ohloh_scm 4.0.3 → 4.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a1ca59765071c0c0a2cf530cf16ca2627df5640032e0c18337931cbc1da8d575
-  data.tar.gz: f757ad5457b7ce6c8a275832aca6232e9ee05071b832a60b59f89b7854751e02
+  metadata.gz: 9173a903d32cdd9d100594a9077f7528d473a8cb9c7f1dcf7172745184f2f2f0
+  data.tar.gz: d6b967d7648cb2bdbc5c594d8c119c8f533d945b3b608aaef87bd2f4b8c67322
 SHA512:
-  metadata.gz: eac6a615f1d814a04854f4ceaa9a2779ec4a0bbb8fe7a1090045e8b6295b1209867e5589eccf9a1930f7a3adb5c64684a8bfedc80cef97ca4f6231f9da181fdf
-  data.tar.gz: 2182cd0427f04297e7969ace2f727994ee2ded5dfeeab72d0f37070afafd0a2f620f3cfc8acc68bdf6f439127bdb766c909987fb0bf86e9dd6fa2b696f11a67a
+  metadata.gz: 904efa77cf2a35d8de044afc5c8fb16f9266465e8d4fdf04ef403ccc093983a16fb76b0a40791f6033c4e767c2c598df0c79dfcb15f33e29e6fee4d00a3f9a6d
+  data.tar.gz: cd232f7a7bff3c4384160e04952cddf0ac54680d34c4e84ad44bc7874be6cec4d42d5007a8d41513a1e54afb1c3a1b9be8b32b021e76308b2a3992a8712ea7b4

data/lib/ohloh_scm/cvs/validation.rb

@@ -17,8 +17,8 @@ module OhlohScm
       def branch_name_errors
         if scm.branch_name.to_s.empty?
           [:branch_name, "The branch name can't be blank."]
-        elsif scm.branch_name.length > 120
-          [:branch_name, 'The branch name must not be longer than 120 characters.']
+        elsif scm.branch_name.length > 200
+          [:branch_name, 'The branch name must not be longer than 200 characters.']
         elsif !scm.branch_name.match?(/^[\w\-\+\.\/\ ]+$/)
           [:branch_name, "The branch name may contain only letters,
           numbers, spaces, and the special characters '_', '-', '+', '/', and '.'"]

data/lib/ohloh_scm/git/scm.rb

@@ -5,7 +5,7 @@ module OhlohScm
     class Scm < OhlohScm::Scm
       def initialize(core:, url:, branch_name:, username:, password:)
         super
-        @branch_name = branch_name || 'master'
+        @branch_name = branch_name
       end
 
       # == Example:
@@ -28,6 +28,10 @@ module OhlohScm
         run "cd #{url} && git checkout $(git ls-files #{filenames})"
       end
 
+      def branch_name_or_default
+        branch_name || 'master'
+      end
+
       private
 
       def clone_or_fetch(remote_scm, callback)

data/lib/ohloh_scm/git/status.rb

@@ -8,6 +8,13 @@ module OhlohScm
 
         activity.branches.include?(name)
       end
+
+      def default_branch
+        return scm.branch_name_or_default unless exist?
+
+        name = run("git remote show '#{scm.url}' | grep 'HEAD branch' | awk '{print $3}'").strip
+        name.to_s.empty? ? scm.branch_name_or_default : name
+      end
     end
   end
 end

data/lib/ohloh_scm/status.rb

@@ -21,5 +21,7 @@ module OhlohScm
     def scm_dir_exist?
       Dir.exist?(scm.vcs_path)
     end
+
+    def default_branch; end
   end
 end

data/lib/ohloh_scm/validation.rb

@@ -37,8 +37,8 @@ module OhlohScm
     def url_errors
       error = if scm.url.nil? || scm.url.empty?
                 "The URL can't be blank."
-              elsif scm.url.length > 120
-                'The URL must not be longer than 120 characters.'
+              elsif scm.url.length > 200
+                'The URL must not be longer than 200 characters.'
               elsif !scm.url.match?(public_url_regex)
                 'The URL does not appear to be a valid server connection string.'
               end

data/lib/ohloh_scm/version.rb

@@ -2,7 +2,7 @@
 
 module OhlohScm
   module Version
-    STRING = '4.0.3'
+    STRING = '4.0.5'
     GIT = '2.34.1'
     SVN = '1.14.1'
     CVSNT = '1.12.13'

data/security.md

@@ -0,0 +1,30 @@
+## Security
+The Black Duck Vulnerability Disclosure Process is executed by the Product Security Incident Response Team (PSIRT). The Black Duck process is based on well-known industry standards, such as NIST-SP-800-61, ISO 29147, and ISO 30111. 
+
+The Black Duck PSIRT coordinates the response and, if necessary, disclosure of security incidents related to Black Duck products and associated software. Black Duck PSIRT's primary objective is to minimize the risks associated with security incidents in a timely, secure, and responsible manner.
+
+Black Duck will investigate all reports for Black Duck products/platforms that are currently supported; accepted reports will be prioritized based on severity and other environmental factors. 
+
+If you believe you have found a security vulnerability in any repository that meets Black duck's definition of a security vulnerability, please report it to us as described below.
+
+## Reporting Security Issues
+**Please do not report security vulnerabilities through public GitHub issues.**
+
+Instead, please report them to the Black Duck  PSIRT team through email psirt@blackduck.com.
+
+Contact Black Duck within 24 hours if you encounter any end user data. Do not view, alter, save, store, transfer, or otherwise access the data, and immediately purge any local information upon reporting the vulnerability to Black Duck.
+
+Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
+
+- Affected Product/Platform and Version
+- Technical description of the issue 
+- Detailed steps to reproduce and/or sample code used to exploit the vulnerability 
+- Contact information and optional name for acknowledgments
+- Proposed disclosure plans 
+This information will help us triage your report more quickly.
+
+## Preferred Languages
+We prefer all communications to be in English.
+
+## Policy
+Black Duck follows the principle of [Coordinated Vulnerability Disclosure.](https://www.blackduck.com/company/legal/vulnerability-disclosure-policy.html)

data/spec/helpers/repository_helper.rb

@@ -1,12 +1,16 @@
 # frozen_string_literal: true
 
 module RepositoryHelper
-  %w[git svn git_svn cvs hg bzr].each do |scm_type|
+  %w[svn git_svn cvs hg bzr].each do |scm_type|
     define_method("with_#{scm_type}_repository") do |name, branch_name = nil, &block|
       with_repository(scm_type, name, branch_name) { |core| block.call(core) }
     end
   end
 
+  def with_git_repository(name, branch_name = 'master', &block)
+    with_repository('git', name, branch_name) { |core| block.call(core) }
+  end
+
   private
 
   def with_repository(scm_type, name, branch_name = nil)

data/spec/ohloh_scm/cvs/activity_spec.rb

@@ -59,7 +59,7 @@ describe 'Cvs::Activity' do
   it 'must correctly convert commits to git' do
     with_cvs_repository('cvs', 'simple') do |cvs|
       tmpdir do |tmp_dir|
-        git_core = OhlohScm::Factory.get_core(url: tmp_dir)
+        git_core = OhlohScm::Factory.get_core(url: tmp_dir, branch_name: 'master')
         git_core.scm.pull(cvs.scm, TestCallback.new)
         utc_dates = ['2006-06-29 16:21:07 UTC', '2006-06-29 18:14:47 UTC',
                      '2006-06-29 18:45:29 UTC', '2006-06-29 18:48:54 UTC',

data/spec/ohloh_scm/cvs/validation_spec.rb

@@ -12,7 +12,7 @@ describe 'Cvs::Validation' do
 
   it 'must have errors for invalid branch_name' do
     get_core(:cvs, branch_name: 'x' * 81).validation.send(:branch_name_errors).must_be_nil
-    get_core(:cvs, branch_name: 'x' * 121).validation.send(:branch_name_errors).wont_be :empty?
+    get_core(:cvs, branch_name: 'x' * 201).validation.send(:branch_name_errors).wont_be :empty?
     get_core(:cvs, branch_name: 'foo@bar').validation.send(:branch_name_errors).wont_be :empty?
   end
 

data/spec/ohloh_scm/git/activity_spec.rb

@@ -329,7 +329,7 @@ describe 'Git::Activity' do
 
     it 'must commit all changes in the working directory' do
       tmpdir do |dir|
-        core = OhlohScm::Factory.get_core(scm_type: :git, url: dir)
+        core = OhlohScm::Factory.get_core(scm_type: :git, branch_name: 'master', url: dir)
 
