fastlane-plugin-dependency_check_ios_analyzer 1.1.1 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +1 -0
- data/lib/fastlane/plugin/dependency_check_ios_analyzer/actions/dependency_check_ios_analyzer_action.rb +7 -0
- data/lib/fastlane/plugin/dependency_check_ios_analyzer/helper/analyzer_helper.rb +4 -1
- data/lib/fastlane/plugin/dependency_check_ios_analyzer/version.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: c06462529dc4a9da9de21f9fd5938d10e4f06f24b1abf276909ed34ac912a8a8
|
|
4
|
+
data.tar.gz: 2559be96b847adc94bdb499f075e301d230270f5d1cf590a350086b349b4a6fb
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 91951c418666a3c12b06daa19f0658813937236cbf57eec539fbb3819f639c16baf34b36bdf2f46a8dffb2612002912c910f376ff318e3366e538f14e774ef26
|
|
7
|
+
data.tar.gz: eab3a9e6e24e0d5992227810a4b4a7c0ee0b273105d3db9d7dfad39de03a92fca77d66d3a8b54cfff11e8c9a30e8a311c164f1975a16f97ae0a16ddaec23e151
|
data/README.md
CHANGED
|
@@ -25,6 +25,7 @@ This analyzer is considered experimental. While it may be useful and provide val
|
|
|
25
25
|
| `fail_on_cvss` | Specifies if the build should be failed if a CVSS score above a specified level is identified. Since the CVSS scores are 0-10, by default the build will never fail | `11` |
|
|
26
26
|
| `junit_fail_on_cvss` | Specifies the CVSS score that is considered a failure when generating the junit report | `0` |
|
|
27
27
|
| `keep_binary_on_exit` | Keep `DependencyCheck` binary and data on exit | `true` |
|
|
28
|
+
| `suppression` | Path to [suppression file](https://jeremylong.github.io/DependencyCheck/general/suppression.html) | |
|
|
28
29
|
|
|
29
30
|
## Requirements
|
|
30
31
|
|
|
@@ -145,6 +145,13 @@ module Fastlane
|
|
|
145
145
|
default_value: true,
|
|
146
146
|
is_string: false,
|
|
147
147
|
type: Boolean
|
|
148
|
+
),
|
|
149
|
+
FastlaneCore::ConfigItem.new(
|
|
150
|
+
key: :suppression,
|
|
151
|
+
description: 'Path to suppression file',
|
|
152
|
+
optional: true,
|
|
153
|
+
is_string: true,
|
|
154
|
+
type: String
|
|
148
155
|
)
|
|
149
156
|
]
|
|
150
157
|
end
|
|
@@ -44,6 +44,8 @@ module Fastlane
|
|
|
44
44
|
# Specify verbose output
|
|
45
45
|
verbose = params[:verbose] ? " --log #{params[:verbose]}" : ''
|
|
46
46
|
|
|
47
|
+
suppression = params[:suppression] ? " --suppression #{params[:suppression]}" : ''
|
|
48
|
+
|
|
47
49
|
# Make the script executable
|
|
48
50
|
Actions.sh("chmod 775 #{bin_path}")
|
|
49
51
|
|
|
@@ -59,7 +61,8 @@ module Fastlane
|
|
|
59
61
|
" --failOnCVSS #{params[:fail_on_cvss]}" \
|
|
60
62
|
" --scan #{destination}" \
|
|
61
63
|
"#{params[:output_types]}" \
|
|
62
|
-
"#{verbose}"
|
|
64
|
+
"#{verbose}" \
|
|
65
|
+
"#{suppression}"
|
|
63
66
|
)
|
|
64
67
|
true
|
|
65
68
|
rescue
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: fastlane-plugin-dependency_check_ios_analyzer
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.2.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Alexey Alter-Pesotskiy
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date:
|
|
11
|
+
date: 2022-02-02 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: curb
|
|
@@ -224,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
224
224
|
- !ruby/object:Gem::Version
|
|
225
225
|
version: '0'
|
|
226
226
|
requirements: []
|
|
227
|
-
rubygems_version: 3.
|
|
227
|
+
rubygems_version: 3.2.15
|
|
228
228
|
signing_key:
|
|
229
229
|
specification_version: 4
|
|
230
230
|
summary: Fastlane wrapper around the OWASP dependency-check iOS analyzers (Swift Package
|