pii_safe_schema 1.3.1 → 1.3.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37742fbd9ebda37050c8e0b851cbfaba6a8a6eedc70283e46a393bcdc2baf1c0
-  data.tar.gz: 285e70b4e2aabf1a089471044c6495f685fa9b187cbc5514a42e7d3eafbd8b4b
+  metadata.gz: 4f677294564a5231127e5e758c457cd3c531f1cfcd58068804ff8ea4a7f686b8
+  data.tar.gz: 7284fd0894a4faa5daf6e19c694e21d959c23facab595319fb82a451089d3007
 SHA512:
-  metadata.gz: 1528541842d2b5af3a78d06ec7711eccb372f317b8f12fc9850435ce4d326dae796ebcbc43c8b2dd355dd24d737eb60c3d4a8d86a098a5d1a784bb06168e9dc6
-  data.tar.gz: cb2af9ed4ac8019c201394ad2e3a4ec5263ce56ca2c1a631b980c8f4252eb4ce2928f003544bdbb1136cf92dfecf6a9b08e9109c3d1958db23e4aa9dd3f96e60
+  metadata.gz: 47451b3917dd536b31ef3048b8a86171df58bc02bbc58c9b7b3a4c790805f89bef5d178e876ebf6d577d17b4245e9ba47be28ca11cff82ea0486420399a3bfc9
+  data.tar.gz: d4bffc7c730d25604572a25b92c7b1ebc16f87db519ad16a62cc8d2c728c6950775dcc1fbfebe29dac6e6c82423483fbbe2ffe3280f0d101a307c4e369c5e9d3

data/.github/workflows/default.yml

@@ -0,0 +1,66 @@
+name: Default
+
+# This workflow runs on all pushes to the repo so we can test changes and provide
+# fast feedback. It also gets run when a pull request is created so that we can
+# run the Sonarqube quality gate (which needs information from the PR). Subsequent
+# pushes to the branch will provide PR information of any open PRs.
+on:
+  push:
+  pull_request:
+    types: [opened, reopened]
+
+concurrency:
+  group: default-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  preflight_check:
+    name: Preflight Check
+    runs-on: ubuntu-latest
+    steps:
+      # Need to fetch all refs, so we can check if the version has been bumped
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      - name: Lint
+        uses: wealthsimple/toolbox-script@v1
+        with:
+          script: toolbox.ruby.lint.run();
+
+      - name: Test
+        uses: wealthsimple/toolbox-script@v1
+        with:
+          script: toolbox.ruby.test.run();
+
+  publish:
+    name: Publish package
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/master'
+    needs:
+      - preflight_check
+    steps:
+      - uses: actions/checkout@v2
+
+      - uses: ruby/setup-ruby@v1
+        with:
+          bundler-cache: true
+
+      - name: Release the gem
+        run: |
+          mkdir -p ~/.gem
+          cat << EOF > ~/.gem/credentials
+          ---
+          :github: Bearer ${GITHUB_TOKEN}
+          :rubygems_api_key: ${RUBYGEMS_API_KEY}
+          EOF
+          chmod 0600 ~/.gem/credentials
+          git config user.email "noreply@wealthsimple.com"
+          git config user.name "Wolfbot"
+          bundle exec rake release
+        env:
+          RUBYGEMS_API_KEY: ${{ secrets.RUBYGEMS_API_KEY }}

data/.rubocop.yml

@@ -1,3 +1,7 @@
+---
 inherit_gem:
   ws-style:
     - default.yml
+
+AllCops:
+  TargetRubyVersion: 2.6

data/.ruby-version

@@ -1 +1 @@
-2.6.5
+2.7.2

data/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 1.3.4 - 2021-10-21
+### Changed
+- Switched to Github Actions
+
+## 1.3.4 - 2021-03-15
+### Changed
+- Add support for Rails 7
+
+## 1.3.3 - 2021-03-15
+### Changed
+- Pull CI images from ECR repository
+
+## 1.3.2 - 2021-03-15
+### Changed
+- Update development to Ruby 2.7.2
+
 ## 1.3.1 - 2019-11-06
 ### Fixed
 - Passing arguments to `rake pii_safe_schema:generate_migrations` actually works
@@ -28,7 +44,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Added MIT License
 
 ## 1.0.4 - 2019-4-16
-### Fixed 
+### Fixed
 - converted any hyphens to underscores for consistency.
 
 ## 1.0.3

data/README.md

@@ -1,4 +1,5 @@
-# PII Safe Schema [![CircleCI](https://circleci.com/gh/wealthsimple/pii_safe_schema.svg?style=svg)](https://circleci.com/gh/wealthsimple/pii_safe_schema) [![Coverage Status](https://coveralls.io/repos/github/wealthsimple/pii_safe_schema/badge.svg?branch=master)](https://coveralls.io/github/wealthsimple/pii_safe_schema?branch=master)
+# PII Safe Schema
+![CI](https://github.com/wealthsimple/pii_safe_schema/actions/workflows/default.yml/badge.svg)
 
 Schema migration tool for checking and adding comments on *Personally Identifiable Information* (PII) columns in Rails.
 
@@ -96,4 +97,4 @@ git clone https://github.com/wealthsimple/pii_safe_schema.git
 cd pii_safe_schema
 bundle install
 bundle exec rspec
-```
+```

data/lib/pii_safe_schema/configuration.rb

@@ -27,11 +27,10 @@ module PiiSafeSchema
     end
 
     def datadog_client
-      @datadog_client ||= begin
-        KNOWN_DD_CLIENTS.each do |client|
-          return client.safe_constantize if defined?(client)
+      @datadog_client ||=
+        KNOWN_DD_CLIENTS.find do |client|
+          client.safe_constantize if defined?(client)
         end
-      end
     end
 
     def ignore_tables
@@ -47,7 +46,7 @@ module PiiSafeSchema
     def validate_ignore(ignore_params)
       raise_config_error(:ignore) unless ignore_params.is_a?(Hash)
 
-      ignore_params.values.each do |ip|
+      ignore_params.each_value do |ip|
         raise_config_error(:ignore) unless valid_column_list?(ip) || ip == :*
       end
       true

data/lib/pii_safe_schema/migration_generator.rb

@@ -18,9 +18,7 @@ module PiiSafeSchema
         migration_file = generator.create_migration_file
         file_lines = File.open(migration_file, 'r').read.split("\n")
         change_line = file_lines.find_index { |i| /def change/.match(i) }
-        new_contents = file_lines[0..change_line] +
-                       generated_lines +
-                       file_lines[change_line + 1..-1]
+        new_contents = file_lines[0..change_line] + generated_lines + file_lines[change_line + 1..]
 
         File.open(migration_file, 'w') do |f|
           f.write(new_contents.join("\n"))
@@ -33,8 +31,8 @@ module PiiSafeSchema
       def generate_migration_lines(table, columns)
         migration_lines = columns.map do |c|
           "#{' ' * (safety_assured? ? 6 : 4)}"\
-          "change_column :#{table}, :#{c.column.name}, :#{c.column.type}, "\
-          "comment: \'#{c.suggestion.to_json}\'"\
+            "change_column :#{table}, :#{c.column.name}, :#{c.column.type}, "\
+            "comment: \'#{c.suggestion.to_json}\'"\
         end
         wrap_in_safety_assured(migration_lines)
       end

data/lib/pii_safe_schema/version.rb

@@ -1,3 +1,3 @@
 module PiiSafeSchema
-  VERSION = '1.3.1'.freeze
+  VERSION = '1.3.5'.freeze
 end

data/lib/pii_safe_schema.rb

@@ -55,7 +55,7 @@ module PiiSafeSchema
     end
   end
 
-  def self.print_help!(do_exit: true) # rubocop:disable Metrics/MethodLength
+  def self.print_help!(do_exit: true)
     puts <<~HELPMSG # rubocop:disable Rails/Output
       Usage:
         rake pii_safe_schema:generate_migrations [table:column:annotation_type] ...

data/lib/tasks/pii_safe_schema.rake

@@ -11,7 +11,7 @@ namespace :pii_safe_schema do
 
     exit(0) # forces rake to stop after this and not assume args are tasks
   rescue ActiveRecord::StatementInvalid, PiiSafeSchema::InvalidColumnError => e
-    raise e if e.class == ActiveRecord::StatementInvalid && e.cause.class != PG::UndefinedTable
+    raise e if e.instance_of?(ActiveRecord::StatementInvalid) && e.cause.class != PG::UndefinedTable
 
     puts <<~HEREDOC
       Unable to generate PII annotation migration. Either the underlying table or column does not exist:

data/pii_safe_schema.gemspec

@@ -10,6 +10,8 @@ Gem::Specification.new do |s|
 
   s.summary       = 'Schema migration tool for checking and adding comments on PII columns.'
   s.homepage      = 'https://github.com/wealthsimple/pii_safe_schema'
+  s.license       = "MIT"
+  s.required_ruby_version = Gem::Requirement.new(">= 2.6")
 
   s.files = `git ls-files -z`.split("\x0").reject do |f|
     f.match(%r{^(test|spec|features)/})
@@ -19,18 +21,16 @@ Gem::Specification.new do |s|
   s.executables   = s.files.grep(%r{^exe/}) { |f| File.basename(f) }
   s.require_paths = ['lib']
 
-  s.add_dependency 'activesupport', '>= 5', '< 7'
   s.add_dependency 'colorize'
-  s.add_dependency 'rails', '>= 5', '< 7'
+  s.add_dependency 'rails', '>= 5', '< 8'
 
   s.add_development_dependency 'bundler', '>= 1.16'
   s.add_development_dependency 'bundler-audit'
-  s.add_development_dependency 'coveralls'
   s.add_development_dependency 'dogstatsd-ruby'
   s.add_development_dependency 'git'
   s.add_development_dependency 'guard-rspec'
   s.add_development_dependency 'pry'
-  s.add_development_dependency 'rails', '>= 5.2.3', '< 7'
+  s.add_development_dependency 'rails', '>= 5', '< 8'
   s.add_development_dependency 'rake', '>= 10.0'
   s.add_development_dependency 'rspec', '< 4', '>= 3.0'
   s.add_development_dependency 'rspec-collection_matchers'

metadata

@@ -1,35 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: pii_safe_schema
 version: !ruby/object:Gem::Version
-  version: 1.3.1
+  version: 1.3.5
 platform: ruby
 authors:
 - Alexi Garrow
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-11-08 00:00:00.000000000 Z
+date: 2022-01-04 00:00:00.000000000 Z
 dependencies:
-- !ruby/object:Gem::Dependency
-  name: activesupport
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '5'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '7'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '5'
-    - - "<"
-      - !ruby/object:Gem::Version
-        version: '7'
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
@@ -53,7 +33,7 @@ dependencies:
         version: '5'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '8'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -63,7 +43,7 @@ dependencies:
         version: '5'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '8'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -92,20 +72,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-- !ruby/object:Gem::Dependency
-  name: coveralls
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
 - !ruby/object:Gem::Dependency
   name: dogstatsd-ruby
   requirement: !ruby/object:Gem::Requirement
@@ -168,20 +134,20 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: '5'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '8'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: '5'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7'
+        version: '8'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -200,22 +166,22 @@ dependencies:
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '3.0'
     - - "<"
       - !ruby/object:Gem::Version
         version: '4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '3.0'
     - - "<"
       - !ruby/object:Gem::Version
         version: '4'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rspec-collection_matchers
   requirement: !ruby/object:Gem::Requirement
@@ -335,9 +301,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".circleci/config.yml"
 - ".github/CODEOWNERS"
 - ".github/PULL_REQUEST_TEMPLATE.md"
+- ".github/workflows/default.yml"
 - ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
@@ -363,7 +329,8 @@ files:
 - lib/tasks/pii_safe_schema.rake
 - pii_safe_schema.gemspec
 homepage: https://github.com/wealthsimple/pii_safe_schema
-licenses: []
+licenses:
+- MIT
 metadata: {}
 post_install_message: 
 rdoc_options: []
@@ -373,14 +340,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.6'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Schema migration tool for checking and adding comments on PII columns.

data/.circleci/config.yml

@@ -1,118 +0,0 @@
-version: 2
-
-defaults: &defaults
-  working_directory: /home/circleci/wealthsimple
-  docker:
-    - image: circleci/ruby:2.6.5
-    - image: circleci/postgres:9.5.9-alpine
-      environment:
-        POSTGRES_USER: circleci
-        POSTGRES_DB: pii_safe_schema_test
-
-# These are common snippets that are referenced in multiple workflows.
-references:
-  attach_code_workspace: &attach_code_workspace
-    attach_workspace:
-      at: /home/circleci/wealthsimple
-
-  restore_bundle_dependencies: &restore_bundle_dependencies
-    run:
-      name: Restore bundle dependencies from workspace
-      command: bundle --path vendor/bundle
-
-jobs:
-  checkout_and_bundle:
-    <<: *defaults
-    steps:
-      - checkout
-      - run:
-          command: bundle install --jobs=4 --retry=3 --path vendor/bundle
-      - persist_to_workspace:
-          root: .
-          paths: .
-
-  rspec:
-    <<: *defaults
-    steps:
-      - *attach_code_workspace
-      - *restore_bundle_dependencies
-      - run:
-          command: sudo apt install -y postgresql-client || true
-      - run:
-          command: bundle exec bundle-audit update && bundle exec bundle-audit check
-      - run:
-          command: bundle exec rspec
-
-  lint_check:
-    <<: *defaults
-    steps:
-      - *attach_code_workspace
-      - *restore_bundle_dependencies
-      - run:
-          command: bundle exec rubocop
-
-  vulnerability_check:
-    <<: *defaults
-    steps:
-      - *attach_code_workspace
-      - *restore_bundle_dependencies
-      - run:
-          command: bundle exec bundle-audit update && bundle exec bundle-audit check
-
-  release:
-    <<: *defaults
-    steps:
-      - add_ssh_keys:
-          fingerprints:
-            - "46:b5:cb:ee:57:dc:14:95:31:be:12:13:4f:11:94:a4"
-      - *attach_code_workspace
-      - *restore_bundle_dependencies
-      - run:
-          name: Release to rubygems.org
-          command: |
-            mkdir ~/.gem
-            echo ":rubygems_api_key: ${RUBYGEMS_API_KEY}" >> ~/.gem/credentials
-            chmod 600 ~/.gem/credentials
-            mkdir -p ~/.ssh
-            echo "github.com,192.30.253.112 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==" >> ~/.ssh/known_hosts
-            bundle exec rake release
-
-workflows:
-  version: 2
-  build_and_test:
-    jobs:
-      - checkout_and_bundle:
-          context: wealthsimple
-      - rspec:
-          requires:
-            - checkout_and_bundle
-      - lint_check:
-          requires:
-            - checkout_and_bundle
-      - vulnerability_check:
-          requires:
-            - checkout_and_bundle
-      - release:
-          context: wealthsimple
-          filters:
-            branches:
-              only: master
-          requires:
-          - rspec
-          - lint_check
-          - vulnerability_check
-
-  security-audit:
-    triggers:
-      - schedule:
-          # 11:45 am UTC: 6:45 am EST / 7:45 am EDT
-          cron: "45 11 * * *"
-          filters:
-            branches:
-              only: master
-    jobs:
-      - checkout_and_bundle:
-          context: wealthsimple
-      - vulnerability_check:
-          requires:
-            - checkout_and_bundle