pronto-brakeman 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 8a55284d7443c1cbaf3735b465376e4d23bdab60
+  data.tar.gz: 6b2fffb044c8760f08939e84150d4cfea6de145c
+SHA512:
+  metadata.gz: e9daf5cb3325ce8ed826e16da621c5849fa3db98fb397abefae1d968eb71458373823aafb3a66865632d163df6cd5fb0de29e7c77b3893f39548cf3d5bf22c5b
+  data.tar.gz: 2aec90714923c89dc643fe1e87637fba03145eaed1d873eb184279bcb3bfe9c312973ddf05831193cf406302d28b21affcb3d33a84e06752aaec958d73544550

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2013 Mindaugas Mozūras
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,7 @@
+# Pronto runner for Brakeman
+
+[![Code Climate](https://codeclimate.com/github/mmozuras/pronto-brakeman.png)](https://codeclimate.com/github/mmozuras/pronto-brakeman)
+[![Build Status](https://travis-ci.org/mmozuras/pronto-brakeman.png)](https://travis-ci.org/mmozuras/pronto-brakeman)
+[![Dependency Status](https://gemnasium.com/mmozuras/pronto-brakeman.png)](https://gemnasium.com/mmozuras/pronto-brakeman)
+
+Pronto runner for [Brakeman](https://github.com/presidentbeef/brakeman), security vulnerability scanner for RoR. [What is Pronto?](https://github.com/mmozuras/pronto)

data/lib/pronto/brakeman.rb

@@ -0,0 +1,51 @@
+require 'pronto'
+require 'brakeman'
+
+module Pronto
+  class Brakeman < Runner
+    def run(patches)
+      return [] unless patches
+
+      ruby_patches = patches.select { |patch| patch.additions > 0 }
+                            .select { |patch| ruby_file?(patch.new_file_full_path) }
+
+      files = ruby_patches.map { |patch| patch.new_file_full_path.to_s }
+
+      if files.any?
+        output = ::Brakeman.run(app_path: '.',
+                                output_formats: [:to_s],
+                                only_files: files)
+        messages_for(ruby_patches, output)
+      else
+        []
+      end
+    end
+
+    def messages_for(ruby_patches, output)
+      result = []
+
+      output.checks.all_warnings.each do |warning|
+        patch = patch_for_warning(ruby_patches, warning)
+
+        line = patch.added_lines.select do |added_line|
+          added_line.new_lineno == warning.line
+        end.first
+
+        result << new_warning_message(line, warning) if line
+      end
+
+      result
+    end
+
+    def new_warning_message(line, warning)
+      Message.new(line.patch.delta.new_file[:path], line, :warning,
+                  "Possible security vulnerability: #{warning.message}")
+    end
+
+    def patch_for_warning(ruby_patches, warning)
+      ruby_patches.select do |patch|
+        patch.new_file_full_path.to_s == warning.file
+      end.first
+    end
+  end
+end

data/lib/pronto/brakeman/version.rb

@@ -0,0 +1,5 @@
+module Pronto
+  module BrakemanVersion
+    VERSION = '0.1.0'
+  end
+end

metadata

@@ -0,0 +1,104 @@
+--- !ruby/object:Gem::Specification
+name: pronto-brakeman
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Mindaugas Mozūras
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-10-07 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: pronto
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 0.1.0
+- !ruby/object:Gem::Dependency
+  name: brakeman
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.1.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 10.1.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 10.1.0
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.14.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 2.14.0
+description: 
+email: mindaugas.mozuras@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/pronto/brakeman/version.rb
+- lib/pronto/brakeman.rb
+- LICENSE
+- README.md
+homepage: http://github.org/mmozuras/pronto-brakeman
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: 1.3.6
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.0.7
+signing_key: 
+specification_version: 4
+summary: Pronto runner for Brakeman, security vulnerability scanner for RoR
+test_files: []
+has_rdoc: