license_scout 2.4.0 → 2.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0cc1880e883f74c45e68c9495f816f7e757a62f16701de45fa77e89c97ed6637
-  data.tar.gz: 43e3b7c1a111a7fa2f97f5340e3268547aead69d8ff38b8dfd57be47121e4aea
+  metadata.gz: 8f29370aa4433c28361002a6e01527d036ce7b2c432a29f5f0824b0be8e50b7e
+  data.tar.gz: f54b8c5e6bb9752b0137abb871068b98d7215611c3d9397f812ea4f73a0fb2e5
 SHA512:
-  metadata.gz: 4031e209faef9bb783dcef890f9d72ebe87df83711e7730a39680014ffe14bbb4880b9f0f201ed351890cb0b385b3ebe8eb8dee980cba3a702553e1dd738f435
-  data.tar.gz: 072b2ee320c4f4de3fbeeeca3aab2d4a08476325d441a62b94adcfccbb90ffb241576ab1f5d9f7b6dfb2e9b803057268a993e14dcbab0164dfe5f0f48c404102
+  metadata.gz: d4a2d99ab4ddd0541e9fe0899072d187fc2fb87b8c4da4194d113c414f173e010052a947a51f4017ab4ccb3b106d97379994aed61fa75e152b4f612c78061945
+  data.tar.gz: 8f1b6f27816f43c994ddf0608b88462ead8d8e4f2a3e1d088b4c14621c2ec3ae239ee012cb69822421b2f67bf30cc885b156c6185125ddfccbc86d39f653f0f8

data/README.md

@@ -9,7 +9,7 @@ Dependency Type | Supported Dependency Managers
 chef_cookbook | berkshelf
 erlang | rebar
 elixir | mix
-golang | dep, godep, glide
+golang | modules, dep, godep, glide
 habitat | habitat
 nodejs | npm
 perl | cpan
@@ -29,6 +29,7 @@ gem install license_scout
 * If you wish to scan for `berkshelf` dependencies, you'll need to manually install the Berkshelf gem in the same Ruby as License Scout
 * If you wish to scan for `mix` or `rebar` dependencies, you'll need to install Erlang OTP 18.3 or greater.
 * If you wish to scan for `cargo` dependencies, you'll need to manually install cargo
+* If you wish to scan for `go mod` dependencies, you'll need to manually install go
 
 ### Habitat
 
@@ -247,6 +248,14 @@ https://github.com/chef/chef/blob/master/CONTRIBUTING.md
 
 Pull requests in this project are merged when they have two :+1:s from maintainers.
 
+## GitHub Tokens
+
+If you wish to scan private GitHub repositories or are hitting API rate limits, [create a GitHub token](https://help.github.com/en/articles/creating-a-personal-access-token-for-the-command-line) and set it to this environmental variable:
+
+```
+OCTOKIT_ACCESS_TOKEN=your_token_value
+```
+
 ## Maintainers
 
 - [Dan DeLeo](https://github.com/danielsdeleo)

data/lib/license_scout/dependency_manager.rb

@@ -24,6 +24,7 @@ require "license_scout/dependency_manager/cpanm"
 require "license_scout/dependency_manager/dep"
 require "license_scout/dependency_manager/glide"
 require "license_scout/dependency_manager/godep"
+require "license_scout/dependency_manager/gomod"
 require "license_scout/dependency_manager/habitat"
 require "license_scout/dependency_manager/mix"
 require "license_scout/dependency_manager/rebar"
@@ -40,6 +41,7 @@ module LicenseScout
         Dep,
         Glide,
         Godep,
+        Gomod,
         Habitat,
         Mix,
         Rebar,

data/lib/license_scout/dependency_manager/base.rb

@@ -51,6 +51,7 @@ module LicenseScout
       # @example Go's various package managers
       #   Name        Reference
       #   --------    -----------------------------------------------
+      #   go_mod      [`gomod`](https://golang.org/cmd/go/#hdr-The_go_mod_file)
       #   go_dep      [`godep`](https://github.com/tools/godep)
       #   go_godep    [`dep`](https://github.com/golang/dep)
       #   go_glide    [`glide`](https://github.com/Masterminds/glide)

data/lib/license_scout/dependency_manager/cargo.rb

@@ -59,7 +59,7 @@ module LicenseScout
         Dir.chdir(directory) do
           install_cargo_license_crate
 
-          s = Mixlib::ShellOut.new("cargo license -d -j")
+          s = Mixlib::ShellOut.new("cargo-license -d -j")
           s.run_command
           s.error!
 

data/lib/license_scout/dependency_manager/gomod.rb

@@ -0,0 +1,72 @@
+#
+# Copyright:: Copyright 2020, Chef Software Inc.
+# License:: Apache License, Version 2.0
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+require "license_scout/dependency_manager/base"
+
+module LicenseScout
+  module DependencyManager
+    class Gomod < Base
+
+      def name
+        "golang_modules"
+      end
+
+      def type
+        "golang"
+      end
+
+      def signature
+        "go.sum file"
+      end
+
+      def install_command
+        "go mod download"
+      end
+
+      def detected?
+        File.exist?(go_sum_file)
+      end
+
+      def dependencies
+        go_modules.map do |mod|
+          next if mod["Main"] == true
+
+          dep_name = mod["Path"]
+          dep_version = mod["Version"]
+          dep_path = mod["Dir"]
+
+          new_dependency(dep_name, dep_version, dep_path)
+        end.compact
+      end
+
+      def go_sum_file
+        File.join(directory, "go.sum")
+      end
+
+      def go_modules
+        FFI_Yajl::Parser.parse(go_modules_json)
+      end
+
+      def go_modules_json
+        s = Mixlib::ShellOut.new("go list -m -json all", cwd: directory, environment: LicenseScout::Config.environment)
+        s.run_command
+        s.error!
+        "[" + s.stdout.gsub("}\n{", "},\n{") + "]"
+      end
+    end
+  end
+end

data/lib/license_scout/version.rb

@@ -16,5 +16,5 @@
 #
 
 module LicenseScout
-  VERSION = "2.4.0".freeze
+  VERSION = "2.5.0".freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: license_scout
 version: !ruby/object:Gem::Version
-  version: 2.4.0
+  version: 2.5.0
 platform: ruby
 authors:
 - Tom Duffield
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-04 00:00:00.000000000 Z
+date: 2020-04-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ffi-yajl
@@ -167,6 +167,7 @@ files:
 - lib/license_scout/dependency_manager/dep.rb
 - lib/license_scout/dependency_manager/glide.rb
 - lib/license_scout/dependency_manager/godep.rb
+- lib/license_scout/dependency_manager/gomod.rb
 - lib/license_scout/dependency_manager/habitat.rb
 - lib/license_scout/dependency_manager/mix.rb
 - lib/license_scout/dependency_manager/npm.rb