gitlab-secret_detection 0.1.0 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (26) hide show
  1. checksums.yaml +4 -4
  2. data/LICENSE +19 -0
  3. data/README.md +337 -0
  4. data/config/log.rb +23 -0
  5. data/lib/gitlab/secret_detection/core/finding.rb +40 -0
  6. data/lib/gitlab/secret_detection/core/gitleaks.toml +1084 -0
  7. data/lib/gitlab/secret_detection/core/response.rb +41 -0
  8. data/lib/gitlab/secret_detection/core/ruleset.rb +40 -0
  9. data/lib/gitlab/secret_detection/core/scanner.rb +352 -0
  10. data/lib/gitlab/secret_detection/core/status.rb +19 -0
  11. data/lib/gitlab/secret_detection/core.rb +14 -0
  12. data/lib/gitlab/secret_detection/grpc/client/grpc_client.rb +145 -0
  13. data/lib/gitlab/secret_detection/grpc/client/stream_request_enumerator.rb +24 -0
  14. data/lib/gitlab/secret_detection/grpc/generated/.gitkeep +0 -0
  15. data/lib/gitlab/secret_detection/grpc/generated/secret_detection_pb.rb +25 -0
  16. data/lib/gitlab/secret_detection/grpc/generated/secret_detection_services_pb.rb +30 -0
  17. data/lib/gitlab/secret_detection/grpc/scanner_service.rb +154 -0
  18. data/lib/gitlab/secret_detection/grpc.rb +12 -0
  19. data/lib/gitlab/secret_detection/utils/certificate.rb +108 -0
  20. data/lib/gitlab/secret_detection/utils/memoize.rb +151 -0
  21. data/lib/gitlab/secret_detection/utils.rb +11 -0
  22. data/lib/gitlab/secret_detection/version.rb +25 -1
  23. data/lib/gitlab/secret_detection.rb +4 -3
  24. data/lib/gitlab.rb +6 -0
  25. data/proto/secret_detection.proto +75 -0
  26. metadata +84 -30
metadata CHANGED
@@ -1,76 +1,130 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: gitlab-secret_detection
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0
4
+ version: 0.7.1
5
5
  platform: ruby
6
6
  authors:
7
- - group::static analysis
7
+ - group::secret detection
8
+ - Stan Hu
9
+ - gitlab_rubygems
8
10
  autorequire:
9
- bindir: exe
11
+ bindir: bin
10
12
  cert_chain: []
11
- date: 2023-10-10 00:00:00.000000000 Z
13
+ date: 2024-10-09 00:00:00.000000000 Z
12
14
  dependencies:
13
15
  - !ruby/object:Gem::Dependency
14
- name: rspec
16
+ name: grpc
15
17
  requirement: !ruby/object:Gem::Requirement
16
18
  requirements:
17
- - - "~>"
19
+ - - '='
18
20
  - !ruby/object:Gem::Version
19
- version: '3.0'
20
- type: :development
21
+ version: 1.63.0
22
+ type: :runtime
21
23
  prerelease: false
22
24
  version_requirements: !ruby/object:Gem::Requirement
23
25
  requirements:
24
- - - "~>"
26
+ - - '='
27
+ - !ruby/object:Gem::Version
28
+ version: 1.63.0
29
+ - !ruby/object:Gem::Dependency
30
+ name: grpc-tools
31
+ requirement: !ruby/object:Gem::Requirement
32
+ requirements:
33
+ - - '='
34
+ - !ruby/object:Gem::Version
35
+ version: 1.63.0
36
+ type: :runtime
37
+ prerelease: false
38
+ version_requirements: !ruby/object:Gem::Requirement
39
+ requirements:
40
+ - - '='
25
41
  - !ruby/object:Gem::Version
26
- version: '3.0'
42
+ version: 1.63.0
27
43
  - !ruby/object:Gem::Dependency
28
- name: rubocop
44
+ name: parallel
29
45
  requirement: !ruby/object:Gem::Requirement
30
46
  requirements:
31
47
  - - "~>"
32
48
  - !ruby/object:Gem::Version
33
- version: '1.50'
34
- type: :development
49
+ version: '1.19'
50
+ type: :runtime
35
51
  prerelease: false
36
52
  version_requirements: !ruby/object:Gem::Requirement
37
53
  requirements:
38
54
  - - "~>"
39
55
  - !ruby/object:Gem::Version
40
- version: '1.50'
56
+ version: '1.19'
57
+ - !ruby/object:Gem::Dependency
58
+ name: re2
59
+ requirement: !ruby/object:Gem::Requirement
60
+ requirements:
61
+ - - '='
62
+ - !ruby/object:Gem::Version
63
+ version: 2.7.0
64
+ type: :runtime
65
+ prerelease: false
66
+ version_requirements: !ruby/object:Gem::Requirement
67
+ requirements:
68
+ - - '='
69
+ - !ruby/object:Gem::Version
70
+ version: 2.7.0
41
71
  - !ruby/object:Gem::Dependency
42
- name: rubocop-rspec
72
+ name: toml-rb
43
73
  requirement: !ruby/object:Gem::Requirement
44
74
  requirements:
45
75
  - - "~>"
46
76
  - !ruby/object:Gem::Version
47
- version: '2.22'
48
- type: :development
77
+ version: 2.2.0
78
+ type: :runtime
49
79
  prerelease: false
50
80
  version_requirements: !ruby/object:Gem::Requirement
51
81
  requirements:
52
82
  - - "~>"
53
83
  - !ruby/object:Gem::Version
54
- version: '2.22'
55
- description: The gitlab-secret_detection gem accepts one or more git blobs, matches
56
- them against a defined ruleset of regular expressions (based on gitleaks.toml used
57
- by secrets analyzer), and returns scan results.
