foreman_cve_scanner 0.0.1 → 0.0.2

data/test/services/foreman_cve_scanner/cve_report_scanner_test.rb

@@ -0,0 +1,43 @@
+require 'test_plugin_helper'
+
+module ForemanCveScanner
+  class CveReportScannerTest < ActiveSupport::TestCase
+    test 'should identify as cve scan' do
+      raw = {
+        'reporter' => 'cve_scan',
+        'scan' => JSON.parse(File.read(File.join(ForemanCveScanner::Engine.root, 'test/fixtures/grype.json')))
+      }
+      assert_equal ForemanCveScanner::CveReportScanner.identify_origin(raw), 'CveScanner'
+    end
+
+    test 'should raise an exception if invalid report' do
+      assert_raise Foreman::Exception do
+        @scanner = ForemanCveScanner::CveReportScanner.new({})
+      end
+    end
+
+    test 'trivy scan has valid data' do
+      data = JSON.parse(File.read(File.join(ForemanCveScanner::Engine.root, 'test/fixtures/trivy.json')))
+      raw = {
+        'reporter' => 'cve_scan',
+        'scan' => data
+      }
+      ForemanCveScanner::CveReportScanner.add_reporter_data(nil, raw)
+      assert_equal raw['logs'].count, 10
+      assert_equal raw['logs'][0]['log']['level'], 'info'
+      assert_equal raw['logs'][0]['log']['messages']['message'], 'CVE-2020-12762: json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file # url: https://avd.aquasec.com/nvd/cve-2020-12762'
+    end
+
+    test 'grype scan has valid data' do
+      data = JSON.parse(File.read(File.join(ForemanCveScanner::Engine.root, 'test/fixtures/grype.json')))
+      raw = {
+        'reporter' => 'cve_scan',
+        'scan' => data
+      }
+      ForemanCveScanner::CveReportScanner.add_reporter_data(nil, raw)
+      assert_equal raw['logs'].count, 18
+      assert_equal raw['logs'][0]['log']['level'], 'info'
+      assert_equal raw['logs'][0]['log']['messages']['message'], 'CVE-2007-0086: The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. # url: https://nvd.nist.gov/vuln/detail/CVE-2007-0086'
+    end
+  end
+end

metadata

@@ -1,59 +1,36 @@
 --- !ruby/object:Gem::Specification
 name: foreman_cve_scanner
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Bernhard Suttner
-autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-04-06 00:00:00.000000000 Z
+date: 2025-07-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: rdoc
+  name: foreman_remote_execution
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
+        version: '9.0'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
+        version: '15'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
-- !ruby/object:Gem::Dependency
-  name: rubocop-minitest
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
+        version: '9.0'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
+        version: '15'
 - !ruby/object:Gem::Dependency
-  name: rubocop-performance
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -67,7 +44,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: rubocop-rails
+  name: rdoc
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -90,22 +67,23 @@ files:
 - LICENSE
 - README.md
 - Rakefile
-- app/lib/actions/cve_scanner_job.rb
+- app/lib/actions/foreman_cve_scanner/cve_scanner_job.rb
 - app/services/foreman_cve_scanner/cve_report_scanner.rb
 - app/views/foreman_cve_scanner/job_templates/install_cve_scanners.erb
 - app/views/foreman_cve_scanner/job_templates/run_cve_scanner.erb
 - lib/foreman_cve_scanner.rb
 - lib/foreman_cve_scanner/engine.rb
 - lib/foreman_cve_scanner/version.rb
-- test/factories/foreman_cve_scanner_factories.rb
+- lib/tasks/foreman_cve_scanner_tasks.rake
+- test/fixtures/grype.json
+- test/fixtures/trivy.json
+- test/services/foreman_cve_scanner/cve_report_scanner_test.rb
 - test/test_plugin_helper.rb
-- test/unit/foreman_cve_scanner_test.rb
-homepage: https://atix.de
+homepage: https://github.com/ATIX-AG/foreman_cve_scanner
 licenses:
 - GPL-3.0
 metadata:
   is_foreman_plugin: 'true'
-post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -114,17 +92,20 @@ required_ruby_version: !ruby/object:Gem::Requirement
   - - ">="
     - !ruby/object:Gem::Version
       version: '2.7'
+  - - "<"
+    - !ruby/object:Gem::Version
+      version: '4'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
-signing_key: 
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Run CVE scan on host and collect report
 test_files:
-- test/factories/foreman_cve_scanner_factories.rb
+- test/fixtures/grype.json
+- test/fixtures/trivy.json
+- test/services/foreman_cve_scanner/cve_report_scanner_test.rb
 - test/test_plugin_helper.rb
-- test/unit/foreman_cve_scanner_test.rb

data/test/factories/foreman_cve_scanner_factories.rb

@@ -1,5 +0,0 @@
-FactoryBot.define do
-  factory :host do
-    name 'foreman_cve_scanner'
-  end
-end

data/test/unit/foreman_cve_scanner_test.rb

@@ -1,11 +0,0 @@
-require 'test_plugin_helper'
-
-class ForemanPluginTemplateTest < ActiveSupport::TestCase
-  setup do
-    User.current = User.find_by_login 'admin'
-  end
-
-  test 'the truth' do
-    assert true
-  end
-end