holepicker 0.1.1 → 0.1.2

data/Changelog.markdown

@@ -0,0 +1,9 @@
+#### Version 0.1.2 (23.02.2013)
+
+* fixed issue on Ruby 1.8
+* fixed issue with relative paths like '.' in parameters
+* fixed parsing gemfiles with platform-specific gems (e.g. mingw32)
+
+#### Version 0.1.1 (18.82.2013)
+
+* first public version

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    holepicker (0.1)
+    holepicker (0.1.2)
       json (>= 1.7.7)
       rainbow (>= 1.1.4)
 

data/README.markdown

@@ -79,12 +79,13 @@ Use an offline copy of the data file - useful if you really need to run the tool
 
 ## Similar projects
 
-The [bundler-audit](https://github.com/postmodern/bundler-audit) project that was also created this week has a similar purpose, but it only uses an offline issue list and it only scans the current project.
-
-The [gemcanary](https://gemcanary.com/) project might be something similar, but it hasn't been released yet (as of 16.02).
-
-It might make sense to agree on a shared list of vulnerabilities in the future that these and other projects could share - no point having the same information in a few different places maintained by a few people in parallel.
+There are a few other projects with a similar purpose, take a look if HolePicker isn't exactly what you need:
 
+* [bundler-audit](https://github.com/postmodern/bundler-audit) - scans the current project when the app is loaded
+* [bundler-organization_audit](https://github.com/grosser/bundler-organization_audit) - scans all your projects on GitHub
+* [ruby-advisory-db](https://github.com/rubysec/ruby-advisory-db) - a shared database of vulnerabilities - I'll try to integrate holepicker with it later
+* [gemcanary](https://gemcanary.com/) - some kind of web service, not released yet (as of 23.02)
+* [gems-status](https://github.com/jordimassaguerpla/gems-status) - a more general tool for checking everything that might be wrong with your gems (work in progress)
 
 ## Credits & contributing
 

data/bin/holepicker

@@ -31,6 +31,11 @@ OptionParser.new do |opts|
     options[:offline] = true
   end
 
+  opts.on("-r", "--skip-releases",
+      "Skip gemfiles in 'releases' directory (like -c but will include non-Capistrano deploys)") do
+    options[:skip_releases] = true
+  end
+
   opts.on("-h", "--help", "Display this help") do
     puts opts
     exit

data/lib/holepicker/gem.rb

@@ -2,7 +2,7 @@ require 'rubygems'
 
 module HolePicker
   class Gem
-    GEM_LINE_PATTERN = /([\w\-]+) \(([^)]+)\)/
+    GEM_LINE_PATTERN = /([\w\-]+) \(([\d\w]+(\.[\d\w]+)*)(\-\w+)*\)/
 
     attr_reader :name, :version
 

data/lib/holepicker/online_database.rb

@@ -1,6 +1,7 @@
 require 'holepicker/database'
 require 'holepicker/utils'
 require 'net/http'
+require 'net/https'
 
 module HolePicker
   class OnlineDatabase < Database

data/lib/holepicker/scanner.rb

@@ -71,6 +71,7 @@ module HolePicker
     end
 
     def scan_path(path)
+      path = File.expand_path(path)
       gemfiles = @roots ? find_gemfiles_in_configs(path) : find_gemfiles_in_path(path)
       gemfiles.each { |f| scan_gemfile(f) }
     end
@@ -108,8 +109,8 @@ module HolePicker
       if @matched_gemfiles == 0
         puts "No vulnerabilities found."
       else
-        puts ("#{@matched_gems} vulnerable #{Utils.pluralize(@matched_gems, 'gem')} found in " +
-          "#{@matched_gemfiles} #{Utils.pluralize(@matched_gemfiles, 'gemfile')}!").color(:red) + "\n\n"
+        puts(("#{@matched_gems} vulnerable #{Utils.pluralize(@matched_gems, 'gem')} found in " +
+          "#{@matched_gemfiles} #{Utils.pluralize(@matched_gemfiles, 'gemfile')}!").color(:red) + "\n\n")
 
         @found_vulnerabilities.sort_by(&:id).each do |v|
           puts "[#{v.tag}] #{v.day}: #{v.url}"

data/lib/holepicker/version.rb

@@ -1,7 +1,7 @@
 require 'rubygems'
 
 module HolePicker
-  VERSION = "0.1.1"
+  VERSION = "0.1.2"
 
   def self.version
     ::Gem::Version.new(VERSION)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: holepicker
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
   prerelease: 
 platform: ruby
 authors:
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-02-18 00:00:00.000000000 Z
+date: 2013-02-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json