hrw 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 29964c1dc1b1e5d27840114037110b04ae07e214783739361a9d76f659a7ccf1
4
- data.tar.gz: 5b6994599f96ca06e690be85e0dddb28e6bc205349619790e0cad0c3b852743f
3
+ metadata.gz: dbba0fe3260de3b2fa81c4428efe4a86c043ff20fb8c7712ac241899ac361820
4
+ data.tar.gz: e4907dda7c537ad24e12948a094e163b1100bd3cd6eb5541a2e5934512f11a6d
5
5
  SHA512:
6
- metadata.gz: da7ec23ef79a61a8cc8df033aec22dcb36a68c3b748e77bf388f61baa742eec15eaee1e51cabf495b314a5ffe50cb781f871c1902cd6368697b1333c54f1df61
7
- data.tar.gz: 9c324d51d7c260c53aaaf553bf1e5db7ad2dd1e48096609ab715ccbf6cb32cbbba7a1f6e9c15001bd51bd9be1d1aee845270d6137b10ab476fa66e7e06f89435
6
+ metadata.gz: 59cf11acc493daca6748c03d72f9e2a7e8e66f8976482191a6be8b7010045224f832a2a32b8e9a0945f5b6ed17bdeda07ef9e256e4a9895a33cf0cf09208e6f5
7
+ data.tar.gz: 6f7ec5cd54d78a22319aea97271682ab2b2219223b6210afee04e925f26570ba398911aaa02d25a18d616dbb540d11a799b6d706eaf78e213a91d3574ae10f1d
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- hrw (0.2.0)
4
+ hrw (0.2.2)
5
5
  http (~> 4.1, >= 4.1.1)
6
6
  rainbow (~> 3.0)
7
7
 
data/exe/hrw CHANGED
@@ -27,7 +27,7 @@ scanner = Hrw::Detector.detect
27
27
  specs = scanner.scan
28
28
 
29
29
  api = Hrw::API.new(options.url)
30
- hash = api.submit(specs)
30
+ hash = api.submit(specs, scanner.package_manager)
31
31
  result = api.retrieve(hash)
32
32
 
33
33
  formatter = Hrw::Formatter.new
@@ -36,4 +36,4 @@ vulnerable_deps = formatter.format(result)
36
36
  unless vulnerable_deps.empty?
37
37
  formatter.print_vulnerable_deps(vulnerable_deps)
38
38
  exit(1)
39
- end
39
+ end
data/lib/hrw/api.rb CHANGED
@@ -29,12 +29,13 @@ module Hrw
29
29
  # Submit dependencies to server
30
30
  #
31
31
  # @param [Array] dependencies
32
+ # @param [String] pkg_manager
32
33
  # @return [String] Checksum for those dependencies
33
- def submit(dependencies)
34
+ def submit(dependencies, pkg_manager)
34
35
  body = {
35
36
  hash: _calc_hash(dependencies),
36
37
  pkg_manager: {
37
- name: :rubygems
38
+ name: pkg_manager
38
39
  },
39
40
  packages: dependencies
40
41
  }
@@ -10,12 +10,15 @@ module Hrw
10
10
  # Used to scan gem lock file
11
11
  #
12
12
  class Gemfile
13
+ attr_reader :package_manager
14
+
13
15
  # Initialize a scanner
14
16
  #
15
17
  # @param [String] root The path to the project root
16
18
  # @param [String] lockfile
17
19
  # The name for the lock file, default is `Gemfile.lock`
18
20
  def initialize(root = Dir.pwd, lockfile = 'Gemfile.lock')
21
+ @package_manager = 'rubygems'
19
22
  @root = File.expand_path(root)
20
23
  @lockfile = Bundler::LockfileParser.new(
21
24
  File.read(File.join(@root, lockfile))
@@ -6,12 +6,15 @@ module Hrw
6
6
  # Used to scan gem lock file
7
7
  #
8
8
  class Pipfile
9
+ attr_reader :package_manager
10
+
9
11
  # Class constructor
10
12
  #
11
13
  # @param [String] root The path to the project root
12
14
  # @param [String] lockfile
13
15
  # The name for the lock file, default is `Pipfile.lock`
14
16
  def initialize(root = Dir.pwd, lockfile = 'Pipfile.lock')
17
+ @package_manager = 'pypi'
15
18
  @root = root
16
19
  @lockfile = lockfile
17
20
  end
data/lib/hrw/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Hrw
2
- VERSION = "0.2.1"
2
+ VERSION = '0.2.2'.freeze
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: hrw
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.2.1
4
+ version: 0.2.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - hi_ztz
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-04-04 00:00:00.000000000 Z
11
+ date: 2019-04-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler