paraxial 0.9.1 → 1.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: be68560342effbc4099f126d85e25acf0400e0b27dc636f4173192a9a634d3da
-  data.tar.gz: 489450bae67581a1738754843a8ce3b6128ad098aa88228d1823bf41ce0ebada
+  metadata.gz: a679f1421bdbb16b511672a5f45ada85ac38811d657a4eebe3c2f25805fa7bc9
+  data.tar.gz: 24fc51622351b5fee13c9108bea3f4276857a73bd87f4ea0f6ca33dcccc4474d
 SHA512:
-  metadata.gz: edd5307bcc69fcff116b2873d5571b035808f76bf508447403da5a1064d7faea2d230ceb12f0e6318469815b18d23254a6b4adf914b6c0bca009ac807f35d8fd
-  data.tar.gz: f473320f53f772245dad48f68edeb47271ebe22e921b73b6cfe74506b6e5ccc8925ebf6621f2a4a46f0b6f9c2282c9580f498572f85dc6214fe21359d59dcc52
+  metadata.gz: fffaca550500aa79a5df9761f87a493eb94d35461c1e3cdb0d4b03fbfac00bc8289948a051adcab4237a5088f82c34e93b6be5178622096c2378d73773b15fd5
+  data.tar.gz: 1f8b328b62b810db88d7d1f496325d98f4f8fe05a627cf6f371d52ffb6aed5cedb13905b4fa0567014bf36d5a530977e5b2bfccaab5380157acf8b46c551cec5

data/lib/paraxial/checker.rb

@@ -130,21 +130,25 @@ module Paraxial
     end
 
     def self.ban_ip_msg(ip, length, msg)
-      local_ban(ip)
-
-      uri = URI.parse(Paraxial::Helpers.get_ruby_ban_url)
-      body =
-        {
-          bad_ip: ip,
-          ban_length: length,
-          msg: msg,
-          api_key: Paraxial::Helpers.get_api_key
-        }
-      r = Net::HTTP.post(uri, body.to_json, @headers)
-      if r.code == '200'
-        :ok
+      if allow_ip?(ip) == true
+        local_ban(ip)
+
+        uri = URI.parse(Paraxial::Helpers.get_ruby_ban_url)
+        body =
+          {
+            bad_ip: ip,
+            ban_length: length,
+            msg: msg,
+            api_key: Paraxial::Helpers.get_api_key
+          }
+        r = Net::HTTP.post(uri, body.to_json, @headers)
+        if r.code == '200'
+          :ok
+        else
+          :error
+        end
       else
-        :error
+        :already_banned
       end
     end
 

data/lib/paraxial/cli.rb

@@ -15,9 +15,11 @@ module Paraxial
     option :repo_owner, type: :string, desc: 'Repository owner'
     option :repo_name, type: :string, desc: 'Repository name'
     option :pr_number, type: :numeric, desc: 'Pull request number'
+    option :exit_code, type: :boolean, default: false, desc: 'Non-zero exit code if findings > 0'
+    option :debug_rubocop, type: :boolean, default: false, desc: "Run rubocop in debug mode"
 
     def scan
-      puts '[Paraxial] Scan starting...'
+      puts "[Paraxial] v#{Paraxial::VERSION} Scan starting..."
       if check_rubocop_configuration
         puts '[Paraxial] .rubocop.yml is valid.'
       else
@@ -27,7 +29,6 @@ module Paraxial
         puts '- rubocop-erb'
       end
 
-
       if Paraxial::Helpers.get_api_key.nil?
         puts '[Paraxial] Environment variable PARAXIAL_API_KEY not found'
       else
@@ -36,9 +37,17 @@ module Paraxial
         repo_owner = options[:repo_owner]
         repo_name = options[:repo_name]
         pr_number = options[:pr_number]
+        exit_code = options[:exit_code]
 
         cops = 'Paraxial,Security/Eval,Security/IoMethods,Security/JSONLoad,Security/MarshalLoad,Security/Open,Security/YAMLLoad'
-        rubocop = `rubocop --require paraxial --only #{cops} --disable-pending-cops --format json`
+        if options[:debug_rubocop]
+          puts '[Paraxial] rubocop debug enabled'
+          rubocop = `rubocop --require paraxial --only #{cops} --disable-pending-cops --format json 2>/dev/null`
+          debug_rubocop = `rubocop -d --require paraxial --only #{cops} --disable-pending-cops 2>&1`
+          puts debug_rubocop
+        else
+          rubocop = `rubocop --require paraxial --only #{cops} --disable-pending-cops --format json`
+        end
         lockfile = File.read('./Gemfile.lock')
         api_key = ENV['PARAXIAL_API_KEY']
         uri = URI.parse(Paraxial::Helpers.get_paraxial_url + '/api/ruby_scan')
@@ -95,6 +104,10 @@ module Paraxial
         else
           :ok
         end
+
+        if exit_code and (findings.length > 0)
+          exit(1)
+        end
       end
     end
 

data/lib/paraxial/initializers/startup.rb

@@ -9,7 +9,7 @@ Bundler.setup
 
 unless Rails.env.test? || File.basename($0) == 'rake' || defined?(Rails::Generators)
   Rails.application.config.to_prepare do
-    puts '[Paraxial] Agent starting...'
+    puts "[Paraxial] v#{Paraxial::VERSION} Agent starting..."
     api_key = Paraxial::Helpers.get_api_key
 
     if api_key.nil?

data/lib/paraxial/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Paraxial
-  VERSION = '0.9.1'
+  VERSION = '1.0.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: paraxial
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 1.0.1
 platform: ruby
 authors:
 - Michael Lubas
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2024-09-24 00:00:00.000000000 Z
+date: 2024-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rspec