jefferies_tube 1.1.1 → 1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 06d45e26cc3c3f6db3337acf9d656e02dd4afdad972aea8f1e298482805a1520
-  data.tar.gz: e8e8a23b284b5a03e65bc9c3a3d7df73fdee46573972353c1c34616b7d56dbd6
+  metadata.gz: fda803efe78403794dec76b4f9dfce17a1a5ba31f0241b74e953f816429e6882
+  data.tar.gz: f7a9867ac76ba5b12d4f8eeaa94e99eec2ea8394b8df6ef02620213923d178b6
 SHA512:
-  metadata.gz: b485c95ad3b92bf78a32c54e1b70b3a38b09dec3d4314ba5e6b3f45e2f691dbad4df4e864ba4a880fefbe0d4229c70a5480f13fbd39727e4544353d340802932
-  data.tar.gz: b1e7081ebbf93d900d471e9ffdc2bce83f91eb8a941430e0939586dded1095a0e128149231d51da169fa2157e9522d6fea7ce0b5d4bec0d5f14ad8f86ef093bc
+  metadata.gz: 9efcf56c25bfd2cd54e81dc149e1099ca040d5187baefe79f4ca76df7ad8481b48f590ae8117adbcaaca9a00ab4a5985a405255573ca65aceb654c0567907de1
+  data.tar.gz: 9bd77d4484ccfe9686af94dbe3338b17f4996df3016c5c1c6cc1bc901fbf6f255e4346cd943a9a4b71630c18ccaf569bd95f748e49bf5ef8b1b25372a4bd5506

data/CHANGELOG.md

@@ -4,7 +4,12 @@ This is a [changelog](https://keepachangelog.com/en/0.3.0/).
 
 This project attempts to follow [semantic versioning](https://semver.org/)
 
-## Unreleased
+## 1.2
+
+* enhancements
+  * Allow passing through bundler-audit ignore with `set :bundler_audit_ignore, ["CVE-1234-5678"]`
+
+## 1.1.1
 
 * enhancements
   * Add colorful IRB prompts based on Rails environment

data/README.md

@@ -99,6 +99,15 @@ To automatically tag the code that is about to be released (lazy programmer solu
 before 'deploy', 'deploy:create_tag'
 ```
 
+#### Bundler Audit
+
+By default jefferies_tube will raise an error and stop if it detects any vulnerabilities is your installed gems. If you need to deploy anyway even with vulnerabilities you can do `I_KNOW_GEMS_ARE_INSECURE=true cap <environment> deploy`.
+
+To ignore specific CVE's when running bundler-audit, inside `config/deploy.rb`:
+```ruby
+set :bundler_audit_ignore, ["CVE-1234-5678"]
+```
+
 ### Enable/Disable Maintence Mode
 
 ```

data/lib/jefferies_tube/capistrano/deploy.rb

@@ -30,7 +30,8 @@ namespace :deploy do
     Bundler::Audit::Database.update!
     scanner = Bundler::Audit::Scanner.new
     vulnerable = false
-    scanner.scan do |result|
+    ignore = fetch(:bundler_audit_ignore, [])
+    scanner.scan(ignore: ignore) do |result|
       vulnerable = true
       case result
       when Bundler::Audit::Scanner::InsecureSource

data/lib/jefferies_tube/version.rb

@@ -1,7 +1,7 @@
 require 'open-uri'
 
 module JefferiesTube
-  VERSION = "1.1.1"
+  VERSION = "1.2"
 
   def self.latest_rubygems_version
     JSON.parse(URI.parse("https://rubygems.org/api/v1/versions/jefferies_tube/latest.json").read)["version"]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: jefferies_tube
 version: !ruby/object:Gem::Version
-  version: 1.1.1
+  version: '1.2'
 platform: ruby
 authors:
 - Brian Samson
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-28 00:00:00.000000000 Z
+date: 2019-10-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: awesome_print