entitlements-gitrepo-auditor-plugin 0.2.1 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1a04171eaad46e4bd9f866a2df0d3ddb460df0e8fcc9adaf6724caa60669b367
-  data.tar.gz: ff4d9404cad86943b5f4bbd7840c8e87b7420c136385ac2c40d2c47b1e5a8a7a
+  metadata.gz: 89abf34aea3824604c1dd4c809b8649e1c80e3a969d2b267ad0e7c3b24821580
+  data.tar.gz: 1b341889958d218dd0edfbb7f5bc4219323cfecfa9eb27466c530ad359eb80e7
 SHA512:
-  metadata.gz: df87659f140bcafe1b5067d28293c3e67c5dde86f8a0c9c256a4dd28746a34517f897da7892aff2fe51c7b1d08aa504783cc17483286483c75d2bd7e8caf211c
-  data.tar.gz: 8007a2f167b3555f33e704ab4328c61f38a2abed2faca438de0f059c7e0af95f59791168bc019f3e2902c1234edc75e5b31a191e7d2abf646c073c4598fc5f6b
+  metadata.gz: 2c70556753d3b7a6352b9a411646e6e8cc81fe09afa663b822902090278ef05476a5dc83e461ee1b8330865d546640808766087165ef716ed1e876949b1dbea1
+  data.tar.gz: 344cc46026993f510d82c7bf46a192db01b1d7bb4f50a7aa1b51014a1efcddcb7e0525e16bbcd921fb2f48ed52a8ac31ae4e27eefad48f9f556e14ae17a1329d

data/lib/entitlements/auditor/gitrepo.rb

@@ -26,7 +26,7 @@ module Entitlements
         @repo = Entitlements::Util::GitRepo.new(
           repo: config["repo"],
           sshkey: Base64.decode64(config["sshkey"]),
-          logger: logger
+          logger:
         )
         @repo.github = config["github_override"] if config["github_override"]
         @repo.send(operation, checkout_directory)
@@ -59,10 +59,10 @@ module Entitlements
         %w[update_files delete_files].each do |m|
           send(
             m.to_sym,
-            action_hash: action_hash,
-            successful_actions: successful_actions,
-            sync_changes: sync_changes,
-            valid_changes: valid_changes
+            action_hash:,
+            successful_actions:,
+            sync_changes:,
+            valid_changes:
           )
         end
 

data/lib/entitlements/util/gitrepo.rb

@@ -38,6 +38,7 @@ module Entitlements
         @repo = repo
         @sshkey = sshkey
         @github = "git@github.com:"
+        @tmpdir_prefix = ENV.fetch("ENTITLEMENTS_TMPDIR_PREFIX", "/data/entitlements_deploys")
       end
 
       # Run "git add" on a file.
@@ -206,7 +207,11 @@ module Entitlements
           # else custom that might be going on in the environment. Turn off prompts for the SSH key for
           # github.com being trusted or not, only use the provided key as the identity, and ignore any
           # ~/.ssh/config file the user running this might have set up.
-          tempdir = Dir.mktmpdir
+
+          # if the @tmpdir_prefix doesn't exist, create it
+          FileUtils.mkdir_p(@tmpdir_prefix) unless File.directory?(@tmpdir_prefix)
+          tempdir = Dir.mktmpdir(nil, @tmpdir_prefix)
+
           File.open(File.join(tempdir, "key"), "w") { |f| f.write(sshkey) }
           File.open(File.join(tempdir, "ssh"), "w") do |f|
             f.puts "#!/bin/sh"

data/lib/version.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Entitlements
+  module Version
+    VERSION = "0.4.0"
+  end
+end

metadata

@@ -1,43 +1,43 @@
 --- !ruby/object:Gem::Specification
 name: entitlements-gitrepo-auditor-plugin
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.4.0
 platform: ruby
 authors:
 - GitHub, Inc. Security Ops
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-09-14 00:00:00.000000000 Z
+date: 2023-09-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: entitlements
+  name: contracts
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.2.0
+        version: '0.17'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.2.0
+        version: '0.17'
 - !ruby/object:Gem::Dependency
-  name: contracts
+  name: entitlements-app
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: 0.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '0.17'
+        version: 0.3.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -192,20 +192,20 @@ dependencies:
     - - '='
       - !ruby/object:Gem::Version
         version: 3.4.2
-description: ''
+description: Entitlements plugin for a robust audit log
 email: opensource+entitlements-app@github.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- VERSION
 - lib/entitlements/auditor/gitrepo.rb
 - lib/entitlements/util/gitrepo.rb
+- lib/version.rb
 homepage: https://github.com/github/entitlements-gitrepo-auditor-plugin
 licenses:
 - MIT
 metadata: {}
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -220,8 +220,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.6
-signing_key:
+rubygems_version: 3.3.7
+signing_key: 
 specification_version: 4
 summary: Entitlements GitRepo Auditor
 test_files: []

data/VERSION

@@ -1 +0,0 @@
-0.2.1