hackerone-client 0.15.0 → 0.16.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f62ef7d9e2b28623a67a832dcff10032799de7de3f22977cbc3f15165809a819
-  data.tar.gz: b4203d5e1f0fd4beb6faebf08c7a9937fdf75512e9d75d8de1153af5c4c35664
+  metadata.gz: 99cdf21603a490301a3901f5f62430f10fc7a8425ee7ffe08944ac046d85c2d8
+  data.tar.gz: d390b20bc3611d74ab4d94a3fc22292f4c419ec7be9a6a0fc151b518fc713fa0
 SHA512:
-  metadata.gz: d960366891f9f7188140a984f9ad6c5a55aae2e9aa0d640165819021c2eeebb02ac59c883d8509466cc2a167c524b0940528b707af8b9beadb58ff58e75f6bbc
-  data.tar.gz: ef27ffb39ce4baa945a2af8e4ba85a1e0fdbfcebcd8a1cbd88780862b1385964461a88a2391041517ef1e69eb24384fa22cf171fb6360d02829782e053120220
+  metadata.gz: 500e402f964f2e5bf53ec230e598ec9418846f4abcc45683e2e2e0b7dec220c05b406213b4a934f82a59ac6a2425d6fe35021c1aa8a0b8963a8a8cfd0d2d888e
+  data.tar.gz: 3d1fe92e5a018419a6d4c04b0651ffe0453c6d9f3194a26e8f4cf446ab20d029e6dda18e375bf5ebfd72373818f94a3f65f733db204a2341db118c1276db7a62

data/.github/workflows/build.yml

@@ -1,19 +1,35 @@
 name: Build + Test
-on: [push]
+on: [pull_request]
 
 jobs:
   build:
     name: Build + Test
     runs-on: ubuntu-latest
-
+    strategy:
+      matrix:
+        ruby: [ '2.4', '2.5', '2.6', '2.7']
+    steps:
+      - uses: actions/checkout@master
+      - name: Set up Ruby ${{ matrix.ruby }}
+        uses: actions/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+      - name: Build and test with Rake with Ruby ${{ matrix.ruby }}
+        run: |
+          gem install bundler
+          bundle install --jobs 4 --retry 3
+          bundle exec rake spec
+  lint:
+    name: Rubocop
+    runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
-    - name: Set up Ruby 2.6
-      uses: actions/setup-ruby@v1
-      with:
-        version: 2.6.x
-    - name: Build and test with Rake
-      run: |
-        gem install bundler --version '1.0.0'
-        bundle install --jobs 4 --retry 3
-        bundle exec rake spec
+      - uses: actions/checkout@master
+      - name: Set up Ruby 2.6
+        uses: actions/setup-ruby@v1
+        with:
+          ruby-version: 2.6
+      - name: Run linters
+        run: |
+          gem install bundler
+          bundle install --jobs 4 --retry 3
+          bundle exec rake rubocop

data/.rubocop.yml

@@ -0,0 +1,4 @@
+inherit_gem:
+  rubocop-github:
+    - config/default.yml
+require: rubocop-performance

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## [0.16.0] - 2020-03-23
+
+- [Add support for updating the severity of an issue](https://github.com/oreoshake/hackerone-client/pull/50) (@rzhade3)
+
 ## [0.15.0] - 2020-03-09
 
 - [Add 'update program policy' API support](https://github.com/oreoshake/hackerone-client/pull/47) (@rzhade3)

data/Gemfile

@@ -1,4 +1,6 @@
-source 'https://rubygems.org'
+# frozen_string_literal: true
+
+source "https://rubygems.org"
 
 # Specify your gem's dependencies in hackerone-client.gemspec
 gemspec
@@ -7,8 +9,14 @@ group :developement do
   gem "pry"
 end
 
+group :test do
+  gem "rubocop", "< 0.68"
+  gem "rubocop-github"
+  gem "rubocop-performance"
+end
+
 group :guard do
-  gem "growl", :require => RUBY_PLATFORM.include?('darwin') && 'growl'
-  gem "rb-fsevent", :require => RUBY_PLATFORM.include?('darwin') && 'rb-fsevent'
+  gem "growl", require: RUBY_PLATFORM.include?("darwin") && "growl"
   gem "guard-rspec"
+  gem "rb-fsevent", require: RUBY_PLATFORM.include?("darwin") && "rb-fsevent"
 end

data/Guardfile

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 guard :rspec, cmd: "bundle exec rspec" do
   require "guard/rspec/dsl"
   dsl = Guard::RSpec::Dsl.new(self)

data/Rakefile

@@ -1,6 +1,15 @@
+# frozen_string_literal: true
+
 require "bundler/gem_tasks"
 require "rspec/core/rake_task"
 
 RSpec::Core::RakeTask.new(:spec)
 
-task :default => :spec
+task default: :spec
+
+begin
+  require "rubocop/rake_task"
+  RuboCop::RakeTask.new
+rescue LoadError
+  task(:rubocop) { $stderr.puts "RuboCop is disabled" }
+end

data/bin/console

@@ -1,4 +1,5 @@
 #!/usr/bin/env ruby
+# frozen_string_literal: true
 
 require "bundler/setup"
 require "hackerone/client"

data/hackerone-client.gemspec

@@ -1,7 +1,9 @@
 # coding: utf-8
-lib = File.expand_path('../lib', __FILE__)
+# frozen_string_literal: true
+
+lib = File.expand_path("../lib", __FILE__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'hackerone/client/version'
+require "hackerone/client/version"
 
 Gem::Specification.new do |spec|
   spec.name          = "hackerone-client"

data/lib/hackerone/client.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 require "faraday"
 require "json"
 require "active_support/time"
@@ -24,7 +26,7 @@ module HackerOne
     DEFAULT_HIGH_RANGE = 2500...4999
     DEFAULT_CRITICAL_RANGE = 5000...100_000_000
 
-    LENIENT_MODE_ENV_VARIABLE = 'HACKERONE_CLIENT_LENIENT_MODE'
+    LENIENT_MODE_ENV_VARIABLE = "HACKERONE_CLIENT_LENIENT_MODE"
 
     class << self
       ATTRS = [:low_range, :medium_range, :high_range, :critical_range].freeze
@@ -102,7 +104,7 @@ module HackerOne
       def post(endpoint, body)
         response = with_retry do
           self.class.hackerone_api_connection.post do |req|
-            req.headers['Content-Type'] = 'application/json'
+            req.headers["Content-Type"] = "application/json"
             req.body = body.to_json
             req.url endpoint
           end
@@ -114,7 +116,7 @@ module HackerOne
       def get(endpoint, params = nil)
         response = with_retry do
           self.class.hackerone_api_connection.get do |req|
-            req.headers['Content-Type'] = 'application/json'
+            req.headers["Content-Type"] = "application/json"
             req.params = params || {}
             req.url endpoint
           end
@@ -129,7 +131,7 @@ module HackerOne
         elsif response.status.to_s.start_with?("5")
           raise RuntimeError, "API called failed, probably their fault: #{response.body}"
         elsif response.success?
-          response_body_json = JSON.parse(response.body, :symbolize_names => true)
+          response_body_json = JSON.parse(response.body, symbolize_names: true)
           if extract_data && response_body_json.key?(:data)
             response_body_json[:data]
           else
@@ -145,13 +147,13 @@ module HackerOne
           raise NotConfiguredError, "HACKERONE_TOKEN_NAME HACKERONE_TOKEN environment variables must be set"
         end
 
-        @connection ||= Faraday.new(:url => "https://api.hackerone.com/v1") do |faraday|
+        @connection ||= Faraday.new(url: "https://api.hackerone.com/v1") do |faraday|
           faraday.basic_auth(ENV["HACKERONE_TOKEN_NAME"], ENV["HACKERONE_TOKEN"])
           faraday.adapter Faraday.default_adapter
         end
       end
 
-      def with_retry(attempts=3, &block)
+      def with_retry(attempts = 3, &block)
         attempts_remaining = attempts
 
         begin

data/lib/hackerone/client/activity.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     module Activities
@@ -84,14 +86,14 @@ module HackerOne
       end
 
       ACTIVITY_TYPE_CLASS_MAPPING = {
-        'activity-bounty-awarded' => BountyAwarded,
-        'activity-swag-awarded' => SwagAwarded,
-        'activity-user-assigned-to-bug' => UserAssignedToBug,
-        'activity-group-assigned-to-bug' => GroupAssignedToBug,
-        'activity-bug-triaged' => BugTriaged,
-        'activity-reference-id-added' => ReferenceIdAdded,
-        'activity-comment' => CommentAdded,
-        'activity-bounty-suggested' => BountySuggested
+        "activity-bounty-awarded" => BountyAwarded,
+        "activity-swag-awarded" => SwagAwarded,
+        "activity-user-assigned-to-bug" => UserAssignedToBug,
+        "activity-group-assigned-to-bug" => GroupAssignedToBug,
+        "activity-bug-triaged" => BugTriaged,
+        "activity-reference-id-added" => ReferenceIdAdded,
+        "activity-comment" => CommentAdded,
+        "activity-bounty-suggested" => BountySuggested
       }.freeze
 
       def self.build(activity_data)

data/lib/hackerone/client/address.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Address

data/lib/hackerone/client/bounty.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Bounty

data/lib/hackerone/client/group.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Group

data/lib/hackerone/client/incremental/activities.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     module Incremental
@@ -48,7 +50,7 @@ module HackerOne
 
         def current_page
           @current_page ||= make_get_request(
-            'incremental/activities',
+            "incremental/activities",
             extract_data: false,
             params: {
               handle: program.handle,

data/lib/hackerone/client/member.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Member

data/lib/hackerone/client/program.rb

@@ -1,4 +1,6 @@
-require_relative './resource_helper'
+# frozen_string_literal: true
+
+require_relative "./resource_helper"
 
 module HackerOne
   module Client
@@ -71,7 +73,7 @@ module HackerOne
           "programs/#{id}/swag",
           params: { page: { number: page_number, size: page_size } }
         )
-        response_body.map{|r| Swag.new(r, self) }
+        response_body.map { |r| Swag.new(r, self) }
       end
 
       private

data/lib/hackerone/client/report.rb

@@ -1,6 +1,8 @@
-require_relative './resource_helper'
-require_relative './weakness'
-require_relative './activity'
+# frozen_string_literal: true
+
+require_relative "./resource_helper"
+require_relative "./weakness"
+require_relative "./activity"
 
 module HackerOne
   module Client
@@ -118,7 +120,7 @@ module HackerOne
 
       # Bounty writeups just use the key, and not the label value.
       def writeup_classification
-        classification_label().split("-").first
+        classification_label.split("-").first
       end
 
       def activities
@@ -304,7 +306,7 @@ module HackerOne
         request_body[:id] = assignee_id if assignee_id
 
         response = HackerOne::Client::Api.hackerone_api_connection.put do |req|
-          req.headers['Content-Type'] = 'application/json'
+          req.headers["Content-Type"] = "application/json"
           req.url "reports/#{id}/assignee"
           req.body = { data: request_body }.to_json
         end

data/lib/hackerone/client/reporter.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Reporter

data/lib/hackerone/client/resource_helper.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     module ResourceHelper
@@ -14,7 +16,7 @@ module HackerOne
 
       def make_put_request(url, request_body:, extract_data: true)
         response = HackerOne::Client::Api.hackerone_api_connection.put do |req|
-          req.headers['Content-Type'] = 'application/json'
+          req.headers["Content-Type"] = "application/json"
           req.url url
           req.body = { data: request_body }.to_json
         end
@@ -24,7 +26,7 @@ module HackerOne
 
