gems-validator 0.4.4 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f6d23660bc52918624510a7edfee7023db5e26d4dfb0cca83cf2251a0db959c8
|
4
|
+
data.tar.gz: dda664cba9cb19f6e263bf525ac8f5a0f426ab840ca7ba35252873d4c8d70c6f
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1787422c64451e75086da0c7bd09be6119a2a94fbfbff5fe2f2364fc0d532862912ac0bc80b337b4284c571643f700bf10b7fa34828e9f869ed7013d246607ea
|
7
|
+
data.tar.gz: fefa9335637533e8c6c7a15dcd57d9dbd6909533026fcd63dfbe724f76eb598469585eb5e5cd1bfb2479ef33f3cd6d46e81f6e59dbeebf8dabdbde49cf93d036
|
@@ -19,10 +19,9 @@ module GemsValidator
|
|
19
19
|
return Bundler.ui.confirm "[GemsValidator::Success] - A gem não apresenta nenhum vulnerabilidade!"
|
20
20
|
end
|
21
21
|
|
22
|
-
|
23
|
-
|
22
|
+
GemsValidator::OutputMessage.warn("A gem #{gem_vulnerabilities[0]["gem"]["name"]} na versao #{gem_vulnerabilities[0]["gem"]["version"]} apresenta #{gem_vulnerabilities.size} vulnerabilidade#{gem_vulnerabilities.size > 1 ? "s" : ""}")
|
24
23
|
gem_vulnerabilities.map.with_index do |vulnerability, number|
|
25
|
-
|
24
|
+
GemsValidator::OutputMessage.warn("* #{vulnerability["advisory"]["title"]} \n Nivel: #{vulnerability["advisory"]["criticality"]} \n URL da issue: #{vulnerability["advisory"]["url"]}")
|
26
25
|
end
|
27
26
|
end
|
28
27
|
|
@@ -0,0 +1,17 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
module GemsValidator
|
4
|
+
class OutputMessage
|
5
|
+
def self.error(message)
|
6
|
+
Bundler.ui.error("[GemsValidator::Error] - #{message}")
|
7
|
+
end
|
8
|
+
|
9
|
+
def self.warn(message)
|
10
|
+
Bundler.ui.warn("[GemsValidator::Warning] - #{message}")
|
11
|
+
end
|
12
|
+
|
13
|
+
def self.success(message)
|
14
|
+
Bundler.ui.confirm("[GemsValidator::Success] - #{message}")
|
15
|
+
end
|
16
|
+
end
|
17
|
+
end
|
@@ -9,9 +9,9 @@ module GemsValidator
|
|
9
9
|
is_blocked?
|
10
10
|
is_pending?
|
11
11
|
is_allowed?
|
12
|
-
|
12
|
+
GemsValidator::OutputMessage.success("A gem #{@gem.name} está homologada e pode ser instalada!")
|
13
13
|
rescue => error
|
14
|
-
raise GemsValidator::
|
14
|
+
raise GemsValidator::OutputMessage.error("Não foi possível instalar a gem #{@gem.name}. Motivo: #{error.to_s}")
|
15
15
|
end
|
16
16
|
end
|
17
17
|
|
@@ -59,7 +59,7 @@ module GemsValidator
|
|
59
59
|
def is_deprecated?
|
60
60
|
if gems_from_service["allowed_gems"][@gem.name]["deprecated"]
|
61
61
|
message = gems_from_service["allowed_gems"][@gem.name]["deprecated_message"]
|
62
|
-
|
62
|
+
GemsValidator::OutputMessage.warn("A gem #{@gem.name} está depreciada. Motivo: #{message}")
|
63
63
|
end
|
64
64
|
end
|
65
65
|
|
data/lib/gems-validator.rb
CHANGED
@@ -5,7 +5,7 @@ require 'uri'
|
|
5
5
|
require 'json'
|
6
6
|
|
7
7
|
require_relative "gems-validator/audit-service"
|
8
|
-
require_relative "gems-validator/
|
8
|
+
require_relative "gems-validator/output-message"
|
9
9
|
require_relative "gems-validator/gems-service"
|
10
10
|
require_relative "gems-validator/validate"
|
11
11
|
require_relative "gems-validator/version"
|
@@ -16,11 +16,11 @@ module GemsValidator
|
|
16
16
|
return if defined?(@registered) && @registered
|
17
17
|
@registered = true
|
18
18
|
|
19
|
-
GemsValidator::AuditService.new
|
19
|
+
auditService = GemsValidator::AuditService.new
|
20
20
|
|
21
21
|
Bundler::Plugin.add_hook('before-install') do |gem|
|
22
22
|
GemsValidator::Validate.exec(gem)
|
23
|
-
|
23
|
+
auditService.is_a_vulnerable_gem?(gem.name)
|
24
24
|
end
|
25
25
|
end
|
26
26
|
end
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: gems-validator
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.5.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- henriquesml
|
@@ -27,8 +27,8 @@ files:
|
|
27
27
|
- docker-compose.yml
|
28
28
|
- lib/gems-validator.rb
|
29
29
|
- lib/gems-validator/audit-service.rb
|
30
|
-
- lib/gems-validator/format-error.rb
|
31
30
|
- lib/gems-validator/gems-service.rb
|
31
|
+
- lib/gems-validator/output-message.rb
|
32
32
|
- lib/gems-validator/validate.rb
|
33
33
|
- lib/gems-validator/version.rb
|
34
34
|
- plugins.rb
|