neetob 0.5.33 → 0.5.35

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 315137a3063a9384543accfc6d0c867ab9ef7cbb65f2276c8779cd35452e186f
-  data.tar.gz: 5a42415390bd8082a0bb8ae5311bb424ded01b63535c4c7d4e1c03361ea10be0
+  metadata.gz: 47c9ade252c12f04039b049a314ee707d62dd7c0855881962f46154d181e9cf3
+  data.tar.gz: 7b232f8ae896fdaf9f43eef9b13a18911beb88f83136af76d7bfb2b58bbc7a21
 SHA512:
-  metadata.gz: 9e2a555d3c6b85713699ae105cfa334d8e8c7669715ad904315b87e19d2f3fe2db2195ac68f3a675c1a08387620e7a7cfe03887e20d80a83dc215aeb11964e51
-  data.tar.gz: 3c30f7697de99a9b77f52f5884f8630dc3d8d252f2094ffd138396f3eae94e88b22afdc4f4c00723160f8243531649f1556e63800dbf2ac070cb318b0e49eb41
+  metadata.gz: beb78e16e139dd28832e1328cc4a4b3121eb91483d4477cf7cb957dcc2b88e8957ad295ab6cf29ecd9d4f10f29b5ccafedf28cde7809afe9b6cdfe045454c0c0
+  data.tar.gz: 6aab97331c2a5a95ccae653f49a8cbc2ac2ab5aa44c0b243f71f01f31e257d075e84e621de61d41f16135301ec165248eaba61a0066ed546537a70f0192cad1c

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    neetob (0.5.33)
+    neetob (0.5.35)
       brakeman (~> 5.0)
       chronic
       dotenv (~> 2.8.1)

data/lib/neetob/cli/github/active_record_doctor.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+require_relative "./make_pr/base"
+
+module Neetob
+  class CLI
+    module Github
+      class ActiveRecordDoctor < MakePr::Base
+        DESCRIPTION = "Fix vulnerabilities reported by active_record_doctor"
+        attr_accessor :repos, :sandbox
+
+        def initialize(repos, sandbox = false)
+          super()
+          @repos = repos
+          @sandbox = sandbox
+        end
+
+        def run
+          matching_repos = find_all_matching_apps_or_repos(repos, :github, sandbox)
+          report = nil
+          matching_repos.each do |repo|
+            begin
+              ui.info("\nWorking on repo #{repo}", print_to_audit_log: false)
+              clone_repo_in_tmp_dir(repo)
+              bundle_install!(repo)
+              setup_db!(repo)
+              report = run_active_record_doctor(repo)
+              ui.success("Successfully executed active_record_doctor for #{repo}", print_to_audit_log: false)
+
+              report = report.lines.reject { |line| line.start_with?("**") }.join("\n")
+              if !report.blank? && !Thread.current[:audit_mode]
+                issue = client.create_issue(repo, DESCRIPTION, parse_description(warnings))
+                ui.success("Issue created at #{issue.html_url}")
+              end
+            rescue StandardError => e
+              ExceptionHandler.new(e).process
+            end
+          end
+          `rm -rf /tmp/neetob` unless Thread.current[:audit_mode]
+          if Thread.current[:audit_mode]
+            report
+          end
+        end
+
+        private
+
+          def run_active_record_doctor(repo)
+            `#{cd_to_repo(repo)} && bundle exec rake active_record_doctor`
+          end
+
+          def setup_db!(repo)
+            `#{cd_to_repo(repo)} && cp config/database.yml.postgresql config/database.yml`
+            `#{cd_to_repo(repo)} && sed -i '' 's/_development/_development_audit/g' config/database.yml`
+            `#{cd_to_repo(repo)} && bundle exec rake setup`
+          end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/misc/sparkpost_sub_account_used_for_all_apps.rb

@@ -5,6 +5,8 @@ module Neetob
     module MonthlyAudit
       module Misc
         class SparkpostSubAccountUsedForAllApps < CLI::Base
+          APPS_TO_IGNORE = ["neeto-wheel-web"]
+
           def initialize
             super()
           end
@@ -21,7 +23,11 @@ module Neetob
             ui.info "- Finally, set Audit Passed as Yes only if the last check passed, otherwise set it as No and add a comment in the Comments column"
             ui.info "\n"
             NeetoCompliance::NeetoRepos.products.keys.each do |repo|
-              repo_data << [repo, nil, nil]
+              repo_data << (
+                APPS_TO_IGNORE.include?(repo) ?
+                [repo, "No", "App ignored from this check", "Ignored"] :
+                [repo, nil, nil, nil]
+              )
             end
             ui.print_table(repo_data)
           end

data/lib/neetob/cli/monthly_audit/security/code/active_record_doctor.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+
+require_relative "../../../github/active_record_doctor"
+
+module Neetob
+  class CLI
+    module MonthlyAudit
+      module Security
+        module Code
+          class ActiveRecordDoctor < CLI::Base
+            def initialize
+              super()
+            end
+
+            def run
+              ui.success("### 1.1.4. Checking whether running `rake active_record_doctor` throws any vulnerabilities")
+              repo_data = [["Repository", "Issues Found", "Comments", "Audit Passed"]]
+              ui.info "\n"
+              NeetoCompliance::NeetoRepos.products.keys.take(5).each do |repo|
+                ui.info("Checking ActiveRecordDoctor run results for #{repo}", print_to_audit_log: false)
+                active_record_doctor_run_result = Neetob::CLI::Github::ActiveRecordDoctor.new([repo]).run
+
+                if active_record_doctor_run_result.blank?
+                  issues_found = "No"
+                  comments = nil
+                else
+                  issues_found = "Yes"
+                  comments = "#{active_record_doctor_run_result.lines.first.strip} ..."
+                end
+                audit_passed = issues_found == "No" ? "Yes" : "No"
+                repo_data << [repo, issues_found, comments, audit_passed]
+              end
+              ui.print_table(repo_data)
+            end
+          end
+        end
+      end
+    end
+  end
+end

data/lib/neetob/cli/monthly_audit/security/code/main.rb

@@ -3,6 +3,7 @@
 require_relative "bundle_audit"
 require_relative "yarn_audit"
 require_relative "brakeman"
+require_relative "active_record_doctor"
 
 module Neetob
   class CLI
@@ -20,6 +21,8 @@ module Neetob
               YarnAudit.new.run
               ui.info "\n"
               Brakeman.new.run
+              ui.info "\n"
+              ActiveRecordDoctor.new.run
             end
           end
         end

data/lib/neetob/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Neetob
-  VERSION = "0.5.33"
+  VERSION = "0.5.35"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: neetob
 version: !ruby/object:Gem::Version
-  version: 0.5.33
+  version: 0.5.35
 platform: ruby
 authors:
 - Udai Gupta
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-01-28 00:00:00.000000000 Z
+date: 2025-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -185,6 +185,7 @@ files:
 - lib/neetob/cli/cronitor/base.rb
 - lib/neetob/cli/cronitor/get_all_monitors.rb
 - lib/neetob/cli/fetchorupdate_repos/execute.rb
+- lib/neetob/cli/github/active_record_doctor.rb
 - lib/neetob/cli/github/auth.rb
 - lib/neetob/cli/github/base.rb
 - lib/neetob/cli/github/brakeman.rb
@@ -260,6 +261,7 @@ files:
 - lib/neetob/cli/monthly_audit/misc/sparkpost_sub_account_used_for_all_apps.rb
 - lib/neetob/cli/monthly_audit/misc/ssl_certs_setup_for_auto_renewal.rb
 - lib/neetob/cli/monthly_audit/perform.rb
+- lib/neetob/cli/monthly_audit/security/code/active_record_doctor.rb
 - lib/neetob/cli/monthly_audit/security/code/brakeman.rb
 - lib/neetob/cli/monthly_audit/security/code/bundle_audit.rb
 - lib/neetob/cli/monthly_audit/security/code/main.rb