pronto-brakeman 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 018b0353555cc3a3fd612185378ce1bc46b8358b
-  data.tar.gz: 874373a73280a5f722603e6f39e804f374875efb
+  metadata.gz: d2671f9897b66aa34b11db36114386c2d1023b04
+  data.tar.gz: f1d0369f39adbfe1ce3eded82589d15296ee3d37
 SHA512:
-  metadata.gz: 6b4bd15abfeccf7b0e35e70145414cc54079da5071ece51abea3ab8192a7c5b88440b86de8f2fd79a35c2aaeb781f84d29baf32dc91f685afe3dfbb90cc2edbc
-  data.tar.gz: 722ebdd397081555324e72397bb683dcb127b350eb1fdcff2fdf81a34b329976bd41ca11f44594aa4d0d2678bf205637318fab2e934ef1e8fda757e98084e628
+  metadata.gz: 73fa6c38b8da1d48d2b68f4f31396f072cad5a42cff7a445f39ae4d0d95f1229189fe1a7ceda6cb8fd1197b16f33cc69571be639dccb74c569ec7c0fd911909c
+  data.tar.gz: 4861ae69b9249b7530f65517cf3427187827593680872d3cc04595c4816f0aeb558431c2d29978b2bc28173a26f3db1a14b3e403f19413ff5aafaf4f46ede36b

data/LICENSE

@@ -1,6 +1,6 @@
 The MIT License
 
-Copyright (c) 2015 Mindaugas Mozūras
+Copyright (c) 2016 Mindaugas Mozūras
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/lib/pronto/brakeman/version.rb

@@ -1,5 +1,5 @@
 module Pronto
   module BrakemanVersion
-    VERSION = '0.5.0'
+    VERSION = '0.6.0'.freeze
   end
 end

data/lib/pronto/brakeman.rb

@@ -3,22 +3,17 @@ require 'brakeman'
 
 module Pronto
   class Brakeman < Runner
-    def run(patches, _)
-      return [] unless patches
-
-      ruby_patches = patches.select { |patch| patch.additions > 0 }
-        .select { |patch| ruby_file?(patch.new_file_full_path) }
+    def run
+      files = ruby_patches.map do |patch|
+        patch.new_file_full_path.relative_path_from(repo_path).to_s
+      end
 
-      files = ruby_patches.map { |patch| patch.new_file_full_path.to_s }
+      return [] unless files.any?
 
-      if files.any?
-        output = ::Brakeman.run(app_path: ruby_patches.first.repo.path,
-                                output_formats: [:to_s],
-                                only_files: files)
-        messages_for(ruby_patches, output).compact
-      else
-        []
-      end
+      output = ::Brakeman.run(app_path: repo_path,
+                              output_formats: [:to_s],
+                              only_files: files)
+      messages_for(ruby_patches, output).compact
     rescue ::Brakeman::NoApplication
       []
     end
@@ -27,19 +22,19 @@ module Pronto
       output.filtered_warnings.map do |warning|
         patch = patch_for_warning(ruby_patches, warning)
 
-        if patch
-          line = patch.added_lines.find do |added_line|
-            added_line.new_lineno == warning.line
-          end
-
-          new_message(line, warning) if line
+        next unless patch
+        line = patch.added_lines.find do |added_line|
+          added_line.new_lineno == warning.line
         end
+
+        new_message(line, warning) if line
       end
     end
 
     def new_message(line, warning)
       Message.new(line.patch.delta.new_file[:path], line, :warning,
-                  "Possible security vulnerability: #{warning.message}")
+                  "Possible security vulnerability: #{warning.message}",
+                  nil, self.class)
     end
 
     def patch_for_warning(ruby_patches, warning)

data/pronto-brakeman.gemspec

@@ -32,8 +32,8 @@ Gem::Specification.new do |s|
   s.extra_rdoc_files = ['LICENSE', 'README.md']
   s.require_paths = ['lib']
 
-  s.add_runtime_dependency('pronto', '~> 0.5.0')
-  s.add_runtime_dependency('brakeman', '~> 3.1.0')
+  s.add_runtime_dependency('pronto', '~> 0.6.0')
+  s.add_runtime_dependency('brakeman', '~> 3.2', '>= 3.2.0')
   s.add_development_dependency('rake', '~> 10.4')
   s.add_development_dependency('rspec', '~> 3.3')
   s.add_development_dependency('rspec-its', '~> 1.2')

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pronto-brakeman
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Mindaugas Mozūras
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-11-10 00:00:00.000000000 Z
+date: 2016-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pronto
@@ -16,28 +16,34 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.6.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.0
+        version: 0.6.0
 - !ruby/object:Gem::Dependency
   name: brakeman
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: '3.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.1.0
+        version: '3.2'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement