hackerone-client 0.16.0 → 0.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 99cdf21603a490301a3901f5f62430f10fc7a8425ee7ffe08944ac046d85c2d8
-  data.tar.gz: d390b20bc3611d74ab4d94a3fc22292f4c419ec7be9a6a0fc151b518fc713fa0
+  metadata.gz: '0819413f3285b7e89af03bb5fbee8f2e9f360b135c94942cf292b12777cfd7cd'
+  data.tar.gz: 375f398786433dadc34524b4b3752a0c1faa66fc2697458abe1c0e3c470797a4
 SHA512:
-  metadata.gz: 500e402f964f2e5bf53ec230e598ec9418846f4abcc45683e2e2e0b7dec220c05b406213b4a934f82a59ac6a2425d6fe35021c1aa8a0b8963a8a8cfd0d2d888e
-  data.tar.gz: 3d1fe92e5a018419a6d4c04b0651ffe0453c6d9f3194a26e8f4cf446ab20d029e6dda18e375bf5ebfd72373818f94a3f65f733db204a2341db118c1276db7a62
+  metadata.gz: 950f84f02de53fa2c7634306c4a9b39615fd71406f0962062af3aa4c77c7a4a920d871c8b0d968dba2944ed790febde017f0fb2f1da478fe0d680e562a67cd76
+  data.tar.gz: 82aabc2ed7af83602a7e6a29ea284bdb1e58869c1638791748bd3efb5bba7c14905755607a15c8e7b7bda10244399e12e16eb5c1345e57fed9e23775e010b1b7

data/CHANGELOG.md

@@ -1,6 +1,10 @@
+## [0.17.0] - 2020-03-23
+
+[Add support for updating the severity of an issue](https://github.com/oreoshake/hackerone-client/pull/50) (@rzhade3)
+
 ## [0.16.0] - 2020-03-23
 
-- [Add support for updating the severity of an issue](https://github.com/oreoshake/hackerone-client/pull/50) (@rzhade3)
+- Whooops, no change
 
 ## [0.15.0] - 2020-03-09
 

data/fixtures/vcr_cassettes/update_severity.yml

@@ -0,0 +1,78 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://api.hackerone.com/v1/reports/200/severities
+    body:
+      encoding: UTF-8
+      string: '{"data":{"type":"severity","attributes":{"rating":"high"}}}'
+    headers:
+      Authorization:
+      - Basic NOPE
+      User-Agent:
+      - Faraday v1.0.0
+      Content-Type:
+      - application/json
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - "*/*"
+  response:
+    status:
+      code: 200
+      message: OK
+    headers:
+      Date:
+      - Mon, 23 Mar 2020 22:11:50 GMT
+      Content-Type:
+      - application/json; charset=utf-8
+      Transfer-Encoding:
+      - chunked
+      Connection:
+      - keep-alive
+      Set-Cookie:
+      - __cfduid=defc457f4849bd5da92f0d0a9e21f70cf1585001510; expires=Wed, 22-Apr-20
+        22:11:50 GMT; path=/; Domain=api.hackerone.com; HttpOnly; SameSite=Lax; Secure
+      X-Request-Id:
+      - bc58a27f-3140-4457-b7b0-12a3c86f4f03
+      Etag:
+      - W/"30c2790e73edc770a9ed3fea69f0e8ea"
+      Cache-Control:
+      - max-age=0, private, must-revalidate
+      Strict-Transport-Security:
+      - max-age=31536000; includeSubDomains; preload
+      X-Frame-Options:
+      - DENY
+      X-Content-Type-Options:
+      - nosniff
+      X-Xss-Protection:
+      - 1; mode=block
+      X-Download-Options:
+      - noopen
+      X-Permitted-Cross-Domain-Policies:
+      - none
+      Referrer-Policy:
+      - strict-origin-when-cross-origin
+      Expect-Ct:
+      - enforce, max-age=86400
+      Content-Security-Policy:
+      - 'default-src ''none''; base-uri ''self''; block-all-mixed-content; child-src
+        www.youtube-nocookie.com; connect-src ''self'' www.google-analytics.com errors.hackerone.net;
+        font-src ''self''; form-action ''self''; frame-ancestors ''none''; img-src
+        ''self'' data: cover-photos.hackerone-user-content.com hackathon-photos.hackerone-user-content.com
+        profile-photos.hackerone-user-content.com hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com;
+        media-src ''self'' hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com;
+        script-src ''self'' www.google-analytics.com; style-src ''self'' ''unsafe-inline'';
+        report-uri https://errors.hackerone.net/api/30/csp-report/?sentry_key=61c1e2f50d21487c97a071737701f598'
+      Cf-Cache-Status:
+      - DYNAMIC
+      Server:
+      - cloudflare
+      Cf-Ray:
+      - 578b7d8e9faa3856-ATL
+    body:
+      encoding: ASCII-8BIT
+      string: '{"data":{"id":"668494","type":"severity","attributes":{"rating":"high","author_type":"Team","user_id":983615,"created_at":"2020-03-23T22:11:50.360Z"}}}'
+    http_version: null
+  recorded_at: Mon, 23 Mar 2020 22:11:50 GMT
+recorded_with: VCR 5.1.0

data/lib/hackerone/client/report.rb

@@ -26,6 +26,14 @@ module HackerOne
         duplicate
       ).map(&:to_sym).freeze
 
+      SEVERITY_RATINGS = %w(
+        none
+        low
+        medium
+        high
+        critical
+      ).freeze
+
       class << self
         def add_on_state_change_hook(proc)
           on_state_change_hooks << proc
@@ -64,6 +72,10 @@ module HackerOne
         attributes[:issue_tracker_reference_id]
       end
 
+      def severity
+        attributes[:severity]
+      end
+
       def state
         attributes[:state]
       end
@@ -161,6 +173,23 @@ module HackerOne
         Swag.new(response_body, program)
       end
 
+      def update_severity(rating:)
+        raise ArgumentError, "Invalid severity rating" unless SEVERITY_RATINGS.include?(rating)
+
+        request_body = {
+          type: "severity",
+          attributes: {
+            rating: rating
+          }
+        }
+        response_body = make_post_request(
+          "reports/#{id}/severities",
+          request_body: request_body
+        )
+        @report[:attributes][:severity] = { rating: rating }
+        Activities.build(response_body)
+      end
+
       def suggest_bounty(message:, amount:, bonus_amount: nil)
         request_body = {
           message: message,

data/lib/hackerone/client/version.rb

@@ -2,6 +2,6 @@
 
 module Hackerone
   module Client
-    VERSION = "0.16.0"
+    VERSION = "0.17.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hackerone-client
 version: !ruby/object:Gem::Version
-  version: 0.16.0
+  version: 0.17.0
 platform: ruby
 authors:
 - Neil Matatall
@@ -159,6 +159,7 @@ files:
 - fixtures/vcr_cassettes/traverse_through_all_activities.yml
 - fixtures/vcr_cassettes/triage_and_hook_assign_report_to_user.yml
 - fixtures/vcr_cassettes/update_policy.yml
+- fixtures/vcr_cassettes/update_severity.yml
 - fixtures/vcr_cassettes/user_find_fransrosen.yml
 - hackerone-client.gemspec
 - lib/hackerone/client.rb