hakiri 0.7.0 → 0.7.2

data/README.md

@@ -1,4 +1,6 @@
 # Secure Rails with Hakiri
+[![Gem Version](https://badge.fury.io/rb/hakiri.svg)](http://badge.fury.io/rb/hakiri)
+[![security](https://hakiri.io/github/vasinov/hakiri_toolbelt/master.svg)](https://hakiri.io/github/vasinov/hakiri_toolbelt/master)
 
 Hakiri Toolbelt is a command line interface for the Hakiri platform. It allows Ruby on Rails developers to automate version scraping of Ruby gems, servers, databases and other technologies used in their stacks. For each technology Hakiri shows CVE vulnerabilities. Here is a snippet of how it works:
 
@@ -116,6 +118,8 @@ We just went through the most basic Hakiri use case. Here are links to docs desc
 - Commit, do not make changes to version.
 - Submit a pull request.
 
+To run the gem locally use the following command: `ruby -Ilib ./bin/hakiri`.
+
 ## License
 
 (The MIT license)

data/bin/hakiri

@@ -24,6 +24,8 @@ command 'system:scan' do |c|
   c.summary = 'Configure your stack with a manifest JSON file.'
   c.description = 'This command grabs your custom stack JSON file and shows vulnerabilities in your project.'
   c.option '--manifest STRING', String, 'Path to your manifest JSON file'
+  c.option '--force', 'Force showing vulnerabilities without asking for it first.'
+  c.option '--quiet', 'Only show vulnerability report'
 
   c.action do |args, options|
     options.default :manifest => './manifest.json'
@@ -66,6 +68,8 @@ command 'gemfile:scan' do |c|
   c.summary = 'Check if Gemfile.lock has any vulnerabilities.'
   c.description = 'This command grabs your Gemfile.lock file and shows vulnerabilities in it.'
   c.option '--gemfile STRING', String, 'Path to your Gemfile.lock'
+  c.option '--force', 'Force showing vulnerabilities without asking for it first.'
+  c.option '--quiet', 'Only show vulnerability report'
 
   c.action do |args, options|
     options.default :gemfile => './Gemfile.lock'
@@ -97,6 +101,7 @@ command 'code:report' do |c|
   c.summary = 'Check code report on the latest push.'
   c.description = 'This command connects to Hakiri and returns a report on vulnerabilities from the latest push.'
   c.option '--stack INTEGER', String, 'Your stack ID.'
+  c.option '--force', 'Force showing vulnerabilities without asking for it first.'
 
   c.action do |args, options|
     cli = Hakiri::Code.new(args, options)

data/lib/hakiri/cli/cli.rb

@@ -8,4 +8,8 @@ class Hakiri::Cli
     @http_client = Hakiri::HttpClient.new
     @stack = Hakiri::Stack.new()
   end
+  
+  def say_q msg
+    say msg unless @options.quiet
+  end
 end

data/lib/hakiri/cli/code.rb

@@ -21,7 +21,7 @@ class Hakiri::Code < Hakiri::Cli
         else
           say "!      #{response[:warnings_count]} warnings were found in the code"
 
-          if agree 'Show all of them? (yes or no) '
+          if @options.force || agree('Show all of them? (yes or no) ')
             puts ' '
             response[:warnings].each do |warning|
               say warning[:warning_type]

data/lib/hakiri/cli/gemfile.rb

@@ -10,11 +10,11 @@ class Hakiri::Gemfile < Hakiri::Cli
         say '       No gems were found in your Gemfile.lock...'
       else
         @stack.technologies.each do |technology_slug, payload|
-          say "       Found #{payload[:name]} #{payload[:version]}"
+          say_q "       Found #{payload[:name]} #{payload[:version]}"
         end
 
         # GETTING VULNERABILITIES
-        say '-----> Searching for vulnerabilities...'
+        say_q '-----> Searching for vulnerabilities...'
         params = { :technologies => @stack.technologies }
         response = @http_client.get_issues(params)
 
@@ -34,7 +34,7 @@ class Hakiri::Gemfile < Hakiri::Cli
               end
             end
 
-            if agree 'Show all of them? (yes or no) '
+            if @options.force || agree('Show all of them? (yes or no) ')
               puts ' '
               response[:technologies].each do |technology|
                 technology[:issues].each do |issue|

data/lib/hakiri/cli/system.rb

@@ -8,17 +8,17 @@ class Hakiri::System < Hakiri::Cli
       @stack.fetch_versions
 
       # GETTING VERSIONS
-      say '-----> Scanning system for software versions...'
+      say_q '-----> Scanning system for software versions...'
 
       if @stack.technologies.empty?
         say '       No versions were found...'
       else
         @stack.technologies.each do |technology_slug, payload|
-          say "       Found #{payload[:name]} #{payload[:version]}"
+          say_q "       Found #{payload[:name]} #{payload[:version]}"
         end
 
         # GETTING VULNERABILITIES
-        say '-----> Searching for vulnerabilities...'
+        say_q '-----> Searching for vulnerabilities...'
         params = { :technologies => @stack.technologies }
         response = @http_client.get_issues(params)
 
@@ -38,7 +38,7 @@ class Hakiri::System < Hakiri::Cli
               end
             end
 
-            if agree 'Show all of them? (yes or no) '
+            if @options.force || agree('Show all of them? (yes or no) ')
               puts ' '
               response[:technologies].each do |technology|
                 technology[:issues].each do |issue|

data/lib/hakiri/version.rb

@@ -1,3 +1,3 @@
 module Hakiri
-  VERSION = '0.7.0'
-end
+  VERSION = '0.7.2'
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hakiri
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.7.2
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-02-04 00:00:00.000000000 Z
+date: 2014-05-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler