gems-validator 0.4.3 → 0.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab34a7d9ea4625c880476c97fd355b40d254f29ed6d9750db1f4564cd1ed8b8b
-  data.tar.gz: 53e50ad4df15efb914a787fb8307810918b112ff96986123c81b00cfbc7ce257
+  metadata.gz: 370c6f5fa08850cc91cf25127eb0dbf1c01ac9222a9338f88b5bebaf3d4bdb01
+  data.tar.gz: 5aad4c4cb344573179a5891b580c1caa0e977c6e7bcaaba84cee717757093ebd
 SHA512:
-  metadata.gz: d724ced1423b2deb614f000997789efda0a2cfb7167b59e5fa74e0f22afd2826eff62e3822c7eaf61cc4b2e5ea04ffb95fd5e136b56f4b5ebcc97ffb970fc6aa
-  data.tar.gz: f8f354bfd8a7976258b878adec62ef7a4815b1ed50a5a052f52f679aae624cf66db04b89c26d374e4fcc685ccfbcdf76f23cbb96474ab3fe43eb42d5040ab7f2
+  metadata.gz: ef8e9e30874bae83d9a21e624e5e5720909749dd406ab899b5f3c3a71cf2daed194cb993274a0e8b8beb342684d19d6c0a3ac0a41223fc0dc1c2080445a9d057
+  data.tar.gz: c10fb16dfeaa29954f2c198fd1f79828aff45284dff1d1dabf88b2f14eb58141f8b5e75a14ec0d4e9821ce3ba372672cd4c2dee5cd2747e86389b45d3e54fb02

data/lib/gems-validator/audit-service.rb

@@ -3,7 +3,8 @@
 module GemsValidator
   class AuditService
     def initialize()
-      system 'bundler-audit check --format json --output bundler-audit.json'
+      @pwd = Dir.pwd
+      system "bundler-audit check --format json --output #{@pwd}/bundler-audit.json"
       @read_file = read_parsed_file
     end
 
@@ -18,15 +19,14 @@ module GemsValidator
         return Bundler.ui.confirm "[GemsValidator::Success] - A gem não apresenta nenhum vulnerabilidade!"
       end
 
-      Bundler.ui.warn "[GemsValidator::Error] - A gem #{gem_vulnerabilities[0]["gem"]["name"]} na versao #{gem_vulnerabilities[0]["gem"]["version"]} apresenta #{gem_vulnerabilities.size} vulnerabilidade#{gem_vulnerabilities.size ? "s" : ""}"
-
+      GemsValidator::OutputMessage.warn("A gem #{gem_vulnerabilities[0]["gem"]["name"]} na versao #{gem_vulnerabilities[0]["gem"]["version"]} apresenta #{gem_vulnerabilities.size} vulnerabilidade#{gem_vulnerabilities.size ? "s" : ""}")
       gem_vulnerabilities.map.with_index do |vulnerability, number|
-        Bundler.ui.error "#{number+1} -> #{vulnerability["advisory"]["title"]} \n Nivel: #{vulnerability["advisory"]["criticality"]} \n URL da issue: #{vulnerability["advisory"]["url"]}"
+        GemsValidator::OutputMessage.warn("#{number+1} -> #{vulnerability["advisory"]["title"]} \n Nivel: #{vulnerability["advisory"]["criticality"]} \n URL da issue: #{vulnerability["advisory"]["url"]}")
       end
     end
     
     def read_parsed_file
-      file = File.read('bundler-audit.json')
+      file = File.read("#{@pwd}/bundler-audit.json")
       parsed_file = JSON.parse(file)
     end
   end

data/lib/gems-validator/output-message.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+module GemsValidator
+  class OutputMessage
+    def self.error(message)
+      Bundler.ui.error("[GemsValidator::Error] - #{message}")
+    end
+  
+    def self.warn(message)
+      Bundler.ui.warn("[GemsValidator::Warning] - #{message}")
+    end
+  
+    def self.success(message)
+      Bundler.ui.confirm("[GemsValidator::Success] - #{message}")
+    end
+  end
+end

data/lib/gems-validator/validate.rb

@@ -9,9 +9,9 @@ module GemsValidator
           is_blocked?
           is_pending?
           is_allowed?
-          Bundler.ui.confirm "[GemsValidator::Success] - A gem #{@gem.name} está homologada e pode ser instalada!"
+          GemsValidator::OutputMessage.success("A gem #{@gem.name} está homologada e pode ser instalada!")
         rescue => error
-          raise GemsValidator::FormatError.new(gem: @gem.name, message: error.to_s)
+          raise GemsValidator::OutputMessage.error("Não foi possível instalar a gem #{@gem.name}. Motivo: #{error.to_s}")
         end
       end
 
@@ -59,7 +59,7 @@ module GemsValidator
       def is_deprecated?
         if gems_from_service["allowed_gems"][@gem.name]["deprecated"]
           message = gems_from_service["allowed_gems"][@gem.name]["deprecated_message"]
-          Bundler.ui.warn "[GemsValidator::Warn] - A gem #{@gem.name} está depreciada. Motivo: #{message}"
+          GemsValidator::OutputMessage.warn("A gem #{@gem.name} está depreciada. Motivo: #{message}")
         end
       end
 

data/lib/gems-validator/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GemsValidator
-  VERSION = "0.4.3"
+  VERSION = "0.5.0"
 end

data/lib/gems-validator.rb

@@ -5,7 +5,7 @@ require 'uri'
 require 'json'
 
 require_relative "gems-validator/audit-service"
-require_relative "gems-validator/format-error"
+require_relative "gems-validator/output-message"
 require_relative "gems-validator/gems-service"
 require_relative "gems-validator/validate"
 require_relative "gems-validator/version"
@@ -16,11 +16,11 @@ module GemsValidator
       return if defined?(@registered) && @registered
       @registered = true
 
-      GemsValidator::AuditService.new
+      auditService = GemsValidator::AuditService.new
 
       Bundler::Plugin.add_hook('before-install') do |gem|
         GemsValidator::Validate.exec(gem)
-        GemsValidator::AuditService.is_a_vulnerable_gem(gem.name)
+        auditService.is_a_vulnerable_gem?(gem.name)
       end
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gems-validator
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.5.0
 platform: ruby
 authors:
 - henriquesml
@@ -27,8 +27,8 @@ files:
 - docker-compose.yml
 - lib/gems-validator.rb
 - lib/gems-validator/audit-service.rb
-- lib/gems-validator/format-error.rb
 - lib/gems-validator/gems-service.rb
+- lib/gems-validator/output-message.rb
 - lib/gems-validator/validate.rb
 - lib/gems-validator/version.rb
 - plugins.rb

data/lib/gems-validator/format-error.rb

@@ -1,9 +0,0 @@
-# frozen_string_literal: true
-
-module GemsValidator
-  class FormatError < Bundler::InstallError
-    def initialize(gem:, message:)
-      super("[GemsValidator::Error] - Não foi possível instalar a gem #{gem}. Motivo: #{message}")
-    end
-  end
-end