hrw 0.2.1 → 0.2.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile.lock +1 -1
- data/exe/hrw +2 -2
- data/lib/hrw/api.rb +3 -2
- data/lib/hrw/scanner/gemfile.rb +3 -0
- data/lib/hrw/scanner/pipfile.rb +3 -0
- data/lib/hrw/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: dbba0fe3260de3b2fa81c4428efe4a86c043ff20fb8c7712ac241899ac361820
|
4
|
+
data.tar.gz: e4907dda7c537ad24e12948a094e163b1100bd3cd6eb5541a2e5934512f11a6d
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 59cf11acc493daca6748c03d72f9e2a7e8e66f8976482191a6be8b7010045224f832a2a32b8e9a0945f5b6ed17bdeda07ef9e256e4a9895a33cf0cf09208e6f5
|
7
|
+
data.tar.gz: 6f7ec5cd54d78a22319aea97271682ab2b2219223b6210afee04e925f26570ba398911aaa02d25a18d616dbb540d11a799b6d706eaf78e213a91d3574ae10f1d
|
data/Gemfile.lock
CHANGED
data/exe/hrw
CHANGED
@@ -27,7 +27,7 @@ scanner = Hrw::Detector.detect
|
|
27
27
|
specs = scanner.scan
|
28
28
|
|
29
29
|
api = Hrw::API.new(options.url)
|
30
|
-
hash = api.submit(specs)
|
30
|
+
hash = api.submit(specs, scanner.package_manager)
|
31
31
|
result = api.retrieve(hash)
|
32
32
|
|
33
33
|
formatter = Hrw::Formatter.new
|
@@ -36,4 +36,4 @@ vulnerable_deps = formatter.format(result)
|
|
36
36
|
unless vulnerable_deps.empty?
|
37
37
|
formatter.print_vulnerable_deps(vulnerable_deps)
|
38
38
|
exit(1)
|
39
|
-
|
39
|
+
end
|
data/lib/hrw/api.rb
CHANGED
@@ -29,12 +29,13 @@ module Hrw
|
|
29
29
|
# Submit dependencies to server
|
30
30
|
#
|
31
31
|
# @param [Array] dependencies
|
32
|
+
# @param [String] pkg_manager
|
32
33
|
# @return [String] Checksum for those dependencies
|
33
|
-
def submit(dependencies)
|
34
|
+
def submit(dependencies, pkg_manager)
|
34
35
|
body = {
|
35
36
|
hash: _calc_hash(dependencies),
|
36
37
|
pkg_manager: {
|
37
|
-
name:
|
38
|
+
name: pkg_manager
|
38
39
|
},
|
39
40
|
packages: dependencies
|
40
41
|
}
|
data/lib/hrw/scanner/gemfile.rb
CHANGED
@@ -10,12 +10,15 @@ module Hrw
|
|
10
10
|
# Used to scan gem lock file
|
11
11
|
#
|
12
12
|
class Gemfile
|
13
|
+
attr_reader :package_manager
|
14
|
+
|
13
15
|
# Initialize a scanner
|
14
16
|
#
|
15
17
|
# @param [String] root The path to the project root
|
16
18
|
# @param [String] lockfile
|
17
19
|
# The name for the lock file, default is `Gemfile.lock`
|
18
20
|
def initialize(root = Dir.pwd, lockfile = 'Gemfile.lock')
|
21
|
+
@package_manager = 'rubygems'
|
19
22
|
@root = File.expand_path(root)
|
20
23
|
@lockfile = Bundler::LockfileParser.new(
|
21
24
|
File.read(File.join(@root, lockfile))
|
data/lib/hrw/scanner/pipfile.rb
CHANGED
@@ -6,12 +6,15 @@ module Hrw
|
|
6
6
|
# Used to scan gem lock file
|
7
7
|
#
|
8
8
|
class Pipfile
|
9
|
+
attr_reader :package_manager
|
10
|
+
|
9
11
|
# Class constructor
|
10
12
|
#
|
11
13
|
# @param [String] root The path to the project root
|
12
14
|
# @param [String] lockfile
|
13
15
|
# The name for the lock file, default is `Pipfile.lock`
|
14
16
|
def initialize(root = Dir.pwd, lockfile = 'Pipfile.lock')
|
17
|
+
@package_manager = 'pypi'
|
15
18
|
@root = root
|
16
19
|
@lockfile = lockfile
|
17
20
|
end
|
data/lib/hrw/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: hrw
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.2.
|
4
|
+
version: 0.2.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- hi_ztz
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-04-
|
11
|
+
date: 2019-04-10 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: bundler
|