fastlane-plugin-dependency_check_ios_analyzer 1.2.0 → 1.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c06462529dc4a9da9de21f9fd5938d10e4f06f24b1abf276909ed34ac912a8a8
-  data.tar.gz: 2559be96b847adc94bdb499f075e301d230270f5d1cf590a350086b349b4a6fb
+  metadata.gz: 4ca91d7cb9709334d1ee7aa8436c2ef1a1985a1de9393e0a6cc1257ffec271e5
+  data.tar.gz: ab94751e98a4850deb238b28a21a18d8b34ed460675e65af74a7c097957aa40d
 SHA512:
-  metadata.gz: 91951c418666a3c12b06daa19f0658813937236cbf57eec539fbb3819f639c16baf34b36bdf2f46a8dffb2612002912c910f376ff318e3366e538f14e774ef26
-  data.tar.gz: eab3a9e6e24e0d5992227810a4b4a7c0ee0b273105d3db9d7dfad39de03a92fca77d66d3a8b54cfff11e8c9a30e8a311c164f1975a16f97ae0a16ddaec23e151
+  metadata.gz: 4201b6e08dc559c8533ed7c4cb5210d409976447f9cac35bf27888526b43b42297076085da814e05b4e65e88f8364ff4aea406a3c35bdc1e3c5796e1f15a5afe
+  data.tar.gz: 9f35bf2a4cad561d4d32caedf2946dc9c475f6abb55fba0c033f5594d231af76d24af614470250bb98777c1d2fd75b70cb6d6cbb3847c81cddceb6999f0dcc61

data/README.md

@@ -20,7 +20,7 @@ This analyzer is considered experimental. While it may be useful and provide val
 | `project_name` | The project's name | `DependencyCheck` |
 | `output_directory` | The directory in which all reports will be stored | `dependency-check` |
 | `output_types` | Comma separated list of the output types (e.g. `html`, `xml`, `csv`, `json`, `junit`, `sarif`, `all`) | `sarif` |
-| `cli_version` | Overwrite the version of `DependencyCheck` analyzer | `6.2.2` |
+| `cli_version` | Overwrite the version of `DependencyCheck` analyzer | `10.0.3` |
 | `verbose` | The file path to write verbose logging information | |
 | `fail_on_cvss` | Specifies if the build should be failed if a CVSS score above a specified level is identified. Since the CVSS scores are 0-10, by default the build will never fail | `11` |
 | `junit_fail_on_cvss` | Specifies the CVSS score that is considered a failure when generating the junit report | `0` |

data/lib/fastlane/plugin/dependency_check_ios_analyzer/actions/dependency_check_ios_analyzer_action.rb

@@ -109,9 +109,10 @@ module Fastlane
           ),
           FastlaneCore::ConfigItem.new(
             key: :cli_version,
-            description: 'Overwrite the version of DependencyCheck analyzer. Not recommended',
+            description: 'Overwrite the version of DependencyCheck analyzer',
             optional: true,
             is_string: true,
+            default_value: '10.0.3',
             type: String
           ),
           FastlaneCore::ConfigItem.new(

data/lib/fastlane/plugin/dependency_check_ios_analyzer/helper/analyzer_helper.rb

@@ -21,6 +21,11 @@ module Fastlane
       def self.analize_pods(bin_path:, params:)
         return true if params[:skip_pods_analysis]
 
+        podfile_path = params[:project_path] ? "#{params[:project_path]}/Podfile" : 'Podfile'
+        podfile_exists = File.file?(podfile_path)
+
+        UI.user_error!('Could not find a Podfile path') if !podfile_exists && params[:pod_file_lock_path].nil?
+
         path_to_report = "#{params[:output_directory]}/CocoaPods"
         clean_reports_folder(path_to_report)
         params[:pod_file_lock_path] = resolve_pods_dependencies(params)

data/lib/fastlane/plugin/dependency_check_ios_analyzer/helper/configuration_helper.rb

@@ -10,8 +10,7 @@ module Fastlane
       def self.install(params)
         repo = 'https://github.com/jeremylong/DependencyCheck'
         name = 'dependency-check'
-        version = params[:cli_version] ? params[:cli_version] : '6.2.2'
-        base_url = "#{repo}/releases/download/v#{version}/#{name}-#{version}-release"
+        base_url = "#{repo}/releases/download/v#{params[:cli_version]}/#{name}-#{params[:cli_version]}-release"
         bin_path = "#{params[:output_directory]}/#{name}/bin/#{name}.sh"
         zip_path = "#{params[:output_directory]}/#{name}.zip"
 

data/lib/fastlane/plugin/dependency_check_ios_analyzer/version.rb

@@ -1,5 +1,5 @@
 module Fastlane
   module DependencyCheckIosAnalyzer
-    VERSION = '1.2.0'
+    VERSION = '1.3.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fastlane-plugin-dependency_check_ios_analyzer
 version: !ruby/object:Gem::Version
-  version: 1.2.0
+  version: 1.3.0
 platform: ruby
 authors:
 - Alexey Alter-Pesotskiy
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-02-02 00:00:00.000000000 Z
+date: 2024-08-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: curb
@@ -126,16 +126,16 @@ dependencies:
   name: fasterer
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.8.3
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - ">="
       - !ruby/object:Gem::Version
-        version: 0.8.3
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rubocop
   requirement: !ruby/object:Gem::Requirement
@@ -224,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.3.7
 signing_key:
 specification_version: 4
 summary: Fastlane wrapper around the OWASP dependency-check iOS analyzers (Swift Package