84
+ version: 2.2.0
85
+ description: |-
86
+ GitLab Secret Detection gem accepts text-based payloads, matches them against predefined secret
87
+ detection rules (based on the ruleset used by GitLab Secrets analyzer), and returns the scan results. The gem also
88
+ supports customization of the scan behaviour.
58
89
  email:
59
- - eng-dev-secure-static-analysis@gitlab.com
90
+ - eng-dev-secure-secret-detection@gitlab.com
91
+ - stan@gitlab.com
60
92
  executables: []
61
93
  extensions: []
62
94
  extra_rdoc_files: []
63
95
  files:
96
+ - LICENSE
97
+ - README.md
98
+ - config/log.rb
99
+ - lib/gitlab.rb
64
100
  - lib/gitlab/secret_detection.rb
101
+ - lib/gitlab/secret_detection/core.rb
102
+ - lib/gitlab/secret_detection/core/finding.rb
103
+ - lib/gitlab/secret_detection/core/gitleaks.toml
104
+ - lib/gitlab/secret_detection/core/response.rb
105
+ - lib/gitlab/secret_detection/core/ruleset.rb
106
+ - lib/gitlab/secret_detection/core/scanner.rb
107
+ - lib/gitlab/secret_detection/core/status.rb
108
+ - lib/gitlab/secret_detection/grpc.rb
109
+ - lib/gitlab/secret_detection/grpc/client/grpc_client.rb
110
+ - lib/gitlab/secret_detection/grpc/client/stream_request_enumerator.rb
111
+ - lib/gitlab/secret_detection/grpc/generated/.gitkeep
112
+ - lib/gitlab/secret_detection/grpc/generated/secret_detection_pb.rb
113
+ - lib/gitlab/secret_detection/grpc/generated/secret_detection_services_pb.rb
114
+ - lib/gitlab/secret_detection/grpc/scanner_service.rb
115
+ - lib/gitlab/secret_detection/utils.rb
116
+ - lib/gitlab/secret_detection/utils/certificate.rb
117
+ - lib/gitlab/secret_detection/utils/memoize.rb
65
118
  - lib/gitlab/secret_detection/version.rb
66
- homepage: https://gitlab.com/gitlab-org/gitlab/-/tree/master/gems/gitlab-secret_detection
119
+ - proto/secret_detection.proto
120
+ homepage: https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-service
67
121
  licenses:
68
122
  - MIT
69
123
  metadata:
70
124
  rubygems_mfa_required: 'true'
71
- homepage_uri: https://gitlab.com/gitlab-org/gitlab/-/tree/master/gems/gitlab-secret_detection
72
- source_code_uri: https://gitlab.com/gitlab-org/gitlab/-/tree/master/gems/gitlab-secret_detection
73
- changelog_uri: https://gitlab.com/gitlab-org/gitlab/-/tree/master/gems/gitlab-secret_detection/CHANGELOG.md
125
+ homepage_uri: https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-service
126
+ source_code_uri: https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-service
127
+ changelog_uri: https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-service/-/blob/main/CHANGELOG.md
74
128
  post_install_message:
75
129
  rdoc_options: []
76
130
  require_paths:
@@ -79,16 +133,16 @@ required_ruby_version: !ruby/object:Gem::Requirement
79
133
  requirements:
80
134
  - - ">="
81
135
  - !ruby/object:Gem::Version
82
- version: '3.0'
136
+ version: '3.2'
83
137
  required_rubygems_version: !ruby/object:Gem::Requirement
84
138
  requirements:
85
139
  - - ">="
86
140
  - !ruby/object:Gem::Version
87
141
  version: '0'
88
142
  requirements: []
89
- rubygems_version: 3.4.18
143
+ rubygems_version: 3.4.19
90
144
  signing_key:
91
145
  specification_version: 4
92
- summary: The gitlab-secret_detection gem performs regex matching on git blobs that
93
- may include secrets.
146
+ summary: GitLab Secret Detection gem scans for the secret leaks in the given text-based
147
+ payloads.
94
148
  test_files: []