         core.activity.send(:init_db)
         refute core.activity.send(:anything_to_commit?)
@@ -356,7 +356,7 @@ describe 'Git::Activity' do
 
     it 'must test that no token returns nil' do
       tmpdir do |dir|
-        core = OhlohScm::Factory.get_core(scm_type: :git, url: dir)
+        core = OhlohScm::Factory.get_core(scm_type: :git, branch_name: 'master', url: dir)
         refute core.activity.read_token
         core.activity.send(:init_db)
         refute core.activity.read_token
@@ -365,7 +365,7 @@ describe 'Git::Activity' do
 
     it 'must test write and read token' do
       tmpdir do |dir|
-        core = OhlohScm::Factory.get_core(scm_type: :git, url: dir)
+        core = OhlohScm::Factory.get_core(scm_type: :git, branch_name: 'master', url: dir)
         core.activity.send(:init_db)
         core.activity.send(:write_token, 'FOO')
         refute core.activity.read_token # Token not valid until committed
@@ -376,7 +376,7 @@ describe 'Git::Activity' do
 
     it 'must test that commit_all includes write token' do
       tmpdir do |dir|
-        core = OhlohScm::Factory.get_core(scm_type: :git, url: dir)
+        core = OhlohScm::Factory.get_core(scm_type: :git, branch_name: 'master', url: dir)
         core.activity.send(:init_db)
         c = OhlohScm::Commit.new
         c.token = 'BAR'

data/spec/ohloh_scm/git/scm_spec.rb

@@ -93,7 +93,7 @@ describe 'Git::Scm' do
   it 'must test the basic conversion to git' do
     with_cvs_repository('cvs', 'simple') do |src_core|
       tmpdir do |dest_dir|
-        core = OhlohScm::Factory.get_core(scm_type: :git, url: dest_dir)
+        core = OhlohScm::Factory.get_core(scm_type: :git, branch_name: 'master', url: dest_dir)
         refute core.status.scm_dir_exist?
         core.scm.pull(src_core.scm, TestCallback.new)
         assert core.status.scm_dir_exist?
@@ -126,4 +126,9 @@ describe 'Git::Scm' do
       assert system("ls #{dir}/Godeps/Godeps.json > /dev/null")
     end
   end
+
+  it 'must return master when branch_name is null' do
+    core = OhlohScm::Factory.get_core(scm_type: :git, url: 'foobar')
+    _(core.scm.branch_name_or_default).must_equal 'master'
+  end
 end

data/spec/ohloh_scm/git/status_spec.rb

@@ -4,8 +4,22 @@ describe 'Git::Status' do
   it 'branch?' do
     with_git_repository('git') do |git|
       git.activity.send(:branches).must_equal %w[develop master]
-      assert git.status.branch? # checks master.
+      assert git.status.branch?('master')
       assert git.status.branch?('develop')
     end
   end
+
+  describe 'default_branch' do
+    it 'must return default branch when repository doesnt exist' do
+      git = OhlohScm::Factory.get_core(scm_type: :git, url: 'foobar')
+      git.status.stubs(:exist?)
+      _(git.status.default_branch).must_equal 'master'
+    end
+
+    it 'must return default branch when no HEAD branch is found in remote' do
+      git = OhlohScm::Factory.get_core(scm_type: :git, url: 'foobar')
+      git.status.stubs(:exist?).returns(true)
+      git.status.default_branch.must_equal 'master'
+    end
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ohloh_scm
 version: !ruby/object:Gem::Version
-  version: 4.0.3
+  version: 4.0.5
 platform: ruby
 authors:
 - OpenHub Team at Synopsys
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-11 00:00:00.000000000 Z
+date: 2025-03-03 00:00:00.000000000 Z
 dependencies: []
 description: |-
   The OpenHub source control management library for \
@@ -97,6 +97,7 @@ files:
 - lib/ohloh_scm/validation.rb
 - lib/ohloh_scm/version.rb
 - ohloh_scm.gemspec
+- security.md
 - spec/.rubocop.yml
 - spec/benchmarks/hg_bzr_bash_vs_py_api.rb
 - spec/benchmarks/process_spawn_benchmark.rb
@@ -192,8 +193,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3.1
-signing_key: 
+rubygems_version: 3.0.9
+signing_key:
 specification_version: 4
 summary: Source Control Management
 test_files: