nvd_feed_api 0.2.0 → 0.2.1.yank

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 38ab69d805d125729995fc9ea26d79e0b324414f
-  data.tar.gz: 7c9838e134a5f503d21979a5915db3cd9d9e823b
+  metadata.gz: 6787ce3cf4a7b489e422d52f0be48642ea091e60
+  data.tar.gz: 5e41fab281567c47a8323997f6b6ef4e5759320a
 SHA512:
-  metadata.gz: eda8d75faf07c0189cf6fdf9bbea8296fce70f0aaf380e8af2a3af83d1216f6ae360319cd01e727659f4cac527cd284ac9e9555dfb1dc79f1982f93309940129
-  data.tar.gz: eb9eb999eee1ef44b3b64de314f3fb37b0cc857df67a7ae580ed6f71ef51e827f3ec93de5b5fdfdd0205a0f280f6825e673a858e67248c9a684dc77a1342adea
+  metadata.gz: c30c2411484e44cd49878ff6396ca21cf9fb172ec095e2b48bd15ced3ba05d245df89917eceb10f6e00331794462898aa4b02f1f66241ba0e8886ed24beaf55a
+  data.tar.gz: 86eb79764eddc1d8ffdbf76f3f105d819c4482b64fedbedf597ac86ae54858c97cefc2155bf5fa3e0f267d1a6e0ceb5c0ead1036312e5b8318a0a5ac08f650ca

data/.gitlab-ci.yml

@@ -1,6 +1,5 @@
 # Official language image. Look for the different tagged releases at:
 # https://hub.docker.com/r/library/ruby/tags/
-image: ruby:2.4-alpine
 
 cache:
   paths:
@@ -17,18 +16,23 @@ before_script:
   - bundle install -j $(nproc) --path vendor # Install dependencies into ./vendor/ruby
   - rake install # install the gem
 
-rubocop:
+test:2.4:
   stage: test
+  image: ruby:2.4-alpine
   script:
     - rubocop
+    - rake test
 
-test:
+test:2.5:
   stage: test
+  image: ruby:2.5-alpine
   script:
+    - rubocop
     - rake test
 
 pages:
   stage: deploy
+  image: ruby:2.4-alpine
   script:
     - yard doc
     - mkdir public

data/lib/nvd_feed_api/feed.rb

@@ -362,7 +362,7 @@ class NVDFeedScraper
       unless skip_download
         res = Net::HTTP.get_response(uri)
         raise "#{file_url} ended with #{res.code} #{res.message}" unless res.is_a?(Net::HTTPSuccess)
-        open(destination_file, 'wb') do |file|
+        File.open(destination_file, 'wb') do |file|
           file.write(res.body)
         end
       end

data/lib/nvd_feed_api/version.rb

@@ -1,3 +1,3 @@
 module NvdFeedApi
-  VERSION = '0.2.0'.freeze
+	VERSION = '0.2.1.yank'.freeze
 end

data/nvd_feed_api.gemspec

@@ -1,4 +1,4 @@
-lib = File.expand_path('../lib', __FILE__)
+lib = File.expand_path('lib', __dir__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 require 'nvd_feed_api/version'
 
@@ -6,7 +6,7 @@ Gem::Specification.new do |s|
   s.name          = 'nvd_feed_api'
   s.version       = NvdFeedApi::VERSION
   s.platform      = Gem::Platform::RUBY
-  s.date          = '2018-01-06'
+  s.date          = '2018-05-02'
   s.summary       = 'API for NVD CVE feeds'
   s.description   = 'A simple API for NVD CVE feeds'
   s.authors       = ['Alexandre ZANNI']

data/pages/CHANGELOG.md

@@ -1,3 +1,12 @@
+# [0.2.1] - 2 May 2018
+
+[0.2.1]: https://gitlab.com/noraj/nvd_api/tags/v0.2.1
+
+- Gitlab-CI: test vith ruby 2.4.x and 2.5.x
+- style: fix Style/ExpandPathArguments cop
+- security: fix Security/Open cop, protect from pipe command injection
+- test: fix NVD URL after NVD changed it
+
 # [0.2.0] - 20 January 2018
 
 [0.2.0]: https://gitlab.com/noraj/nvd_api/tags/v0.2.0

data/test/test_nvd_feed_api.rb

@@ -109,9 +109,9 @@ class NVDAPITest < Minitest::Test
 
   def test_feed_attributes
     name = 'CVE-2010'
-    meta_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.meta'
-    gz_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.json.gz'
-    zip_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.json.zip'
+    meta_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.meta'
+    gz_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.json.gz'
+    zip_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2010.json.zip'
     f = @s.feeds('CVE-2010')
     # Test name
     assert_instance_of(String, f.name, "name doesn't return a string")
@@ -240,25 +240,25 @@ class NVDAPITest < Minitest::Test
   end
 
   def test_meta_parse_noarg
-    m = NVDFeedScraper::Meta.new('https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta')
+    m = NVDFeedScraper::Meta.new('https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta')
     assert_equal(0, m.parse, 'parse method return nothing')
   end
 
   def test_meta_parse_witharg
     m = NVDFeedScraper::Meta.new
-    meta_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
+    meta_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
     assert_equal(0, m.parse(meta_url), 'parse method return nothing')
   end
 
   def test_meta_url_setter
     m = NVDFeedScraper::Meta.new
-    meta_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
+    meta_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
     assert_equal(meta_url, m.url = meta_url, 'the meta URL is not set correctly')
   end
 
   def test_meta_attributes
     m = NVDFeedScraper::Meta.new
-    meta_url = 'https://static.nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
+    meta_url = 'https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-2015.meta'
     m.url = meta_url
     m.parse
     # Test gz_size

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: nvd_feed_api
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1.yank
 platform: ruby
 authors:
 - Alexandre ZANNI
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-01-06 00:00:00.000000000 Z
+date: 2018-05-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: archive-zip
@@ -220,9 +220,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '2.4'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.6.14