       def make_post_request(url, request_body:, extract_data: true)
         response = HackerOne::Client::Api.hackerone_api_connection.post do |req|
-          req.headers['Content-Type'] = 'application/json'
+          req.headers["Content-Type"] = "application/json"
           req.url url
           req.body = { data: request_body }.to_json
         end
@@ -34,7 +36,7 @@ module HackerOne
 
       def make_get_request(url, params: {}, extract_data: true)
         response = HackerOne::Client::Api.hackerone_api_connection.get do |req|
-          req.headers['Content-Type'] = 'application/json'
+          req.headers["Content-Type"] = "application/json"
           req.url url
           req.params = params
         end

data/lib/hackerone/client/structured_scope.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class StructuredScope

data/lib/hackerone/client/swag.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Swag

data/lib/hackerone/client/user.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class User

data/lib/hackerone/client/version.rb

@@ -1,5 +1,7 @@
+# frozen_string_literal: true
+
 module Hackerone
   module Client
-    VERSION = "0.15.0"
+    VERSION = "0.16.0"
   end
 end

data/lib/hackerone/client/weakness.rb

@@ -1,17 +1,19 @@
+# frozen_string_literal: true
+
 module HackerOne
   module Client
     class Weakness
       class << self
         def validate_cwe!(cwe)
-          fail NotAnOwaspWeaknessError if cwe.upcase.start_with?('CAPEC-')
-          fail StandardError::ArgumentError unless cwe.upcase.start_with?('CWE-')
+          fail NotAnOwaspWeaknessError if cwe.upcase.start_with?("CAPEC-")
+          fail StandardError::ArgumentError unless cwe.upcase.start_with?("CWE-")
         end
 
         def extract_cwe_number(cwe)
           return if cwe.nil?
           validate_cwe!(cwe)
 
-          cwe.split('CWE-').last.to_i
+          cwe.split("CWE-").last.to_i
         end
       end
 
@@ -39,20 +41,20 @@ module HackerOne
       }
 
       OWASP_TOP_10_2013_TO_CWE = {
-        'A1-Injection' => [77, 78, 88, 89, 90, 91, 564],
-        'A2-AuthSession' =>
+        "A1-Injection" => [77, 78, 88, 89, 90, 91, 564],
+        "A2-AuthSession" =>
           [287, 613, 522, 256, 384, 472, 346, 441, 523, 620, 640, 319, 311],
-        'A3-XSS' => [79],
-        'A4-DirectObjRef' => [639, 99, 22],
-        'A5-Misconfig' => [16, 2, 215, 548, 209],
-        'A6-DataExposure' => [312, 319, 310, 326, 320, 311, 325, 328, 327],
-        'A7-MissingACL' => [285, 287],
-        'A8-CSRF' => [352, 642, 613, 346, 441],
-        'A9-KnownVuln' => [],
-        'A10-Redirects' => [601],
+        "A3-XSS" => [79],
+        "A4-DirectObjRef" => [639, 99, 22],
+        "A5-Misconfig" => [16, 2, 215, 548, 209],
+        "A6-DataExposure" => [312, 319, 310, 326, 320, 311, 325, 328, 327],
+        "A7-MissingACL" => [285, 287],
+        "A8-CSRF" => [352, 642, 613, 346, 441],
+        "A9-KnownVuln" => [],
+        "A10-Redirects" => [601],
       }.freeze
 
-      OWASP_DEFAULT = 'A0-Other'.freeze
+      OWASP_DEFAULT = "A0-Other".freeze
 
       def initialize(weakness)
         @attributes = weakness

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: hackerone-client
 version: !ruby/object:Gem::Version
-  version: 0.15.0
+  version: 0.16.0
 platform: ruby
 authors:
 - Neil Matatall
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2020-03-09 00:00:00.000000000 Z
+date: 2020-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -118,6 +118,7 @@ files:
 - ".github/workflows/build.yml"
 - ".gitignore"
 - ".rspec"
+- ".rubocop.yml"
 - ".travis.yml"
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md