govuk_security_audit 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0186900431fcb7a64b6fa9b0eeb83217369f4c20
-  data.tar.gz: 3fbfaf078853329c17b6532d34031508f2f7580e
+  metadata.gz: 86bf11c0372c7eb2a116f98469f6f96cd9491433
+  data.tar.gz: 5f5b96ff8ac9e804c2e9c17c64f313fc3b4e4859
 SHA512:
-  metadata.gz: f29d3a8fbfe483d2a689bd69e11bfbf6fb121aeed5f0661697e07efd9a1ef71173bb594876bf0f6b9d8324d184fcb0eb141bb87bdb338398a7743df82259ba91
-  data.tar.gz: 9cc2aa8ffe989911c65a8a5a411c6fead2d152a0056f19ef095550cfb1fe4cb3e89146d79edba8be8581c5adebe1896767a92d4a3dc708c7af2a5b2ddc264a8b
+  metadata.gz: a5661b9d3067acac6023d4f2379459f137c33a195738c85b6da5c3dd0bbb412bbf08cdc686306f83c1987e1c670cfde986d03c1b4cabeb92ca4dfa4071c8d7c6
+  data.tar.gz: 26c1439d574f1e342ac3e62218fb7cab4e7415e9463f0230fb2c35462b703a5747d1831781b15ef384f5ad6d5300455d757a4e7f81be84a5e3e05955a11f929f

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+## 0.1.2
+
+- Support being run from outside a Bundler environment
+- Don't update the advisory DB twice when checking Github repos
+
 ## 0.1.1
 
 - Perform an update of the advisory DB before every check by default, disable with `--skip-update`

data/lib/govuk_security_audit/cli.rb

@@ -11,7 +11,6 @@ module GovukSecurityAudit
 
     desc "github USER REPO [REF]", "check the Github repo USER/REPO at an optional REF. Defaults to master."
     def github(user, repo, ref="master")
-      update unless options[:skip_update]
       uri = URI.parse("https://raw.githubusercontent.com/#{user}/#{repo}/#{ref}/Gemfile.lock")
       http = Net::HTTP.new(uri.host, uri.port)
       http.use_ssl = true

data/lib/govuk_security_audit/scanner.rb

@@ -12,6 +12,10 @@ module GovukSecurityAudit
 
       @root = File.dirname(path)
       @database = Bundler::Audit::Database.new
+
+      # Stop Bundler trying to find a Gemfile to accompany our Lockfiles
+      ENV["BUNDLE_GEMFILE"] = "Dummy"
+
       @lockfile = Bundler::LockfileParser.new(File.read(path))
     end
   end

data/lib/govuk_security_audit/version.rb

@@ -1,3 +1,3 @@
 module GovukSecurityAudit
-  VERSION = "0.1.1"
+  VERSION = "0.1.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: govuk_security_audit
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Government Digital Service