paraxial 0.9.0 → 1.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0a6510720489f0277f96eef42e60e10e7f3958ab6a3763aa3941c022c497a314
-  data.tar.gz: 497e56a5048f7b6cbb5d2238e5d9059a66cec676dde27d9474faaaee6a5d0fb6
+  metadata.gz: 51de7f085eec9d82f197fbad24ff3f18554f3faf16218a6fcbc0181815b9eb92
+  data.tar.gz: 577e903cbdb3a2730b47fb0078046c9e808737dac5b7538e2b02dd7d02a46db1
 SHA512:
-  metadata.gz: 64182cfa8039d867bbc5e113e5f421a3e1141e833790222c52ae6191099289fbd056cef3163442c949db576d1de76402c8d5196fd05da46169e34f64de77ab71
-  data.tar.gz: 7fbc2ed7db3b3afb3d43a935e667d4ffc26464034c7070f8d15ba28db03c9ee5fb1fc327d56005ecefd615a39845cc8fe5f5e5aa92975186b3c9f3b615c1410b
+  metadata.gz: d77946aedb02e58860ce5be2c651acf438e77189c4349f0847e5a5fb32f560b366d31b376f66f880bc2e52c8cee37cfbd2a62f80a72c900a5923c7353a915abe
+  data.tar.gz: 3cf38d2d6726f074f7fc38898942030c820d51338109549ce73f2f832ab41d9f703026019ef1e9f8f7e68ad2ed8d4426a561ad34fa2f805fb1481eb5cd3b686c

data/lib/paraxial/checker.rb

@@ -5,6 +5,7 @@ module Paraxial
     @bans = { 'v4' => Patricia.new, 'v6' => Patricia.new(:AF_INET6) }
     @buffer = Queue.new
     @mutex = Mutex.new
+    @headers = { 'Content-Type': 'application/json' }
 
     if Paraxial::Helpers.get_api_key
       @thread = Thread.new do
@@ -44,11 +45,8 @@ module Paraxial
         puts "[Paraxial] HTTP ingest not supported on free tier"
       else
         Thread.new do
-          uri = URI.parse(Paraxial::Helpers.get_ingest_url)  # Replace with your endpoint
-          headers = { 'Content-Type': 'application/json' }
-          resp = Net::HTTP.post(uri, body.to_json, headers)
-          puts "ingest_url resp.code: #{resp.code}"
-          puts resp.body
+          uri = URI.parse(Paraxial::Helpers.get_ingest_url)
+          Net::HTTP.post(uri, body.to_json, @headers)
         end
       end
     end
@@ -56,11 +54,10 @@ module Paraxial
 
     def self.get_abr
       uri = URI.parse(Paraxial::Helpers.get_abr_url)
-      headers = { 'Content-Type': 'application/json' }
 
       body = { api_key: Paraxial::Helpers.get_api_key }
       begin
-        r = Net::HTTP.post(uri, body.to_json, headers)
+        r = Net::HTTP.post(uri, body.to_json, @headers)
         if r.code == '200'
           put_abr(JSON.parse(r.body))
         else
@@ -132,7 +129,57 @@ module Paraxial
       end
     end
 
+    def self.ban_ip_msg(ip, length, msg)
+      if allow_ip?(ip) == true
+        local_ban(ip)
+
+        uri = URI.parse(Paraxial::Helpers.get_ruby_ban_url)
+        body =
+          {
+            bad_ip: ip,
+            ban_length: length,
+            msg: msg,
+            api_key: Paraxial::Helpers.get_api_key
+          }
+        r = Net::HTTP.post(uri, body.to_json, @headers)
+        if r.code == '200'
+          :ok
+        else
+          :error
+        end
+      else
+        :already_banned
+      end
+    end
+
+    def self.honeypot_ban(ip, length)
+      local_ban(ip)
+
+      uri = URI.parse(Paraxial::Helpers.get_honeypot_url)
+
+      body = { api_key: Paraxial::Helpers.get_api_key, bad_ip: ip, ban_length: length }
+      r = Net::HTTP.post(uri, body.to_json, @headers)
+      if r.code == '200'
+        :ok
+      else
+        :error
+      end
+    end
+
     def self.ban_ip(ip)
+      local_ban(ip)
+      uri = URI.parse(Paraxial::Helpers.get_ban_url)
+
+      body = { api_key: Paraxial::Helpers.get_api_key, ip_address: ip }
+      r = Net::HTTP.post(uri, body.to_json, @headers)
+      if r.code == '200'
+        :ok
+      else
+        :error
+      end
+    end
+
+    def self.local_ban(ip)
       if ip.include?('.')
         # IPv4
         current_t = @bans['v4']
@@ -144,17 +191,6 @@ module Paraxial
         current_t.add(ip)
         @bans['v6'] = current_t
       end
-
-      uri = URI.parse(Paraxial::Helpers.get_ban_url)
-      headers = { 'Content-Type': 'application/json' }
-
-      body = { api_key: Paraxial::Helpers.get_api_key, ip_address: ip }
-      r = Net::HTTP.post(uri, body.to_json, headers)
-      if r.code == '200'
-        :ok
-      else
-        :error
-      end
     end
 
     def self.allow_ip?(ip)

data/lib/paraxial/cli.rb

@@ -15,6 +15,7 @@ module Paraxial
     option :repo_owner, type: :string, desc: 'Repository owner'
     option :repo_name, type: :string, desc: 'Repository name'
     option :pr_number, type: :numeric, desc: 'Pull request number'
+    option :exit_code, type: :boolean, default: false, desc: 'Non-zero exit code if findings > 0'
 
     def scan
       puts '[Paraxial] Scan starting...'
@@ -27,7 +28,6 @@ module Paraxial
         puts '- rubocop-erb'
       end
 
-
       if Paraxial::Helpers.get_api_key.nil?
         puts '[Paraxial] Environment variable PARAXIAL_API_KEY not found'
       else
@@ -36,6 +36,7 @@ module Paraxial
         repo_owner = options[:repo_owner]
         repo_name = options[:repo_name]
         pr_number = options[:pr_number]
+        exit_code = options[:exit_code]
 
         cops = 'Paraxial,Security/Eval,Security/IoMethods,Security/JSONLoad,Security/MarshalLoad,Security/Open,Security/YAMLLoad'
         rubocop = `rubocop --require paraxial --only #{cops} --disable-pending-cops --format json`
@@ -95,6 +96,10 @@ module Paraxial
         else
           :ok
         end
+
+        if exit_code and (findings.length > 0)
+          exit(1)
+        end
       end
     end
 

data/lib/paraxial/helpers.rb

@@ -24,6 +24,14 @@ module Paraxial
       get_paraxial_url + '/api/ingest'
     end
 
+    def self.get_honeypot_url
+      get_paraxial_url + '/api/honeypot_ban_x'
+    end
+
+    def self.get_ruby_ban_url
+      get_paraxial_url + '/api/ruby_ban_x'
+    end
+
     def self.get_api_key
       @paraxial_api_key ||= ENV['PARAXIAL_API_KEY']
     end

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '0.9.0'
+  VERSION = '1.0.0'
 end

data/lib/paraxial.rb

@@ -59,7 +59,6 @@ module Paraxial
         cloud_ip: request.env['paraxial.cloud_ip'],
         host: request.host
       }
-    puts req_hash
     Paraxial::Checker.req_to_buff(req_hash)
   end
 
@@ -127,6 +126,18 @@ module Paraxial
     Paraxial::Checker.ban_ip(ip)
   end
 
+  def self.ban_ip_msg(ip, length, msg)
+    return if Paraxial::Helpers.get_api_key.nil?
+
+    Paraxial::Checker.ban_ip_msg(ip, length, msg)
+  end
+
+  def self.honeypot_ban(ip, length = :week)
+    return if Paraxial::Helpers.get_api_key.nil?
+
+    Paraxial::Checker.honeypot_ban(ip, length)
+  end
+
   def self.allow_ip?(ip)
     return if Paraxial::Helpers.get_api_key.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 1.0.0
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-09-21 00:00:00.000000000 Z
+date: 2024-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec