gem_guard 0.1.0 → 0.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/README.md +27 -4
  3. data/SECURITY.md +58 -0
  4. data/gem_guard-0.1.0.gem +0 -0
  5. data/gem_guard.gemspec +4 -4
  6. data/lib/gem_guard/version.rb +1 -1
  7. metadata +23 -18
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a7210ff3d709b761cf8aa01e0c5d770f61b2801d9a9603e2608451f782aa23fb
4
- data.tar.gz: c59ee85d130fca43c719d3bcff7a136364e65ec37255af0b2721e6736dc2931e
3
+ metadata.gz: 633376d487060ef6045bec39ca986f4845c8eebf7d2bfeca1ae5b79b7848f5d8
4
+ data.tar.gz: 20fddc00eb1840578c795ec810c2b25ab189940b2187ed88f3b387bf09e81b3d
5
5
  SHA512:
6
- metadata.gz: ff65c5924a28cc7193569c7b50ac84234aa897d139d2d177eb3f8538a77ba627492458e40205bfb40c5845e16ecefa84a902912933f131735b1ff74d3171500e
7
- data.tar.gz: 58228702c7dc55e0594f515aab361cc63afbf6840fc25657f82cdeda252078e90ab5322a1dd5b56b1861f5352c1d7d527ba5fd01b464ac52ba1b92c3e4ca8033
6
+ metadata.gz: 35354521a0b984df2370f5e9b2f81e9aa0e0d0888d060dd652089f15751536f35ff357b4f8b62affed894c4b8c6879f7c7107e1d08f8a5c077b864e8c0e5dd16
7
+ data.tar.gz: 1ef4f61f5cdc1046dad193e61e6e6e54cc7bd3cf19fcb21b4130298b192012057c5362c0d7f70ada7391272c59dd0059a05e57c652dc21c4770942e0efb5d588
data/README.md CHANGED
@@ -1,8 +1,10 @@
1
1
  # GemGuard
2
2
 
3
3
  [![Gem Version](https://badge.fury.io/rb/gem_guard.svg)](https://badge.fury.io/rb/gem_guard)
4
- [![Build Status](https://github.com/wilbursuero/gem_guard/workflows/CI/badge.svg)](https://github.com/wilbursuero/gem_guard/actions)
4
+ [![CI](https://github.com/wilburhimself/gem_guard/workflows/CI/badge.svg)](https://github.com/wilburhimself/gem_guard/actions/workflows/ci.yml)
5
+ [![Release](https://github.com/wilburhimself/gem_guard/workflows/Release/badge.svg)](https://github.com/wilburhimself/gem_guard/actions/workflows/release.yml)
5
6
  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
7
+ [![Security](https://img.shields.io/badge/Security-Policy-blue.svg)](SECURITY.md)
6
8
 
7
9
  Supply chain security and vulnerability management for Ruby gems. GemGuard provides developers with a comprehensive tool to detect, report, and remediate dependency-related security risks.
8
10
 
@@ -79,13 +81,34 @@ Details:
79
81
 
80
82
  ## Development
81
83
 
82
- After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
84
+ After checking out the repo, run `bundle install` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bundle exec rake standard` to run the linter.
83
85
 
84
- To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and the created tag, and push the `.gem` file to [rubygems.org](https://rubygems.org).
86
+ ### Running Tests
87
+
88
+ ```bash
89
+ bundle exec rspec # Run all tests
90
+ bundle exec rake standard # Run linter
91
+ bundle exec rake # Run both tests and linter
92
+ ```
93
+
94
+ ### Releasing
95
+
96
+ Releases are automated via GitHub Actions. To create a new release:
97
+
98
+ 1. Update the version number in `lib/gem_guard/version.rb`
99
+ 2. Commit and push to the `main` branch
100
+ 3. GitHub Actions will automatically:
101
+ - Run tests across multiple Ruby versions
102
+ - Create a git tag
103
+ - Generate release notes
104
+ - Create a GitHub release
105
+ - Publish to RubyGems.org
106
+
107
+ The release workflow is triggered only when `lib/gem_guard/version.rb` changes.
85
108
 
86
109
  ## Contributing
87
110
 
88
- Bug reports and pull requests are welcome on GitHub at https://github.com/wilbursuero/gem_guard.
111
+ Bug reports and pull requests are welcome on GitHub at https://github.com/wilburhimself/gem_guard.
89
112
 
90
113
  ## License
91
114
 
data/SECURITY.md ADDED
@@ -0,0 +1,58 @@
1
+ # Security Policy
2
+
3
+ ## Supported Versions
4
+
5
+ We actively support the following versions of GemGuard:
6
+
7
+ | Version | Supported |
8
+ | ------- | ------------------ |
9
+ | 0.1.x | :white_check_mark: |
10
+
11
+ ## Reporting a Vulnerability
12
+
13
+ If you discover a security vulnerability within GemGuard, please send an email to **security@wilburhimself.com**. All security vulnerabilities will be promptly addressed.
14
+
15
+ **Please do not report security vulnerabilities through public GitHub issues.**
16
+
17
+ ### What to include in your report
18
+
19
+ - A description of the vulnerability
20
+ - Steps to reproduce the issue
21
+ - Potential impact of the vulnerability
22
+ - Any suggested fixes (if you have them)
23
+
24
+ ### Response Timeline
25
+
26
+ - **Initial Response**: Within 48 hours
27
+ - **Status Update**: Within 7 days
28
+ - **Resolution**: We aim to resolve critical vulnerabilities within 30 days
29
+
30
+ ### Disclosure Policy
31
+
32
+ - We follow responsible disclosure practices
33
+ - We will acknowledge your contribution in our security advisories (unless you prefer to remain anonymous)
34
+ - We may offer recognition in our contributors list for significant security reports
35
+
36
+ ## Security Features
37
+
38
+ GemGuard itself implements several security best practices:
39
+
40
+ - **Input Validation**: All user inputs are validated and sanitized
41
+ - **API Security**: Secure communication with vulnerability databases
42
+ - **Dependency Management**: Regular updates to dependencies
43
+ - **Code Quality**: Comprehensive testing and static analysis
44
+
45
+ ## Security Considerations for Users
46
+
47
+ When using GemGuard:
48
+
49
+ - Keep GemGuard updated to the latest version
50
+ - Review vulnerability reports carefully before applying fixes
51
+ - Use GemGuard in your CI/CD pipeline to catch vulnerabilities early
52
+ - Consider the source and severity of reported vulnerabilities
53
+
54
+ ## Contact
55
+
56
+ For security-related questions or concerns, contact:
57
+ - Email: security@wilburhimself.com
58
+ - GitHub: [@wilburhimself](https://github.com/wilburhimself)
data/gem_guard-0.1.0.gem ADDED
Binary file
data/gem_guard.gemspec CHANGED
@@ -8,13 +8,13 @@ Gem::Specification.new do |spec|
8
8
 
9
9
  spec.summary = "Supply chain security and vulnerability management for Ruby gems"
10
10
  spec.description = "A comprehensive tool to detect, report, and remediate dependency-related security risks in Ruby projects. Includes CVE scanning, SBOM generation, and CI/CD integration."
11
- spec.homepage = "https://github.com/wilbursuero/gem_guard"
11
+ spec.homepage = "https://github.com/wilburhimself/gem_guard"
12
12
  spec.license = "MIT"
13
13
  spec.required_ruby_version = ">= 3.0.0"
14
14
 
15
15
  spec.metadata["homepage_uri"] = spec.homepage
16
- spec.metadata["source_code_uri"] = "https://github.com/wilbursuero/gem_guard"
17
- spec.metadata["changelog_uri"] = "https://github.com/wilbursuero/gem_guard/blob/main/CHANGELOG.md"
16
+ spec.metadata["source_code_uri"] = "https://github.com/wilburhimself/gem_guard"
17
+ spec.metadata["changelog_uri"] = "https://github.com/wilburhimself/gem_guard/blob/main/CHANGELOG.md"
18
18
 
19
19
  spec.files = Dir.chdir(__dir__) do
20
20
  `git ls-files -z`.split("\x0").reject do |f|
@@ -26,10 +26,10 @@ Gem::Specification.new do |spec|
26
26
  spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
27
27
  spec.require_paths = ["lib"]
28
28
 
29
- spec.add_dependency "bundler", ">= 2.0"
30
29
  spec.add_dependency "thor", "~> 1.0"
31
30
  spec.add_dependency "json", "~> 2.0"
32
31
 
32
+ spec.add_development_dependency "bundler", ">= 2.0"
33
33
  spec.add_development_dependency "rspec", "~> 3.0"
34
34
  spec.add_development_dependency "standard", "~> 1.3"
35
35
  end
data/lib/gem_guard/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module GemGuard
2
- VERSION = "0.1.0"
2
+ VERSION = "0.1.4"
3
3
  end
metadata CHANGED
@@ -1,54 +1,55 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: gem_guard
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.1.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Wilbur Suero
8
+ autorequire:
8
9
  bindir: exe
9
10
  cert_chain: []
10
11
  date: 2025-08-09 00:00:00.000000000 Z
11
12
  dependencies:
12
13
  - !ruby/object:Gem::Dependency
13
- name: bundler
14
+ name: thor
14
15
  requirement: !ruby/object:Gem::Requirement
15
16
  requirements:
16
- - - ">="
17
+ - - "~>"
17
18
  - !ruby/object:Gem::Version
18
- version: '2.0'
19
+ version: '1.0'
19
20
  type: :runtime
20
21
  prerelease: false
21
22
  version_requirements: !ruby/object:Gem::Requirement
22
23
  requirements:
23
- - - ">="
24
+ - - "~>"
24
25
  - !ruby/object:Gem::Version
25
- version: '2.0'
26
+ version: '1.0'
26
27
  - !ruby/object:Gem::Dependency
27
- name: thor
28
+ name: json
28
29
  requirement: !ruby/object:Gem::Requirement
29
30
  requirements:
30
31
  - - "~>"
31
32
  - !ruby/object:Gem::Version
32
- version: '1.0'
33
+ version: '2.0'
33
34
  type: :runtime
34
35
  prerelease: false
35
36
  version_requirements: !ruby/object:Gem::Requirement
36
37
  requirements:
37
38
  - - "~>"
38
39
  - !ruby/object:Gem::Version
39
- version: '1.0'
40
+ version: '2.0'
40
41
  - !ruby/object:Gem::Dependency
41
- name: json
42
+ name: bundler
42
43
  requirement: !ruby/object:Gem::Requirement
43
44
  requirements:
44
- - - "~>"
45
+ - - ">="
45
46
  - !ruby/object:Gem::Version
46
47
  version: '2.0'
47
- type: :runtime
48
+ type: :development
48
49
  prerelease: false
49
50
  version_requirements: !ruby/object:Gem::Requirement
50
51
  requirements:
51
- - - "~>"
52
+ - - ">="
52
53
  - !ruby/object:Gem::Version
53
54
  version: '2.0'
54
55
  - !ruby/object:Gem::Dependency
@@ -93,7 +94,9 @@ files:
93
94
  - LICENSE.txt
94
95
  - README.md
95
96
  - Rakefile
97
+ - SECURITY.md
96
98
  - exe/gem_guard
99
+ - gem_guard-0.1.0.gem
97
100
  - gem_guard.gemspec
98
101
  - lib/gem_guard.rb
99
102
  - lib/gem_guard/analyzer.rb
@@ -103,13 +106,14 @@ files:
103
106
  - lib/gem_guard/version.rb
104
107
  - lib/gem_guard/vulnerability_fetcher.rb
105
108
  - plan.md
106
- homepage: https://github.com/wilbursuero/gem_guard
109
+ homepage: https://github.com/wilburhimself/gem_guard
107
110
  licenses:
108
111
  - MIT
109
112
  metadata:
110
- homepage_uri: https://github.com/wilbursuero/gem_guard
111
- source_code_uri: https://github.com/wilbursuero/gem_guard
112
- changelog_uri: https://github.com/wilbursuero/gem_guard/blob/main/CHANGELOG.md
113
+ homepage_uri: https://github.com/wilburhimself/gem_guard
114
+ source_code_uri: https://github.com/wilburhimself/gem_guard
115
+ changelog_uri: https://github.com/wilburhimself/gem_guard/blob/main/CHANGELOG.md
116
+ post_install_message:
113
117
  rdoc_options: []
114
118
  require_paths:
115
119
  - lib
@@ -124,7 +128,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
124
128
  - !ruby/object:Gem::Version
125
129
  version: '0'
126
130
  requirements: []
127
- rubygems_version: 3.6.2
131
+ rubygems_version: 3.5.22
132
+ signing_key:
128
133
  specification_version: 4
129
134
  summary: Supply chain security and vulnerability management for Ruby gems
130
135
  test_files: []