govuk_security_audit 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 86bf11c0372c7eb2a116f98469f6f96cd9491433
-  data.tar.gz: 5f5b96ff8ac9e804c2e9c17c64f313fc3b4e4859
+  metadata.gz: 0b7e6d77a6393213e0cb776cafe449efefe01410
+  data.tar.gz: 744e8dbc7dd3fe1e6059fcd9c3aefb17c2b8b564
 SHA512:
-  metadata.gz: a5661b9d3067acac6023d4f2379459f137c33a195738c85b6da5c3dd0bbb412bbf08cdc686306f83c1987e1c670cfde986d03c1b4cabeb92ca4dfa4071c8d7c6
-  data.tar.gz: 26c1439d574f1e342ac3e62218fb7cab4e7415e9463f0230fb2c35462b703a5747d1831781b15ef384f5ad6d5300455d757a4e7f81be84a5e3e05955a11f929f
+  metadata.gz: 9706a3c39945973936b9b0e68ad2a89f74dffe2e081da9827b2b1e5e56fb11046693b2a19d1de57db65e035f9626cb55f5a3005de2a12d5efc7ed79ea14fcb0d
+  data.tar.gz: 7cf083233908fa00ed5d45b14a8799fecb5a14b42120d32f2402830607fd5ebafe60909bb270c3b28f58a24ababcd509ec90e9b64948ebb598b2fead89c6513d

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.2.0
+
+- Supports `--ignore` option to skip given vulnerabilities
+
 ## 0.1.2
 
 - Support being run from outside a Bundler environment

data/README.md

@@ -46,3 +46,9 @@ Check a specific branch on Github:
 ```
 govuk_security_audit github alphagov whitehall upgrade-rails
 ```
+
+Checks but ignores specific vulnerabilities
+
+```
+govuk_security_audit check ~/govuk/whitehall --ignore OSVDB-131677 advisory
+```

data/lib/govuk_security_audit/cli.rb

@@ -8,6 +8,7 @@ require "govuk_security_audit/scanner"
 module GovukSecurityAudit
   class CLI < Thor
     class_option :skip_update, type: :boolean, default: false
+    class_option :ignore, type: :array, default: []
 
     desc "github USER REPO [REF]", "check the Github repo USER/REPO at an optional REF. Defaults to master."
     def github(user, repo, ref="master")
@@ -30,12 +31,12 @@ module GovukSecurityAudit
     end
 
     desc "check [PATH]", "check the Gemfile at PATH, or the current directory."
-    def check(path=Dir.pwd)
+    def check(path = Dir.pwd)
       update unless options[:skip_update]
       scanner    = Scanner.new(path)
       vulnerable = false
 
-      scanner.scan do |result|
+      scanner.scan(:ignore => options[:ignore]) do |result|
         vulnerable = true
 
         case result

data/lib/govuk_security_audit/scanner.rb

@@ -4,8 +4,9 @@ require "bundler/lockfile_parser"
 
 module GovukSecurityAudit
   class Scanner < Bundler::Audit::Scanner
-    def initialize(path=Dir.pwd)
+    def initialize(path = Dir.pwd)
       path = File.expand_path(path)
+
       if File.directory?(path)
         path = File.join(path, "Gemfile.lock")
       end

data/lib/govuk_security_audit/version.rb

@@ -1,3 +1,3 @@
 module GovukSecurityAudit
-  VERSION = "0.1.2"
+  VERSION = "0.2.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: govuk_security_audit
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Government Digital Service
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2015-07-21 00:00:00.000000000 Z
+date: 2016-02-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -123,7 +123,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.5
+rubygems_version: 2.4.5.1
 signing_key: 
 specification_version: 4
 summary: Check repos for gem vulnerabilities