iron_dome 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 553265fff91bc6fb67adeb16e89182b2895f7692934bb0416e57a3ad2c32b138
-  data.tar.gz: e89d7904609d52a8e51d45c053f67fa1a99c1adb1c9724068a5ebc825c082566
+  metadata.gz: 9c889cd53f074999e647537c26d7a3d8556a50e6275f0ff151e56a9d628b9707
+  data.tar.gz: 519d8c5edc3da20ca618e9f083d75e92c78fa5eac5942a78cc4bb6ab216b6d15
 SHA512:
-  metadata.gz: d7d5067dc1b8323a6564f8b1aae41f16c35f9ea2a3afb4fd0d679a973f36dabd0013c9e98a860f15fce66041cc0e58fc188815a8c3046a2c8aa06eb374018366
-  data.tar.gz: 1363e9613e691ea42c028222f9878d0072c528c9777794cb8a19c9bd841c046266016ba207a05b1bd5620a36bd57c194218873cf81733a05ee9c42c0a5807e54
+  metadata.gz: 1f296bbadbe9c5a68564adcb25afc812695e4d4c538a16ef036e0d0dd356745348dd5639ad03fb18e338437ee85b2a17e028dc14ea82de8d7f8f18f78a20c9b4
+  data.tar.gz: 836b9813c0c3c24b07d8f22a6ffbceef01293c429e647d7974fafa50a64595dbeb4084ff9a174f26f829c47013cc34bdbb36155646549618a4784462c3a09f2e

data/README.md

@@ -14,10 +14,27 @@ this directory must have the Gemfile.lock, you can also run on a ci/cd pipeline.
 
     $ iron_dome
 
+### Theres some optional params you can use, like, -o or --output and -d or --detail
+
+This will generate a sarif file format.
+
+    $ iron_dome -o
+    $ iron_dome --output
+
+This will show details on the current shell session like the output example below.
+
+    $ iron_dome -d
+    $ iron_dome --detail
+
 ## Output Example
 
 ![alt text](image.png)
 
+## Supported language and lockfile format
+
+| Ruby      | Gemfile.lock    |
+|-----------|-----------------|
+
 ## Development
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.

data/lib/iron_dome/reader.rb

@@ -27,7 +27,7 @@ module IronDome
       puts "Verifying vulnerabilities on osv database ..."
       results = Requester.osv_request(packages_and_versions)
       results.compact!
-      system_output(results)
+      system_output(results) unless options[:sarif_output] == true
       output_sarif_file_format(results) if options[:sarif_output] == true
     end
 
@@ -35,7 +35,7 @@ module IronDome
       # method to call the module to generate the sarif report
       puts "Generating the sarif output ..."
       IronDome::Sarif::Output.new.output_report(results)
-      puts "Sarif file outputed"
+      puts "Sarif file outputted"
     end
 
     def system_output(results)
@@ -50,35 +50,35 @@ module IronDome
 
     def build_output(results)
       # Build the terminal output but maybe we will need to improve this methods.
-      total_vulns = 0
+      total_vulnerabilities = 0
 
-      puts ":: Vulnerabilities found:"
+      puts ":: Vulnerabilities found:".colorize(:red)
       results.each do |result|
-        result["vulns"].each do |vuln|
-          print_vulnerability_info(vuln)
-          total_vulns += 1
+        result["vulns"].each do |vulnerability|
+          print_vulnerability_info(vulnerability)
+          total_vulnerabilities += 1
         end
       end
 
-      puts "#{total_vulns} vulnerabilities founded.".colorize(:red)
+      puts "#{total_vulnerabilities} vulnerabilities founded.".colorize(:light_red)
     end
 
-    def print_vulnerability_info(vuln)
-      package_name = extract_package_name(vuln)
-      version_fixed = extract_version_fixed(vuln)
-      summary = vuln["summary"]
-      details = vuln["details"]
+    def print_vulnerability_info(vulnerabilities)
+      package_name = extract_package_name(vulnerabilities)
+      version_fixed = extract_version_fixed(vulnerabilities)
+      summary = vulnerabilities["summary"]
+      details = vulnerabilities["details"]
 
       print_info(package_name, version_fixed, summary, details)
     end
 
-    def extract_package_name(vuln)
-      affected_package = vuln["affected"].first
+    def extract_package_name(vulnerability)
+      affected_package = vulnerability["affected"].first
       affected_package["package"]["name"]
     end
 
-    def extract_version_fixed(vuln)
-      affected_package = vuln["affected"].first
+    def extract_version_fixed(vulnerability)
+      affected_package = vulnerability["affected"].first
       version_ranges = affected_package["ranges"].first
       version_ranges["events"].last["fixed"]
     end

data/lib/iron_dome/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module IronDome
-  VERSION = "0.1.2"
+  VERSION = "0.1.3"
 end

data/lib/iron_dome.rb

@@ -16,7 +16,10 @@ module IronDome
 
   # class entry, this is the entrypoint of the gem.
   class Entry
+    # rubocop:disable Metrics/MethodLength
     def main
+      puts display_ascii_art
+
       options = {}
       OptionParser.new do |opts|
         opts.on("-o", "--output", "Generate a sarif format file report.") do |output|
@@ -30,5 +33,18 @@ module IronDome
 
       Reader.new(options).call
     end
+    # rubocop:enable Metrics/MethodLength
+
+    def display_ascii_art
+      <<-ART
+  ██╗██████╗  ██████╗ ███╗   ██╗██████╗  ██████╗ ███╗   ███╗███████╗
+  ██║██╔══██╗██╔═══██╗████╗  ██║██╔══██╗██╔═══██╗████╗ ████║██╔════╝
+  ██║██████╔╝██║   ██║██╔██╗ ██║██║  ██║██║   ██║██╔████╔██║█████╗
+  ██║██╔══██╗██║   ██║██║╚██╗██║██║  ██║██║   ██║██║╚██╔╝██║██╔══╝
+  ██║██║  ██║╚██████╔╝██║ ╚████║██████╔╝╚██████╔╝██║ ╚═╝ ██║███████╗
+  ╚═╝╚═╝  ╚═╝ ╚═════╝ ╚═╝  ╚═══╝╚═════╝  ╚═════╝ ╚═╝     ╚═╝╚══════╝ v#{IronDome::VERSION}
+
+      ART
+    end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: iron_dome
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.1.3
 platform: ruby
 authors:
 - Jose Augusto
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-02-21 00:00:00.000000000 Z
+date: 2024-03-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize
@@ -89,7 +89,6 @@ files:
 - lib/iron_dome/requester.rb
 - lib/iron_dome/sarif/output.rb
 - lib/iron_dome/version.rb
-- sig/iron_dome.rbs
 homepage: https://github.com/JAugusto42/iron_dome
 licenses:
 - MIT
@@ -112,7 +111,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.6
+rubygems_version: 3.5.3
 signing_key:
 specification_version: 4
 summary: A vulnerability scanner for ruby projects dependencies

data/sig/iron_dome.rbs

@@ -1,4 +0,0 @@
-module IronDome
-  VERSION: String
-  # See the writing guide of rbs: https://github.com/ruby/rbs#guides
-end