gems-validator 0.5.3 → 0.5.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ecbe8b8affbecf34d425806340d9398bb2759c99bcbb9971d90e22d0a5cd5d7a
-  data.tar.gz: 730cc89f767d8c79ca3161c539d8b694c1af6f0fd007a4aba48572b7e82e6710
+  metadata.gz: e54d261632eec7a415e36a35489300056c66a8f8786ce1e3d6dad1f30378d53a
+  data.tar.gz: f60b702e16d53411618570cf52281ef9783289575ad33645063c56d93f0e034f
 SHA512:
-  metadata.gz: 38642871a6867ca6cd5c2e31bd3f84656bf1f670119b0b054e7d806e1da67469db6ecf77c75e1a48953aee89c65c136f2573171301085744bf5fa1b5bb9d5a23
-  data.tar.gz: 75a672e7e0645e7a5a623063701e407fb71e9a1120599581104e028d06b2c2437c5a8d85a751ecc46e71b29c38410cfe1029ff85fdba72f0803557431f722dc4
+  metadata.gz: '083fe44173a798d6826447e343edad71bfad2cc88a1826306a53c36e7e455c077f657abceafed2ba69f84e50228ab4b36cae7e697b94d457a13170c60062c595'
+  data.tar.gz: 1db8c121adfd239b6b321cfb994d1a7b1c863447628f55ed3880475bd972669417a63261f83ef975e8e937781665bc8a8467a2e3d27cc5b8881c5a8e9eb0e974

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    gems-validator (0.4.3)
+    gems-validator (0.5.5)
 
 GEM
   remote: https://rubygems.org/

data/lib/gems-validator/audit-service.rb

@@ -3,15 +3,16 @@
 module GemsValidator
   class AuditService
     def initialize()
-      @pwd = Dir.pwd
-      system "bundler-audit check --format json --output #{@pwd}/bundler-audit.json"
-      @read_file = read_parsed_file
+      @audit_response = %x[bundler-audit check --format json]
+      parse_response()
+
+      @audit_data = {}
+      generate_data()
     end
 
     def is_a_vulnerable_gem?(gem_name)
-      gem_vulnerabilities = @read_file["results"].select { |item| item["gem"]["name"] == gem_name }
-      unless gem_vulnerabilities.empty?
-        generate_messages(gem_vulnerabilities)
+      unless @audit_data[gem_name][:vulnerabilities].empty?
+        generate_messages(gem_name)
       end
     end
 
@@ -21,16 +22,39 @@ module GemsValidator
       translate_default_criticalities[criticality] || 'não definido'
     end
 
-    def generate_messages(gem_vulnerabilities)
-      GemsValidator::OutputMessage.warn("A gem #{gem_vulnerabilities[0]["gem"]["name"]} na versao #{gem_vulnerabilities[0]["gem"]["version"]} apresenta #{gem_vulnerabilities.size} vulnerabilidade#{gem_vulnerabilities.size > 1 ? "s" : ""}")
-      gem_vulnerabilities.map.with_index do |vulnerability, number|
-        GemsValidator::OutputMessage.warn("*   Título: #{vulnerability["advisory"]["title"]} \n                               Nível: #{get_translate_criticality(vulnerability["advisory"]["criticality"])} \n                               URL: #{vulnerability["advisory"]["url"]}")
+    def generate_messages(gem_name)
+      GemsValidator::OutputMessage.warn("A gem #{@audit_data[gem_name][:name]} na versao #{@audit_data[gem_name][:version]} apresenta #{@audit_data[gem_name][:vulnerabilities].size} vulnerabilidade#{@audit_data[gem_name][:vulnerabilities].size > 1 ? "s" : ""}")
+      @audit_data[gem_name][:vulnerabilities].map.with_index do |vulnerability, number|
+        GemsValidator::OutputMessage.warn("*   Título: #{vulnerability[:title]} \n                               Nível: #{get_translate_criticality(vulnerability[:level])} \n                               URL: #{vulnerability[:url]}")
+      end
+    end
+
+    def generate_data()
+      @audit_response["results"].map do |audit_item|
+        if (@audit_data[audit_item["gem"]["name"]])
+          @audit_data[audit_item["gem"]["name"]][:vulnerabilities].push({"title": audit_item["advisory"]["title"], "level": audit_item["advisory"]["criticality"], "url": audit_item["advisory"]["url"]})
+        else
+          @audit_data[audit_item["gem"]["name"]] = {
+            "name": audit_item["gem"]["name"],
+            "version": audit_item["gem"]["version"],
+            "vulnerabilities": [
+              {
+                "title": audit_item["advisory"]["title"], 
+                "level": audit_item["advisory"]["criticality"], 
+                "url": audit_item["advisory"]["url"]
+              }
+            ]
+          }
+        end
       end
     end
     
-    def read_parsed_file
-      file = File.read("#{@pwd}/bundler-audit.json")
-      parsed_file = JSON.parse(file)
+    def parse_response()
+      begin
+        @audit_response = JSON.parse(@audit_response)
+      rescue => exception
+        GemsValidator::OutputMessage.error("Erro ao gerar dados de pacotes vulneraveis.")
+      end
     end
   end
 end

data/lib/gems-validator/gems-service.rb

@@ -4,6 +4,7 @@ module GemsValidator
   class GemsService
     def initialize()
       @access_token = get_token
+      @pwd = Dir.pwd
     end
 
     # Response:
@@ -45,10 +46,16 @@ module GemsValidator
 
     def gems_formatted_request
       uri = URI('http://ec2-54-173-249-114.compute-1.amazonaws.com:3333/gems/formatted')
-      Net::HTTP.start(uri.host, uri.port) do |http|
-        request = Net::HTTP::Get.new uri
-        request["Authorization"] = @access_token
-        http.request request
+      begin
+        Net::HTTP.start(uri.host, uri.port) do |http|
+          request = Net::HTTP::Get.new uri
+          request["Authorization"] = @access_token
+          response = http.request request
+          File.write("#{@pwd}/audit-response.json", response.body["data"])
+          response
+        end
+      rescue => exception
+        File.read("#{@pwd}/audit-response.json")
       end
     end
   end

data/lib/gems-validator/output-message.rb

@@ -3,7 +3,7 @@
 module GemsValidator
   class OutputMessage
     def self.error(message)
-      Bundler.ui.error("[GemsValidator::Error] - #{message}")
+      Bundler::GemspecError.new("[GemsValidator::Error] - #{message}")
     end
   
     def self.warn(message)

data/lib/gems-validator/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GemsValidator
-  VERSION = "0.5.3"
+  VERSION = "0.5.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: gems-validator
 version: !ruby/object:Gem::Version
-  version: 0.5.3
+  version: 0.5.6
 platform: ruby
 authors:
 - henriquesml
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-06-24 00:00:00.000000000 Z
+date: 2022-06-27 00:00:00.000000000 Z
 dependencies: []
 description: gems-validator
 email: