    plugin = Dradis::Plugins::Nessus
-
-    @content_service = Dradis::Plugins::ContentService::Base.new(
-      logger: Logger.new(STDOUT),
-      plugin: plugin
-    )
-
-    @importer = plugin::Importer.new(
-      content_service: @content_service
-    )
-
-    # Stub dradis-plugins methods
-    #
-    # They return their argument hashes as objects mimicking
-    # Nodes, Issues, etc
-    allow(@content_service).to receive(:create_node) do |args|
-      obj = OpenStruct.new(args)
-      obj.define_singleton_method(:set_property) { |*| }
-      obj.define_singleton_method(:set_service) { |*| }
-      obj
-    end
-    allow(@content_service).to receive(:create_note) do |args|
-      OpenStruct.new(args)
-    end
-  end
-
-  it 'creates one node for each host' do
-    %w{snorby.org scanme.insecure.org}.each do |host|
-      expect(@content_service).to receive(:create_node).with(hash_including label: host).once
-    end
-
-    allow(@content_service).to receive(:create_evidence) do |args|
-      OpenStruct.new(args)
-    end
-    allow(@content_service).to receive(:create_issue) do |args|
-      OpenStruct.new(args)
-    end
-
-    # Run the import
-    @importer.import(file: 'spec/fixtures/files/example_v2.nessus')
-  end
-
-  describe 'vulnerability priority rating field' do
-    before do
-      allow(@content_service).to receive(:create_evidence) do |args|
-        OpenStruct.new(args)
-      end
-
-      expect_any_instance_of(Dradis::Plugins::TemplateService)
-      .to receive(:template_source).and_return("#[VPR]#\n%report_item.vpr_score%\n")
-    end
-
-    context '<vpr_score>' do
-      it 'exports the vpr_score field' do
-        expect(@content_service).to receive(:create_issue).with(hash_including text: "#[VPR]#\n9.0\n")
-        @importer.import(file: 'spec/fixtures/files/vulnerability_priority_rating.xml')
-      end
-    end
-
-    context '<vulnerability_priority_rating>' do
-      it 'exports the vpr_score field' do
-        expect(@content_service).to receive(:create_issue).with(hash_including text: "#[VPR]#\n9.0\n")
-        @importer.import(file: 'spec/fixtures/files/vpr_score.xml')
-      end
-    end
-  end
-end