gems-validator 0.5.7 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aab6d65cdff118be26f2fcc29fd226e1cd9bd08f179bdeda8661c66b03e9b33c
-  data.tar.gz: 2482a3dabd4ee8df84bf149d0776c1fdd402b3f00270ede2c8a680d26255d3ac
+  metadata.gz: 76fa5108c8e84d00beaf558c2053da3c2ec8bf106a058205ceaf0e1c0ef0c7b5
+  data.tar.gz: 37e0c7e2d96f082f2b5025b3af2507295604f3c67a0c6284178df8bc133c88f0
 SHA512:
-  metadata.gz: '0923fd02051b35544e232bcad929d0ffcfe160c759ba7658f16a681c0e0fa6fbbb69dbc157a6b5903734e2bf402f846c1b7640c75dd746f7fb104ff1e6c27516'
-  data.tar.gz: 57d445cc5088e7e3ad1841fc9bf0859686d94d60183a1b3b70af5dda59aa4bcfbef5ef6e98970e48b1ca7d780a1f625de198f402329bb721b7fdf5a2616ede5c
+  metadata.gz: 4a026c35f37e2c7e479d937dd0261f234d561b4547a08dfdc6468b34892965f6033e44e0562773d3332ea13738a3df04062be56994afa136f3ad77767216bff2
+  data.tar.gz: '08c0a4993b088a479938f6f8faae63dcec861ee76d1b38fe96b228dcc532e8ab8cbb08ced9d10018b6e679428c4407ca1fd1bf6a088d9a3e8727a4dc6df7e567'

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    gems-validator (0.5.7)
+    gems-validator (0.6.0)
 
 GEM
   remote: https://rubygems.org/

data/lib/gems-validator/audit-service.rb

@@ -10,9 +10,12 @@ module GemsValidator
       generate_data()
     end
 
-    def is_a_vulnerable_gem?(gem_name)
-      unless @audit_data[gem_name][:vulnerabilities].empty?
-        generate_messages(gem_name)
+    def is_a_vulnerable_gem?(gem)
+      p gem
+      name = gem.name
+      version = gem.version.to_s
+      unless @audit_data[name].nil?
+        generate_messages(name, version)
       end
     end
 
@@ -22,22 +25,22 @@ module GemsValidator
       translate_default_criticalities[criticality] || 'não definido'
     end
 
-    def generate_messages(gem_name)
-      GemsValidator::OutputMessage.warn("A gem #{@audit_data[gem_name][:name]} na versao #{@audit_data[gem_name][:version]} apresenta #{@audit_data[gem_name][:vulnerabilities].size} vulnerabilidade#{@audit_data[gem_name][:vulnerabilities].size > 1 ? "s" : ""}")
-      @audit_data[gem_name][:vulnerabilities].map.with_index do |vulnerability, number|
+    def generate_messages(name, version)
+      GemsValidator::OutputMessage.warn("A gem #{name} na versão #{version} apresenta #{@audit_data[name]["vulnerabilities"].size} vulnerabilidade#{@audit_data[name]["vulnerabilities"].size > 1 ? "s" : ""}")
+      @audit_data[name]["vulnerabilities"].map.with_index do |vulnerability, number|
         GemsValidator::OutputMessage.warn("*   Título: #{vulnerability[:title]} \n                               Nível: #{get_translate_criticality(vulnerability[:level])} \n                               URL: #{vulnerability[:url]}")
       end
     end
 
     def generate_data()
-      @audit_response["results"].map do |audit_item|
-        if (@audit_data[audit_item["gem"]["name"]])
-          @audit_data[audit_item["gem"]["name"]][:vulnerabilities].push({"title": audit_item["advisory"]["title"], "level": audit_item["advisory"]["criticality"], "url": audit_item["advisory"]["url"]})
+
+      @audit_response["results"]&.map do |audit_item|
+        gem_name = audit_item["gem"]["name"]
+        if (@audit_data[gem_name])
+          @audit_data[gem_name]["vulnerabilities"].push({"title": audit_item["advisory"]["title"], "level": audit_item["advisory"]["criticality"], "url": audit_item["advisory"]["url"]})
         else
-          @audit_data[audit_item["gem"]["name"]] = {
-            "name": audit_item["gem"]["name"],
-            "version": audit_item["gem"]["version"],
-            "vulnerabilities": [
+          @audit_data[gem_name] = {
+            "vulnerabilities" => [
               {
                 "title": audit_item["advisory"]["title"], 
                 "level": audit_item["advisory"]["criticality"], 

data/lib/gems-validator/gems-service.rb

@@ -28,7 +28,7 @@ module GemsValidator
     #   }
     # }
     def get_gems()
-      JSON.parse(gems_formatted_request.body)["data"]
+      gems_formatted_request
     end
 
     private
@@ -51,12 +51,18 @@ module GemsValidator
           request = Net::HTTP::Get.new uri
           request["Authorization"] = @access_token
           response = http.request request
-          File.write("#{@pwd}/audit-response.json", response.body["data"])
-          response
+          parse_body = JSON.parse(response.body)["data"]
+          generate_file("#{@pwd}/.euax-homologated-libraries", parse_body.to_json)
+          parse_body
         end
       rescue => exception
-        File.read("#{@pwd}/audit-response.json")
+        JSON.parse(File.read("#{@pwd}/.euax-homologated-libraries/gems-response.json"))
       end
     end
+
+    def generate_file(base_url, data)
+      Dir.mkdir(base_url) unless File.exists?(base_url)
+      File.write("#{base_url}/gems-response.json", data)
+    end
   end
 end

data/lib/gems-validator/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module GemsValidator
-  VERSION = "0.5.7"
+  VERSION = "0.6.0"
 end

data/lib/gems-validator.rb

@@ -20,7 +20,7 @@ module GemsValidator
 
       Bundler::Plugin.add_hook('before-install') do |gem|
         GemsValidator::Validate.exec(gem)
-        auditService.is_a_vulnerable_gem?(gem.name)
+        auditService.is_a_vulnerable_gem?(gem)
       end
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gems-validator
 version: !ruby/object:Gem::Version
-  version: 0.5.7
+  version: 0.6.0
 platform: ruby
 authors:
 - henriquesml